Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: “We Encrypt With AES-256” Is Not a Security Architecture
════════════════════════
𐀪 Author: Kalyan Dev
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:25:44 GMT
════════════════════════
⌗ Tags: #cryptocurrency #ae #bug_bounty #security #cybersecurity
Medium
“We Encrypt With AES-256” Is Not a Security Architecture
The questions nobody asks — and the attacks that follow when they don’t
9 views
Daily Writeups
⤷ Title: API Fuzzing for Security Testing: Part 2A: Breaking Authentication & Authorization
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 20:03:05 GMT
════════════════════════
⌗ Tags: #bug_bounty #api #web_security #bug_bounty_tips #bug_bounty_writeup
Medium
API Fuzzing for Security Testing: Part 2A: Breaking Authentication & Authorization
JWT Attacks, IDOR/BOLA, Mass Assignment, and Authorization Abuse in Real-World APIs
10 views
Daily Writeups
⤷ Title: DLL Injection via Thread Hijacking Without Executable Memory
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:02:12 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #malware #infosec #cybersecurity
Medium
DLL Injection via Thread Hijacking Without Executable Memory
Welcome to this new Medium post. Today we cover a technique that combines thread hijacking with Return-Oriented Programming (ROP) to inject…
11 views
Daily Writeups
⤷ Title: The Hackers Who Hid Inside Your Router — and Nobody Noticed for a Year
════════════════════════
𐀪 Author: Pop123
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:00:23 GMT
════════════════════════
⌗ Tags: #technology #politics #linux #cybersecurity #hacking
Medium
The Hackers Who Hid Inside Your Router — and Nobody Noticed for a Year
Inside UNC3886’s Ghost Campaigns: A China-linked espionage group that quietly embedded itself into the backbone of the internet, gave its…
11 views
Daily Writeups
⤷ Title: I Checked the Dark Web and Found My Own Password For Sale
════════════════════════
𐀪 Author: BENSEC
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 20:30:06 GMT
════════════════════════
⌗ Tags: #data_breach #privacy #passwords #cybersecurity #hacking
Medium
I Checked the Dark Web and Found My Own Password For Sale 🤯
The moment I realized my “safe” online life was a complete illusion.
11 views
Daily Writeups
⤷ Title: GreatXML: How a Setup File Unlocked BitLocker — And Why Microsoft Can’t Stop This Researcher
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 20:28:30 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #windows #technology #infosec
Medium
GreatXML: How a Setup File Unlocked BitLocker — And Why Microsoft Can’t Stop This Researcher
Author: Shikhali Jamalzade GitHub: github.com/alisalive LinkedIn: linkedin.com/in/camalzads
11 views
Daily Writeups
⤷ Title: How a Single KQL Query Stopped an Entire EvilTokens Phishing Campaign
════════════════════════
𐀪 Author: Matt Swann
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:29:58 GMT
════════════════════════
⌗ Tags: #detection_engineering #infosec #eviltokens #phishing #cybersecurity
Medium
How a Single KQL Query Stopped an Entire EvilTokens Phishing Campaign
Back in April of this year, an AI-powered phishing campaign known as EvilTokens took the spotlight in the infosec world. While the term…
14 views
Daily Writeups
⤷ Title: Exploiting Weak Credentials, WebDAV, and SMB Shares: An INE Host-Based Attacks Walkthrough
════════════════════════
𐀪 Author: Aditya Bhardwaj
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 20:46:45 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #windows_security #capture_the_flag #penetration_testing
Medium
Exploiting Weak Credentials, WebDAV, and SMB Shares: An INE Host-Based Attacks Walkthrough
Introduction
20 views
Daily Writeups
⤷ Title: [THM] Brains — Writeup
════════════════════════
𐀪 Author: Bonestorm
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 20:24:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #ctf_writeup #tryhackme
Medium
[THM] Brains — Writeup
Difficulty: Easy Tags: Linux, Apache Tomcat, TeamCity, CVE-2024–27198, RCE, Splunk, SIEM, Log Analysis
22 views
Daily Writeups
⤷ Title: Top Platforms to Earn from Hacking in 2026
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 22:54:45 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #hacking #ai #bug_bounty
Medium
💰 Top Platforms to Earn from Hacking in 2026
Hi, I’m Vipul 👋 — the human behind TheHackersLog Let me tell you something most people get wrong about bug bounty hunting.
