Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: How I Discovered Two Critical Authorization Bugs in a Web Application
════════════════════════
𐀪 Author: MR SHAN
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:35:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #web_security #info_sec_writeups #bug_bounty
Medium
How I Discovered Two Critical Authorization Bugs in a Web Application
Welcome back to another story from my penetration testing journey. I’m Shan, an Application Security Analyst focused on web, mobile, and…
14 views
Daily Writeups
⤷ Title: TryHackMe — Boogeyman 1 — Email, Endpoint, Network Packet Analysis
════════════════════════
𐀪 Author: Efe Özel
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 10:39:15 GMT
════════════════════════
⌗ Tags: #threat_intelligence #ctf #threat_hunting #hacking #cybersecurity
Medium
TryHackMe — Boogeyman 1 — Email, Endpoint, Network Packet Analysis
Scenario: In this room, you will be tasked to analyse the Tactics, Techniques, and Procedures (TTPs) executed by a threat group, from…
16 views
Daily Writeups
⤷ Title: How I Passed the eWPT Exam: A Journey of Web App Pentesting
════════════════════════
𐀪 Author: Georgi Hadzhinikiforov
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 10:03:45 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #hacking #cybersecurity #penetration_testing #certification
Medium
How I Passed the eWPT Exam: A Journey of Web App Pentesting
Taking the eWPT from INE security exam was a unique experience for me. It was my first penetration testing certificate after being only…
13 views
Daily Writeups
⤷ Title: Ketika Orang Tua Menjadi Penentu Arah Pendidikan Digital Anak
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:42:05 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #education
Medium
Ketika Orang Tua Menjadi Penentu Arah Pendidikan Digital Anak
Perkembangan teknologi membuat pilihan pendidikan semakin beragam. Kini banyak orang tua mempertimbangkan SMA IT, SMK IT, dan berbagai…
18 views
Daily Writeups
⤷ Title: I Spy With My Software-Defined Radio
════════════════════════
𐀪 Author: Michael Preston
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:33:07 GMT
════════════════════════
⌗ Tags: #hacking #spying #rf_security #signal #radio
Medium
I Spy With My Software-Defined Radio
Discovering the invisible world of signals surrounding us every day.
12 views
Daily Writeups
⤷ Title: How to Protect Yourself from npm Supply Chain Attacks
════════════════════════
𐀪 Author: Digvijay Bhakuni
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:11:00 GMT
════════════════════════
⌗ Tags: #typosquatting #nodejs #hacking #npm #mini_shai_hulud
Medium
How to Protect Yourself from npm Supply Chain Attacks
The Growing Threat Hidden Behind npm install
15 views
Daily Writeups
⤷ Title: How Nmap Actually Knows What’s Running on a Port (And Why It’s Sometimes Wrong)
════════════════════════
𐀪 Author: Mohan Sai Krishna G M
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:19:18 GMT
════════════════════════
⌗ Tags: #red_team #cybersecurity #technology #penetration_testing #red_team_methodology
Medium
How Nmap Actually Knows What’s Running on a Port (And Why It’s Sometimes Wrong)
Most people trust the service name Nmap gives them. Experienced testers treat it as a hypothesis.
18 views
Daily Writeups
⤷ Title: Understanding DNS Resolution
════════════════════════
𐀪 Author: Mohd Kaif
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:14:40 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #dns_servers #web_development #penetration_testing #dns
Medium
Understanding DNS Resolution
Most of us open a browser, type netflix.com, press Enter, and the website magically appears. But have you ever wondered what happens behind…
12 views
Daily Writeups
⤷ Title: Container Vulnerabilities — TryHackMe Writeup|THM{} by MrEchoFi|NetWraith
════════════════════════
𐀪 Author: Tanjibisham
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 10:23:19 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #cybersecurity #tryhackme #devsecops
Medium
Container Vulnerabilities — TryHackMe Writeup|THM{} by MrEchoFi|NetWraith
Container Vulnerabilities or Docker Privilege Escalation — TryHackMe Writeup
12 views
Daily Writeups
⤷ Title: Breaking Into: Lian_Yu
════════════════════════
𐀪 Author: Krippy
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:17:56 GMT
════════════════════════
⌗ Tags: #lian_yu #ctf_writeup #tryhackme #boot2root #ctf
Medium
Breaking Into: Lian_Yu
TryHackMe CTF Walkthrough
11 views
Daily Writeups
⤷ Title: Shell Payload Generation & Delivery | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:17:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #webshell #pentesting #metasploit
Medium
Shell Payload Generation & Delivery | TryHackMe
Generate, customise, and deploy shell payloads with msfvenom, Metasploit, and webshells
13 views
Daily Writeups
⤷ Title: Intro to AD Lateral Movement | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:17:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #active_directory #tryhackme
Medium
Intro to AD Lateral Movement | TryHackMe
Explore AD lateral movement and pivoting using PsExec, WinRM, PtH, and SSH tunnels.
15 views
Daily Writeups
⤷ Title: TryHackMe — Tempest Application, Endpoint, Network Analysis Lab
════════════════════════
𐀪 Author: Efe Özel
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 10:15:39 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #blue_team #threat_hunting #ethical_hacking
Medium
TryHackMe — Tempest Application, Endpoint, Network Analysis Lab
Scenario: This room aims to introduce the process of analysing endpoint and network logs from a compromised asset. Given the artefacts, we…
19 views
Daily Writeups
⤷ Title: Security Research Report: Control Flow Redirection via SetupAPI Callback
════════════════════════
𐀪 Author: Piyusha Akash
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:31:14 GMT
════════════════════════
⌗ Tags: #ethical_hacking #malware #information_technology #cybersecurity #windows
Medium
Security Research Report: Control Flow Redirection via SetupAPI Callback
Control Flow Redirection via SetupAPI Callback (Shellcode execution)
22 views
Daily Writeups
⤷ Title: Authentication vs.
════════════════════════
𐀪 Author: Shalu
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:05:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #computer_science #ethical_hacking #information_security #networking
Medium
Authentication vs. Authorization: The Cybersecurity Concepts Most People Confuse (And Why It Matters)
If you are a member, please continue, otherwise, read the full story here.
32 views
Daily Writeups
⤷ Title: China-Linked TA4922 Expands Phishing Attacks to UK, Germany, Italy, and South Africa
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 17:52:25 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 16:49:53 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 23:28:00 +0530
════════════════════════
⌗ Tags: No_Tags
23 views
Daily Writeups
⤷ Title: Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
18 views
Daily Writeups
⤷ Title: CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 22:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
18 views
Daily Writeups
⤷ Title: Lazarus Group Uses npm Brandjacking Campaign to Target Developers
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 12:35:11 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Malware #Brandjacking #Cyber Attack #Cyber Crime #Cybersecurity #Lazarus
Hackread
Lazarus Group Uses npm Brandjacking Campaign to Target Developers
North Korean Lazarus Group targets npm developers with brandjacking packages that mimic trusted tools, drop malware and put credentials at risk.
20 views