Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Weaponizing Management Consoles: The FortiClient EMS Exploitation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:25:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arctic Wolf Labs report #CVE_2026_35616 vulnerability #EKZ Infostealer analysis #endpoint security bypass #FortiClient EMS exploit #session cookie hijacking
Information Security News
FortiClient EMS Exploit: EKZ Infostealer Malware Guide
Analyze the recent FortiClient EMS exploit. Learn how attackers leverage CVE-2026-35616 to deliver EKZ Infostealer and bypass endpoint protection.
14 views
Daily Writeups
⤷ Title: The BlackToad Chronology: Masking Malware Through Network Severance
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:06:14 +0000
════════════════════════
⌗ Tags: #Malware #BlackToad malware analysis #cyber evasion tactics #JUMPSEC threat intelligence #network disruption technique #Nigerian cybercrime network #Remcos RAT payload
Information Security News
BlackToad Malware Analysis: Remcos RAT and Network Evasion
Read our BlackToad malware analysis. Learn how this Nigerian cybercrime group uses network disconnection to blind EDR tools and drop the Remcos RAT.
16 views
Daily Writeups
⤷ Title: Severe Plesk Privilege Escalation Flaw Patched in Linux Versions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Linux Security #Plesk #privilege escalation #Server Security #Xpath injection
Daily CyberSecurity
Severe Plesk Privilege Escalation Flaw Patched in Linux Versions
Secure your servers against a major Plesk privilege escalation flaw. Learn how the latest CVE-2026-44962 patch protects Linux infrastructure.
12 views
Daily Writeups
⤷ Title: The Windows 10 Sunset: HP’s Market Opportunity and the Consumer ESU Deadline
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:37:32 +0000
════════════════════════
⌗ Tags: #Technology #Windows #consumer ESU program #enterprise update costs #HP hardware refresh #IoT LTSC alternatives #Microsoft security lifecycle #Windows 10 extended support
Daily CyberSecurity
The Windows 10 Sunset: HP's Market Opportunity and the Consumer ESU Deadline
Learn about the Windows 10 extended support lifecycle. Discover consumer ESU details, enterprise update costs, and HP hardware trends.
14 views
Daily Writeups
⤷ Title: The Dawn of AV2: AOMedia Finalizes Next-Generation Video Compression
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:32:58 +0000
════════════════════════
⌗ Tags: #Technology #AOMedia video standard #AV2 codec v1.0.0 release #next_generation streaming codec #open_source video infrastructure #royalty_free video compression #VLC DAV2D decoder
Daily CyberSecurity
The Dawn of AV2: AOMedia Finalizes Next-Generation Video Compression
Explore the historic AV2 codec v1.0.0 release by AOMedia. Learn about its royalty-free compression, VLC integration, and the future of streaming.
18 views
Daily Writeups
⤷ Title: Hard-Coded Third-Party API Key Exposed in Frontend Environment Object
════════════════════════
𐀪 Author: Prajwol Acharya
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:25:17 GMT
════════════════════════
⌗ Tags: #responsible_disclosure #bug_bounty #cybersecurity #bug_bounty_writeup
Medium
Hard-Coded Third-Party API Key Exposed in Frontend Environment Object
During testing of a ticketing platform, I discovered a live third-party Personal Access Token (PAT) hard-coded inside a client-side…
8 views
Daily Writeups
⤷ Title: Account Take Over via Password Reset — India’s Top Central Governement Platform (50k User’s Account…
════════════════════════
𐀪 Author: Gokuleswaran B
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:20:59 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #ethical_hacking #account_take_over #bug_bounty_tips #bug_bounty
Medium
Account Take Over via Password Reset — India’s Top Central Governement Platform (50k User’s Account…
Which Government? — Will be Released Soon After Vulnerability is Fixed!
11 views
Daily Writeups
⤷ Title: Why Developers Ignore Security Alerts and How DevSecOps Can Fix It
════════════════════════
𐀪 Author: Puja Maheshvari
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:42:29 GMT
════════════════════════
⌗ Tags: #cicd #devsecops #devops #cloud_security #application_security
Medium
Why Developers Ignore Security Alerts and How DevSecOps Can Fix It
Security alerts are supposed to help teams build safer software.