21 views
Daily Writeups
⤷ Title: CVE-2025–0282: How a One-Line Bug in Ivanti’s VPN Let Attackers Walk Through the Front Door
════════════════════════
𐀪 Author: Kalyan Dev
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 21:54:37 GMT
════════════════════════
⌗ Tags: #security #vulnerability #startup #cybersecurity #bug_bounty
Medium
CVE-2025–0282: How a One-Line Bug in Ivanti’s VPN Let Attackers Walk Through the Front Door
A balanced breakdown of the root cause, the exploit chain, and what defenders — and pentesters — should take away.
22 views
Daily Writeups
⤷ Title: Fantastic | Proving Grounds | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 23:19:53 GMT
════════════════════════
⌗ Tags: #ctf #infosec #ctf_writeup #hacking #ethical_hacking
Medium
Fantastic | Proving Grounds | OSCP Preparation
Box: Fantastic
Community Rating: Hard
22 views
Daily Writeups
⤷ Title: Performing WHOIS Footprinting
════════════════════════
𐀪 Author: Archie
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 22:47:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #reconnaissance
Medium
Performing WHOIS Footprinting
Lab Objective
23 views
Daily Writeups
⤷ Title: The Bug Class - What is Page Cache Writes are in Linux (Beginner to Advanced) PART 01
════════════════════════
𐀪 Author: dulangaruksh4n
════════════════════════
ⴵ Time: Thu, 11 Jun 2026 22:09:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux_kernel #linux #infosec #kernel
Medium
The Bug Class - What is Page Cache Writes are in Linux (Beginner to Advanced) PART 01
In this article I’m going to take you to the rabbit hole of page cache and how it works.
24 views
Daily Writeups
⤷ Title: Critical 9.9 CVSS Ubiquiti UniFi OS Vulnerabilities Exposed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 01:51:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_47367 #cybersecurity #Ubiquiti #UniFi OS
Daily CyberSecurity
Critical 9.9 CVSS Ubiquiti UniFi OS Vulnerabilities Exposed
Critical UniFi OS vulnerabilities boast a 9.9 CVSS score. Patch these Ubiquiti security flaws to prevent command injection and secure your network today.
19 views
Daily Writeups
⤷ Title: ShinyHunters Strikes with Oracle PeopleSoft Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 01:48:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Oracle #ShinyHunters #ZeroDay
Daily CyberSecurity
ShinyHunters Strikes with Oracle PeopleSoft Exploit
ShinyHunters leverages a zero-day Oracle PeopleSoft exploit to compromise higher education systems, exposing sensitive data via the CVE-2026-35273 flaw.
18 views
Daily Writeups
⤷ Title: New Patches Fix Broad AMD Security Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 01:30:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AMD #AMD security vulnerabilities #CVE_2025_10263 #CVE_2025_54509 #hardware security flaws
Daily CyberSecurity
New Patches Fix Broad AMD Security Vulnerabilities
Fix critical AMD security vulnerabilities and hardware security flaws now. Learn about CVE-2025-54509 and CVE-2025-10263 updates.
22 views
Daily Writeups
⤷ Title: Apache Answer Vulnerabilities and Security Flaws Fixed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 01:03:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Answer #CVE_2026_25688 #CVE_2026_25699 #CVE_2026_25700 #Security Flaws
Daily CyberSecurity
Apache Answer Vulnerabilities and Security Flaws Fixed
Fix critical Apache Answer vulnerabilities and security flaws today. Upgrade your platform to stay safe from unauthorized access and server crashes.
9 views
Daily Writeups
⤷ Title: Millions at Risk: 9.8 CVSS Remote Code Execution in HTTP.sys
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 00:27:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE202647291 #cybersecurity #rce #WindowsSecurity
Daily CyberSecurity
Millions at Risk: 9.8 CVSS Remote Code Execution in HTTP.sys
A critical 9.8 CVSS HTTP.sys RCE vulnerability (CVE-2026-47291) threatens millions of users. Secure your Windows HTTP stack exploit risks now.
10 views
Daily Writeups
⤷ Title: New Patches Secure Critical Spring HATEOAS Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 00:02:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_41006 #CVE_2026_41007 #cybersecurity #Spring HATEOAS #Vulnerability
Daily CyberSecurity
New Patches Secure Critical Spring HATEOAS Flaws
New patches fix critical Spring HATEOAS flaws including CVE-2026-41006 and CVE-2026-41007 to prevent heap exhaustion and bypasses.
9 views
Daily Writeups
⤷ Title: SecLeaf 7-Day CTF Challenge
════════════════════════
𐀪 Author: APT-0
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 01:35:15 GMT
════════════════════════
⌗ Tags: #hacking #ctf_writeup #ctf_walkthrough #cybersecurity #picoctf
Medium
SecLeaf 7-Day CTF Challenge
Day 2 Write-Up
13 views