Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: China-Linked TA4922 Hackers Target UK, Europe With New SilentRunLoader Malware
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 13:30:03 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Crime #Malware #Atlas RAT #China #Cyber Attack #Cybersecurity #DLL #Phishing #Proofpoint #RomulusLoader #SilentRunLoader #TA4922 #ValleyRAT #Winos4.0
Hackread
China-Linked TA4922 Hackers Target UK, Europe With New SilentRunLoader Malware
TA4922, a suspected China aligned cybercrime group, is targeting UK and European organisations with tax, payroll and benefits themed malware campaigns.
33 views
Daily Writeups
⤷ Title: From Zero to $8,500: Exploiting a Flawed Reset Token Validation to Bypass MFA and Take Over…
════════════════════════
𐀪 Author: Tanvi Chauhan
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:11:00 GMT
════════════════════════
⌗ Tags: #pentesting #security #bug_bounty_writeup #bug_bounty #cybersecurity
Medium
From Zero to $8,500: Exploiting a Flawed Reset Token Validation to Bypass MFA and Take Over…
It was late on a Friday night, and I was deep-diving into a private bug bounty program for a major B2B SaaS platform. Let’s call the target…
20 views
Daily Writeups
⤷ Title: File Upload Attacks: Bypassing Type Filters
════════════════════════
𐀪 Author: 0x4rt1st
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 13:46:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #bug_bounty #file_upload_vulnerability #full_stack_developer
Medium
File Upload Attacks: Bypassing Type Filters
When the server stops trusting the filename and starts looking at what’s inside — and why that’s still not enough. Part 5 of the File…
19 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #43: Login Page?
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 13:03:25 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #penetration_testing #technology
Medium
“Bug Bounty Bootcamp #43: Login Page? No Worries — Weak Passwords, Default Creds, and the Art of Getting In (Without Breaking a…
Let’s be real — you’ve hit that login wall more times than you’ve hit “snooze” on a Monday morning. But guess what? Half the time, the devs…
23 views
Daily Writeups
⤷ Title: Infected USB Case Study: Recovering Hidden Files and Tracing the Malware Chain
════════════════════════
𐀪 Author: VXRL
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:29:14 GMT
════════════════════════
⌗ Tags: #malware #cybersecurity #hacking
Medium
Infected USB Case Study: Recovering Hidden Files and Tracing the Malware Chain
Researcher: {Jack Man}
17 views
Daily Writeups
⤷ Title: Pelican — ZooKeeper Command Injection + gcore Memory Dump
════════════════════════
𐀪 Author: Aashiqoffortune
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:16:59 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #offensive_security #privilege_escalation
Medium
Pelican — ZooKeeper Command Injection + gcore Memory Dump
cybersecurity, pentesting, oscp, ethical-hacking, privilege-escalation.
24 views
Daily Writeups
⤷ Title: IDOR Leading to Account Takeover via Email Reassignment
════════════════════════
𐀪 Author: Damian Gambacorta
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:26:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #penetration_testing
Medium
IDOR Leading to Account Takeover via Email Reassignment
The OliveX Files | By Damian Gambacorta
22 views
Daily Writeups
⤷ Title: Exploitation on Pen Tester VM
════════════════════════
𐀪 Author: Myles Corey
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:16:49 GMT
════════════════════════
⌗ Tags: #penetration_testing #metasploit
Medium
Exploitation on Pen Tester VM
Know that i know this target open to shellshock vulnerability i will open Metasploit and find a exploit that will work on the VM.
16 views
Daily Writeups
⤷ Title: Ghostcat-PWN: When an Old Tomcat Vulnerability Opens the org doors
════════════════════════
𐀪 Author: Deepanshu khanna
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 13:59:23 GMT
════════════════════════
⌗ Tags: #cve_2020_1938 #apache_tomcat #red_team #penetration_testing #security_testing
Medium
Ghostcat-PWN: When an Old Tomcat Vulnerability Opens the org doors
From exposed AJP connectors to reliable post-exploitation workflows: the story behind Ghostcat-PWN and our experience with CVE-2020–1938
17 views
Daily Writeups
⤷ Title: Week 10: The Complete Guide to IP Addressing, Subnetting & DNS
════════════════════════
𐀪 Author: Nishant kumar
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 13:58:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_operation_center #networking #penetration_testing #ethical_hacking
Medium
Week 10: The Complete Guide to IP Addressing, Subnetting & DNS
Part of the Networking Series — if you missed Week 9, go check out OSI and TCP/IP models first!
