Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Shift Security Left: Detecting Code Vulnerabilities Early with CodeQL in GitHub Actions
════════════════════════
𐀪 Author: SwayamOps
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 05:36:39 GMT
════════════════════════
⌗ Tags: #shift_left_security #github_actions #application_security #codeql #devsecops
Medium
Shift Security Left: Detecting Code Vulnerabilities Early with CodeQL in GitHub Actions
Most CI pipelines are great at answering one question:
14 views
Daily Writeups
⤷ Title: Tools I Use in Hardware Hacking: Part 2: SPI Flash Programmers
════════════════════════
𐀪 Author: Aryan Shrestha
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 06:16:04 GMT
════════════════════════
⌗ Tags: #security #iot #hardware #hacking #cybersecurity
Medium
Tools I Use in Hardware Hacking: Part 2: SPI Flash Programmers
Or: How to steal firmware from a chip that never agreed to give it to you
13 views
Daily Writeups
⤷ Title: Copilot for Penetration Testing: AI-Powered Ethical Hacking
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 05:38:42 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #entrepreneurship #business #cybersecurity #hacking
Medium
Copilot for Penetration Testing: AI-Powered Ethical Hacking 🔥
Artificial Intelligence is rapidly transforming cybersecurity.
140 views
Daily Writeups
⤷ Title: TryHackMe THM Net Sec Challenge June 2026 Walkthrough / Answers
════════════════════════
𐀪 Author: thmflags
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 05:30:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #tryhackme_walkthrough #tryhackme_writeup #tryhackme
Medium
TryHackMe THM Net Sec Challenge June 2026 Walkthrough / Answers
Posting the answers to the Net Sec Challenge as of June 2026, because every single YouTube Walkthrough, discord community helper, and…
14 views
Daily Writeups
⤷ Title: “MFA Protects You From Everything.” — No, It Doesn’t.
════════════════════════
𐀪 Author: midget_pool
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 06:21:02 GMT
════════════════════════
⌗ Tags: #mfa #cybersecurity #penetration_testing #ethical_hacking #owasp
Medium
“MFA Protects You From Everything.” — No, It Doesn’t.
4 ways pentesters bypass Multi-Factor Authentication in real engagements
17 views
Daily Writeups
⤷ Title: Testing Network Infrastructure Configuration
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 05:07:29 GMT
════════════════════════
⌗ Tags: #network_security #cybersecurity #penetration_testing #bug_hunting #web_security
Medium
Testing Network Infrastructure Configuration
How Network Misconfigurations Become Attack Paths
15 views
Daily Writeups
⤷ Title: I Investigated My First Cyber Attack — Here’s What a SOC Analyst Actually Does
════════════════════════
𐀪 Author: Prashant Raj
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 06:53:32 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #ethical_hacking #soc #tryhackme
Medium
I Investigated My First Cyber Attack — Here’s What a SOC Analyst Actually Does
A beginner’s walkthrough of Defensive Security on TryHackMe
20 views
Daily Writeups
⤷ Title: Threat Intelligence Brief: CVE-2026-40072-SSRF Vulnerability in web3.py
════════════════════════
𐀪 Author: GraySentinel- Cyber Defence Lab
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 05:11:56 GMT
════════════════════════
⌗ Tags: #graysentinel #ethical_hacking #portfolioovercertificate #red_team #che
Medium
Threat Intelligence Brief: CVE-2026-40072-SSRF Vulnerability in web3.py
Vulnerability: CVE-2026–40072
Affected Software: web3.py
Severity: High (CVSS 3.1: 7.5) / Medium (CVSS 4.0: 6.9)
Patched Versions: 7.15.0…
37 views
Daily Writeups
⤷ Title: Ethical Hacking: Building the Next Generation of Cyber Security Professionals
════════════════════════
𐀪 Author: Poddar Group of Institutions
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 05:07:33 GMT
════════════════════════
⌗ Tags: #next_generation #ethical_hacking #professional #cybersecurity
Medium
Ethical Hacking: Building the Next Generation of Cyber Security Professionals
Ethical hacking is the authorized process of identifying vulnerabilities in computer systems and networks to strengthen security defenses…
39 views
Daily Writeups
⤷ Title: CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 12:49:33 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Operation Dragon Weave Exposed: Cyber Espionage Campaign Weaponizes Cloud Storage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:21:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Adaptix C2 #Azure Blob Storage #AZUREVEIL #cyber_espionage #Operation Dragon Weave #RUSTCLOAK #Seqrite APT Team
Daily CyberSecurity
Operation Dragon Weave Exposed: Cyber Espionage Campaign Weaponizes Cloud Storage
Learn how Operation Dragon Weave uses a dead-drop C2 channel on Azure Blob Storage to target global officials in a new espionage campaign.
