Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Grandoreiro Banking Trojan Evades Defense via Lookalike Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 06:00:35 +0000
════════════════════════
⌗ Tags: #Malware #Banking Trojan #DLL side_loading #Financial Cybercrime #Grandoreiro #WatchGuard
Daily CyberSecurity
Grandoreiro Banking Trojan Evades Defense via Lookalike Software
A highly dangerous threat vector is actively menacing global financial networks. Specifically, the notorious Grandoreiro banking trojan has resurfaced with a stealthy distribution mechanism. Cyber…
28 views
Daily Writeups
⤷ Title: How I was able to Modify Ratings on a Target and Cause Business Impact
════════════════════════
𐀪 Author: RivuDon
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:08:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #bug_bounty #bug_bounty_tips #infosec
Medium
How I was able to Modify Ratings on a Target and Cause Business Impact
Learn how I found this interesting bug
20 views
Daily Writeups
⤷ Title: Bug Bounty Bootcamp #41: Remote Command Execution — From Innocent Inputs to Full Server Takeover
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:07:22 GMT
════════════════════════
⌗ Tags: #penetration_testing #technology #bug_bounty #cybersecurity #hacking
Medium
Bug Bounty Bootcamp #41: Remote Command Execution — From Innocent Inputs to Full Server Takeover
A stock checker that pings an IP. A comment box that echoes your name. These simple features hide a terrifying truth: they might be…
20 views
Daily Writeups
⤷ Title: Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026–24884) to Achieve Arbitrary File…
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:05:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #nodejs #application_security #infosec
Medium
Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026–24884) to Achieve Arbitrary File…
Bug hunting is rarely about running an automated scanner and waiting for a critical alert. More often than not, it’s about staring at a…
15 views
Daily Writeups
⤷ Title: One Agent, Five Zero-Days: Turning Past CVEs Into SAST Rules
════════════════════════
𐀪 Author: Philip Garabandic
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:04:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #openclaw #appsec #ai #bug_bounty
Medium
One Agent, Five Zero-Days: Turning Past CVEs Into SAST Rules
Introduction
14 views
Daily Writeups
⤷ Title: How I Bypassed a Password Reset Rate Limit by Stripping HTTP Headers
════════════════════════
𐀪 Author: savan-025
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:59:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #web_security #bug_bounty
13 views
Daily Writeups
⤷ Title: How I was able to Modify Ratings on a Target and Cause Business Impact
════════════════════════
𐀪 Author: RivuDon
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:08:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #bug_bounty #bug_bounty_tips #infosec
Medium
How I was able to Modify Ratings on a Target and Cause Business Impact
Learn how I found this interesting bug
18 views
Daily Writeups
⤷ Title: Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026–24884) to Achieve Arbitrary File…
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:05:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #nodejs #application_security #infosec
Medium
Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026–24884) to Achieve Arbitrary File…
Bug hunting is rarely about running an automated scanner and waiting for a critical alert. More often than not, it’s about staring at a…
12 views
Daily Writeups
⤷ Title: Exploiting Insufficient Workflow Validation — PortSwigger Business Logic Vulnerability Lab #8
════════════════════════
𐀪 Author: Thewatchdog13
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 06:01:01 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #web_security #cybersecurity #application_security
Medium
Exploiting Insufficient Workflow Validation — PortSwigger Business Logic Vulnerability Lab #8
Introduction
11 views
Daily Writeups
⤷ Title: Panduan Lab Portwigger (Lab: SQL injection attack, listing the database contents on Oracle)
════════════════════════
𐀪 Author: Dwi Putra
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:50:49 GMT
════════════════════════
⌗ Tags: #penetration_testing #ctf_writeup #portswigger #ctf #sql_injection
Medium
Panduan Lab Portwigger (Lab: SQL injection attack, listing the database contents on Oracle)
Pada lab ini, kita akan mengeksploitasi celah SQL Injection pada fitur filter kategori produk menggunakan teknik UNION untuk mendapatkan…
15 views
Daily Writeups
⤷ Title: Panduan Lab Portwigger (Lab: SQL injection attack, listing the database contents on non-Oracle…
════════════════════════
𐀪 Author: Dwi Putra
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:49:14 GMT
════════════════════════
⌗ Tags: #sql_injection #ctf_writeup #penetration_testing #ctf #portswigger
Medium
Panduan Lab Portwigger (Lab: SQL injection attack, listing the database contents on non-Oracle…
Pada lab ini, kita akan mengeksploitasi celah SQL Injection pada fitur filter kategori produk menggunakan teknik UNION untuk mendapatkan…
27 views
Daily Writeups
⤷ Title: Auth Mastery Part 2: Sessions, Cookies, and Staying Authenticated
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 05:06:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #https #ethical_hacking #web_security
Medium
Auth Mastery Part 2: Sessions, Cookies, and Staying Authenticated
Getting in once is easy. Staying in across ten requests is the skill.