14 views
Daily Writeups
⤷ Title: The Hat You Wear Determines the War You Fight
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:36:03 GMT
════════════════════════
⌗ Tags: #infosec #pentesting #cybersecurity #cybersecurity_awareness #ethical_hacking
Medium
The Hat You Wear Determines the War You Fight
Not every hacker is a criminal. Not every criminal calls themselves a hacker. In a world where 600 million cyberattacks happen every single…
22 views
Daily Writeups
⤷ Title: Panduan Lab Portwigger (Lab: SQL injection attack, querying the database type and version on…
════════════════════════
𐀪 Author: Dwi Putra
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:02:15 GMT
════════════════════════
⌗ Tags: #ctf_writeup #sql_injection #portswigger_lab #portswigger #penetration_testing
Medium
Panduan Lab Portwigger (Lab: SQL injection attack, querying the database type and version on…
Pada lab kali ini, kita akan mengeksploitasi celah SQL Injection pada fitur filter kategori produk menggunakan teknik UNION untuk…
16 views
Daily Writeups
⤷ Title: HiveAir CTF — Full Walkthrough
════════════════════════
𐀪 Author: Abubakar Sadik Yakubu
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:45:27 GMT
════════════════════════
⌗ Tags: #sql_injection #ctf #web_security #cybersecurity #penetration_testing
Medium
HiveAir CTF — Full Walkthrough
Full walkthrough of the HiveAir International Airport CTF — a deliberately vulnerable Node/Express web application built by Hive Consult…
18 views
Daily Writeups
⤷ Title: SINDEL CTF — IDOR Masterclass Writeup
════════════════════════
𐀪 Author: Abubakar Sadik Yakubu
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:15:35 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #penetration_testing #web_security #ctf
Medium
SINDEL CTF — IDOR Masterclass Writeup
18/18 flags captured across 11 IDOR categories on the SINDEL (“Shadow Intelligence Network”) lab. Engagement performed black-box, starting…
16 views
Daily Writeups
⤷ Title: Database SQL Basics — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:52:21 GMT
════════════════════════
⌗ Tags: #database #tryhackme_writeup #tryhackme #sql #tryhackme_walkthrough
Medium
Database SQL Basics — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: Database SQL Basics
Room URL: https://tryhackme.com/room/databasesqlbasics
Difficulty: Easy
Please attempt the…
23 views
Daily Writeups
⤷ Title: Brute It — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Sunjid Ahmed Siyem
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:13:26 GMT
════════════════════════
⌗ Tags: #brute_it #tryhackme
Medium
Brute It — TryHackMe Walkthrough
Task 1 — About this box
19 views
Daily Writeups
⤷ Title: Guided Pentest: Infrastructure | TryHackMe Write-up
════════════════════════
𐀪 Author: Farros FR
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 00:00:32 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #tryhackme
Medium
Guided Pentest: Infrastructure | TryHackMe Write-up
Non-members are welcome to access the full story here.
25 views
Daily Writeups
⤷ Title: Panduan Lab Portwigger (Lab: SQL injection attack, querying the database type and version on MySQL…
════════════════════════
𐀪 Author: Dwi Putra
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 04:03:09 GMT
════════════════════════
⌗ Tags: #ctf_writeup #portswigger #pentesting #sql_injection #ctf
Medium
Panduan Lab Portwigger (Lab: SQL injection attack, querying the database type and version on MySQL…
Pada lab ini, kita akan mengeksploitasi celah SQL Injection pada fitur filter kategori produk menggunakan teknik UNION untuk mengekstrak…
34 views
Daily Writeups
⤷ Title: AI Honeypots Snare Decentralized Cryptominer Dropper
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 06:03:24 +0000
════════════════════════
⌗ Tags: #Malware #Akamai SIRT #cryptomining #Go malware #libp2p #Ollama Security #P2P Malware #threat intelligence #XMRig
Daily CyberSecurity
AI Honeypots Snare Decentralized Cryptominer Dropper
Akamai SIRT uncovers a new P2P cryptominer malware threat. Learn how Ollama endpoint attacks use decentralized libp2p networks to evade detection.
31 views
Daily Writeups
⤷ Title: How Bug Bounty Hunters Are Using Claude Code.
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 06:27:42 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #claude_code #bug_bounty_tips #bug_bounty_writeup
Medium
How Bug Bounty Hunters Are Using Claude Code.
The community has been quietly building something powerful. I went and found it.
24 views
Daily Writeups
⤷ Title: Google Dorks Google Ko Bana Do Apna Hacking Tool: Free Mein Bugs Dhundho! (Hinglish Mein)
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 06:25:45 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #github_dorking #google_dork #ethical_hacking
Medium
Google Dorks Google Ko Bana Do Apna Hacking Tool: Free Mein Bugs Dhundho! (Hinglish Mein)
Series: Bug Bounty Zero se Hero 🦸 | Article #11 By HackerMD | 17 min read
20 views
Daily Writeups
⤷ Title: This CVE Has Only 5 Reports on HackerOne — But a 94% Chance of Being Exploited Right Now
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 06:48:59 GMT
════════════════════════
⌗ Tags: #hacking #critical_thinking #vulnerability #bug_bounty #cybersecurity
Medium
This CVE Has Only 5 Reports on HackerOne — But a 94% Chance of Being Exploited Right Now
A Deep Dive into CVE-2023–38646’s Ghost and Why Your “Fixed” Instance Might Still Be Vulnerable
16 views
Daily Writeups
⤷ Title: Penetration Testing vs Red Teaming vs CTF vs Bug Bounty — The Complete Comparison
════════════════════════
𐀪 Author: Cyberologist
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 05:56:55 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #cybersecurity #ctf #red_team
Medium
Penetration Testing vs Red Teaming vs CTF vs Bug Bounty — The Complete Comparison
These four terms get used interchangeably in cybersecurity conversations, job listings, and learning roadmaps. They are not the same thing…
17 views