29 views
Daily Writeups
⤷ Title: AI Generated Code Vulnerabilities Threaten Emerging Dev Ecosystems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 07:09:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Automated Code Generation #Exploit Verification #Model Context Protocol #Software Engineering #Software Supply Chain #TrendAI Research
Daily CyberSecurity
AI Generated Code Vulnerabilities Threaten Emerging Dev Ecosystems
New research explores AI generated code vulnerabilities within MCP server repositories. Learn why expert domain verification remains critical.
17 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #43: Login Page?
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:41 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #penetration_testing #technology
Medium
“Bug Bounty Bootcamp #43: Login Page? No Worries — Weak Passwords, Default Creds, and the Art of Getting In (Without Breaking a…
Let’s be real — you’ve hit that login wall more times than you’ve hit “snooze” on a Monday morning. But guess what? Half the time, the devs…
12 views
Daily Writeups
⤷ Title: I Bought a ₹1,599 Government Book for ₹1. The Server Approved It.
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:26 GMT
════════════════════════
⌗ Tags: #bug_bounty #business_logic #web_security #ethical_hacking #cybersecurity
Medium
I Bought a ₹1,599 Government Book for ₹1. The Server Approved It.
The payment page showed ₹1.00. I had not touched the price field. I had only touched one number in one request.
12 views
Daily Writeups
⤷ Title: I Typed 000000 and the App Thought MFA Was Already On
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:08 GMT
════════════════════════
⌗ Tags: #web_security #hacking #cybersecurity #bug_bounty #infosec
Medium
I Typed 000000 and the App Thought MFA Was Already On
I never scanned the QR code. One intercepted response was enough.
19 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #42: JWT Attacks — How a Stolen Token or a Weak Secret Can Grant You Admin…
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:16:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bug_bounty #penetration_testing #technology
Medium
“Bug Bounty Bootcamp #42: JWT Attacks — How a Stolen Token or a Weak Secret Can Grant You Admin Privileges”
JSON Web Tokens are everywhere — in cookies, Authorization headers, and API calls. But a misconfigured algorithm or a reusable key can turn…
16 views
Daily Writeups
⤷ Title: Frontend Security & Bug Hunting: The .env File Crisis and Real-World Exploitation
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:15:57 GMT
════════════════════════
⌗ Tags: #githubdorks #bug_bounty #management_secrets #cybersecurity #frontend_security
Medium
Frontend Security & Bug Hunting: The .env File Crisis and Real-World Exploitation
The .env file is simultaneously one of the most convenient and most dangerous patterns in modern web development. The data is clear: over…
17 views
Daily Writeups
⤷ Title: I Bought a ₹1,599 Government Book for ₹1. The Server Approved It.
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:25 GMT
════════════════════════
⌗ Tags: #bug_bounty #business_logic #web_security #ethical_hacking #cybersecurity
Medium
I Bought a ₹1,599 Government Book for ₹1. The Server Approved It.
The payment page showed ₹1.00. I had not touched the price field. I had only touched one number in one request.
21 views
Daily Writeups
⤷ Title: I Typed 000000 and the App Thought MFA Was Already On
════════════════════════
𐀪 Author: LordofHeaven
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 08:17:07 GMT
════════════════════════
⌗ Tags: #web_security #hacking #cybersecurity #bug_bounty #infosec
Medium
I Typed 000000 and the App Thought MFA Was Already On
I never scanned the QR code. One intercepted response was enough.
11 views
Daily Writeups
⤷ Title: A Unique Case of One-Click Account Takeover
════════════════════════
𐀪 Author: n0body
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:12:21 GMT
════════════════════════
⌗ Tags: #pentesting #android_pentesting #hacking #bug_bounty #web
Medium
A Unique Case of One-Click Account Takeover
Hello everyone! Today I want to walk through an account takeover vulnerability I found recently. At its core, the issue was a CSRF…
10 views
Daily Writeups
⤷ Title: Investigation Breakdown — Part 4
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 07:49:59 GMT
════════════════════════
⌗ Tags: #hacking #security #cybersecurity #true_crime #osint
Medium
🚨 Investigation Breakdown — Part 4
How Scam Domains Rotate To Avoid Detection
11 views