46 views
Daily Writeups
⤷ Title: SQL Injection Introduction
════════════════════════
𐀪 Author: Sushen Kumar
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 06:13:52 GMT
════════════════════════
⌗ Tags: #sql_injection #tryhackme_walkthrough
Medium
SQL Injection Introduction 🚀
TryHackMe Walkthrough
43 views
Daily Writeups
⤷ Title: Uncapped Resonance: Anthropic Initiates Emergency Quota Restorations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:23:00 +0000
════════════════════════
⌗ Tags: #Technology #AI sub_agents #Anthropic #Claude Code glitch #Claude Max #Claude Opus 4.8 #Claude Pro #Claude usage quota reset #LLM usage limits #software patch
Information Security News
Claude Usage Quota Reset: Anthropic Fixes Glitch
Anthropic issues an emergency Claude usage quota reset for Pro and Max users after a sub-agent bug in Claude Code accelerated data consumption.
37 views
Daily Writeups
⤷ Title: The Bitskrieg Hypothesis: A Looming Secure Boot and BitLocker Bypass
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:18:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #BitLocker bypass #Bitskrieg #cybersecurity #Encryption Bypass #Firmware Vulnerability #Infosec News #JonasLyk #Nightmare_Eclipse #Secure Boot bypass
Information Security News
Bitskrieg Vulnerability Bypass: Secure Boot Flaw
Discover the Bitskrieg vulnerability bypass targeting Secure Boot and BitLocker. Read the latest cybersecurity analysis on this emerging threat.
31 views
Daily Writeups
⤷ Title: Sophisticated SilentCryptoMiner Variant Delivered via Fake Plugin Overlays
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 08:11:44 +0000
════════════════════════
⌗ Tags: #Malware #Crypto Mining Malware #DNS tunneling #Fake Update #SilentCryptoMiner #XMRig
Daily CyberSecurity
Sophisticated SilentCryptoMiner Variant Delivered via Fake Plugin Overlays
A stealthy SilentCryptoMiner variant uses a fake plugin update to infect systems. Protect your enterprise from this advanced cryptocurrency miner.
17 views
Daily Writeups
⤷ Title: Fake RVTools Installer Deploys Modular Python RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:01:03 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing Abuse #Modular Python RAT #RVTools Scam #Sectigo Certificate #VBScript Obfuscation
Daily CyberSecurity
Fake RVTools Installer Deploys Modular Python RAT
A fake RVTools installer campaign distributes a modular Python RAT. Learn how this malware uses signed certificates to evade security controls.
20 views
Daily Writeups
⤷ Title: Frontend Security & Bug Hunting: The .env File Crisis and Real-World Exploitation
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 08:17:47 GMT
════════════════════════
⌗ Tags: #githubdorks #bug_bounty #management_secrets #cybersecurity #frontend_security
Medium
Frontend Security & Bug Hunting: The .env File Crisis and Real-World Exploitation
The .env file is simultaneously one of the most convenient and most dangerous patterns in modern web development. The data is clear: over…
11 views
Daily Writeups
⤷ Title: The 10-Minute Recon Routine That Finds What Scanners Miss
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:47:52 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_hunting #bugbounty_writeup #bug_bounty_writeup #bug_bounty
Medium
The 10-Minute Recon Routine That Finds What Scanners Miss
Fast, free, and actually works.
9 views
Daily Writeups
⤷ Title: The Dirty Secret of Apple’s Bug Bounty Program
════════════════════════
𐀪 Author: John Philip
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:34:18 GMT
════════════════════════
⌗ Tags: #bug_bounty #apple #security
Medium
The Dirty Secret of Apple’s Bug Bounty Program
The recent stories circulating about Apple’s handling of vulnerability reports hit especially hard.
11 views
Daily Writeups
⤷ Title: , :
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:21:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_security #cybersecurity #portswigger
Medium
𝗧𝘄𝗼 𝗔𝘁𝘁𝗲𝗺𝗽𝘁𝘀, 𝗢𝗻𝗲 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻: 𝗠𝘆 𝗕𝗦𝗖𝗣 𝗝𝗼𝘂𝗿𝗻𝗲𝘆
One Brutal Attempt to BSCP Certified in 75 Minutes
11 views