22 views
Daily Writeups
⤷ Title: GraphQL Introspection: The Feature That Hands Attackers Your API Blueprint
════════════════════════
𐀪 Author: johnnattakit 0xDD
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:56:35 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #penetration_testing #vulnerability #graphql #cybersecurity
Medium
GraphQL Introspection: The Feature That Hands Attackers Your API Blueprint
TL;DR: GraphQL introspection is a built-in, spec-compliant feature that — when left enabled on production endpoints — gives attackers a…
20 views
Daily Writeups
⤷ Title: Splunk 101: Hands-On Introduction to SIEM, Log Ingestion, and Basic Threat Hunting
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:40:23 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #soc #cybersecurity #splunk
Medium
Splunk 101: Hands-On Introduction to SIEM, Log Ingestion, and Basic Threat Hunting
Splunk, SIEM, Log Analysis: Hands-on walkthrough of log ingestion, SPL querying, and basic security investigation using Splunk.
22 views
Daily Writeups
⤷ Title: SOC Metrics Explained: The Numbers That Actually Define Security Operations
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:37:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #tryhackme #blue_team #soc
Medium
SOC Metrics Explained: The Numbers That Actually Define Security Operations 📊
SOC Metrics, Incident Response, Blue Teaming: Understanding the key performance indicators that measure SOC efficiency, detection quality…
24 views
Daily Writeups
⤷ Title: Vulnerability Assessment on Pen tester Lab VM
════════════════════════
𐀪 Author: Myles Corey
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:02:24 GMT
════════════════════════
⌗ Tags: #ethical_hacking #nmap
Medium
Vulnerability Assessment on Pen tester Lab VM
I began the assessment by performing a host discovery scan to identify active devices on the network. This scan confirmed that the target…
31 views
Daily Writeups
⤷ Title: Recruit | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 14:55:44 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #tryhackme_writeup #local_file_inclusion #sql_injection
Medium
Recruit | TryHackMe | Walkthrough
Initial Access
45 views
Daily Writeups
⤷ Title: The Most Dangerous OAuth Bug I’ve Ever Found
════════════════════════
𐀪 Author: Ali Mojaver
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 15:54:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup
Medium
The Most Dangerous OAuth Bug I’ve Ever Found
Hello! Some of you might know me (just kidding).
35 views
Daily Writeups
⤷ Title: IDOR Sounds Fancy But It’s Just Broken Math
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 15:30:58 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #bug_hunting #bug_bounty_writeup #bugbounty_writeup
Medium
IDOR Sounds Fancy But It’s Just Broken Math
Here’s how to find them without overthinking.
36 views
Daily Writeups
⤷ Title: Finding an Unintended Privilege Escalation While Solving Mobile Hacking Lab’s Food Store Challenge
════════════════════════
𐀪 Author: @4b6o07
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 15:04:35 GMT
════════════════════════
⌗ Tags: #bug_bounty #reverse_engineering #android_security #mobileapplicationsecurity #cybersecurity
Medium
Finding an Unintended Privilege Escalation While Solving Mobile Hacking Lab’s Food Store Challenge
While hunting for SQL Injection, I accidentally became the CEO of the Food Store.
26 views
Daily Writeups
⤷ Title: BAC na plataforma DevHub (algoritmoecafe.com)
════════════════════════
𐀪 Author: Lourenco Diogo
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 16:45:21 GMT
════════════════════════
⌗ Tags: #ethical_hacking #pentesting #cybersecurity #vulnerability #hacking
Medium
BAC na plataforma DevHub (algoritmoecafe.com)
Durante uma análise da plataforma DevHub, identifiquei uma falha de controle de acesso que permitia utilizar recursos exclusivos para…
17 views
Daily Writeups
⤷ Title: Red Team vs Blue Team: The Eternal Battle in Cybersecurity
════════════════════════
𐀪 Author: Vikas Nayak
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 16:32:34 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #exploitation #red_teaming #blue_team
Medium
Red Team vs Blue Team: The Eternal Battle in Cybersecurity
Published: June 3, 2026
14 views
Daily Writeups
⤷ Title: Linux Commands for Beginners
════════════════════════
𐀪 Author: Ashar Arif
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 16:01:08 GMT
════════════════════════
⌗ Tags: #hacking #bash #cybersecurity #soc #linux
Medium
Linux Commands for Beginners
Exploring the Linux World
17 views