Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: An AI Read Zcash’s Code for One Day. Then It Found the Bug That 4 Years of Human Audits Missed.
════════════════════════
𐀪 Author: Shivashish Yadav
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 08:53:42 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #ai #web3 #cryptocurrency
Medium
An AI Read Zcash’s Code for One Day. Then It Found the Bug That 4 Years of Human Audits Missed.
Here is a thought experiment worth sitting with. Imagine a piece of software has been audited repeatedly by some of the best cryptographers…
13 views
Daily Writeups
⤷ Title: The Anatomy of a 72-Hour Hack: How a Fast-Growing Startup’s Defenses Crumble (And How to Prevent…
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 09:50:15 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #business_security #penetration_testing #ethical_hacking
Medium
The Anatomy of a 72-Hour Hack: How a Fast-Growing Startup’s Defenses Crumble (And How to Prevent It)
The following scenario is a realistic composite built from vulnerabilities we consistently discover in fast-scaling companies. The company…
12 views
Daily Writeups
⤷ Title: Safety and governance for LLM systems: guardrails, PII, audit, and memory
════════════════════════
𐀪 Author: Varun Jindal
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 09:13:24 GMT
════════════════════════
⌗ Tags: #infosec #ai_agent #llm #data_governance #software_architecture
Medium
Safety and governance for LLM systems: guardrails, PII, audit, and memory
The level where an LLM system stops being a demo and earns the right to touch real data and real decisions: layered guardrails that fail…
11 views
Daily Writeups
⤷ Title: Web Hacking — part 3
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 08:48:11 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #web_development #cyber_security_awareness #cybersecurity
Medium
Web Hacking — part 3
JavaScript Essentials
15 views
Daily Writeups
⤷ Title: OWASP Top 10 2025: IAAA Failures.
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 08:47:15 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #infosec #web_development #cyber_security_awareness
Medium
OWASP Top 10 2025: IAAA Failures.
What is IAAA ?
19 views
Daily Writeups
⤷ Title: HackTheBox — Web Fuzzing Skills Assessment
════════════════════════
𐀪 Author: Hassan Elsayed
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 09:27:27 GMT
════════════════════════
⌗ Tags: #webfuzzing #penetration_testing #hackthebox #cybersecurity
Medium
HackTheBox — Web Fuzzing Skills Assessment
Introduction
27 views
Daily Writeups
⤷ Title: A Complete Walkthrough of TryHackMe’s Data Poisoning in RAG System
════════════════════════
𐀪 Author: Sudarshan Ajoy Sindhu
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 09:25:32 GMT
════════════════════════
⌗ Tags: #thm_writeup #tryhackme #tryhackme_walkthrough
Medium
A Complete Walkthrough of TryHackMe’s Data Poisoning in RAG System
How attackers corrupt AI systems through data — not prompts — and what OWASP LLM04 means for real-world deployments.
31 views
Daily Writeups
⤷ Title: Defensive Security Intro — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 07:58:58 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #defensive_security #tryhackme #tryhackme_writeup
Medium
Defensive Security Intro — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: Defensive Security Intro
Room URL: https://tryhackme.com/room/defensivesecurityintro
Difficulty: Easy
Please…
43 views
Daily Writeups
⤷ Title: 152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 16:37:50 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 15:29:38 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 10:02:35 +0000
════════════════════════
⌗ Tags: #Security #Android #Malware #Cyber Attack #Cybersecurity #Doctor Web #GetApps #MagicAd #Samsung #TROJAN #Xiaomi
Hackread
Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores
Over 50 Android apps on official stores spread MagicAd trojan, using system tricks to force background ads even after infected apps are closed.
24 views
Daily Writeups
⤷ Title: Jenkins RCE Vulnerability CVE-2026-53435 Now Under Active Exploitation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 09:26:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CI/CD security #CVE_2026_53435 #Deserialization #Jenkins #rce
Daily CyberSecurity
Jenkins RCE Vulnerability CVE-2026-53435 Now Under Active Exploitation
A Jenkins RCE vulnerability (CVE-2026-53435) is under active exploitation. Honeypots are seeing attacks now, so patch your Jenkins controller fast.
13 views
Daily Writeups
⤷ Title: X-VPN Installer Hijacked to Spread STX RAT Malware
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 08:02:45 +0000
════════════════════════
⌗ Tags: #Malware #Howler Cell #STX RAT #X_VPN
Daily CyberSecurity
X-VPN Installer Hijacked to Spread STX RAT Malware
Howler Cell exposes an X-VPN DLL sideloading campaign delivering STX RAT via 11 trojanized installers targeting crypto and VPN users.
16 views
Daily Writeups
⤷ Title: MiniCTF: Cookie Monster Secret Recipe
════════════════════════
𐀪 Author: hexidecimal
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #offensive_security #web_exploitation
Medium
MiniCTF: Cookie Monster Secret Recipe
Cookies are unique pseudo-random generated IDs that are presented on subsequent requests to application to maintain proper authorization…
12 views
Daily Writeups
⤷ Title: How a Typo in a Content Delivery Network (CDN) Config Exposed a Tech Giant’s Internal Staging…
════════════════════════
𐀪 Author: Tanvi Chauhan
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 11:56:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #pentesting #security
Medium
How a Typo in a Content Delivery Network (CDN) Config Exposed a Tech Giant’s Internal Staging…
We’ve all been told that the cloud simplifies security. “Move your infrastructure to a major provider,” they say. “Let their team of elite…
9 views
Daily Writeups
⤷ Title: How a simple UI translation endpoint led to 300,000+ exposed customer records
════════════════════════
𐀪 Author: Ashiqur Rahman Emon
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 10:30:04 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ethical_hacking
Medium
How a simple UI translation endpoint led to 300,000+ exposed customer records
Imagine hunting for security vulnerabilities, querying an endpoint that appears completely public and harmless, and suddenly stumbling upon…
10 views
Daily Writeups
⤷ Title: AI vs Hackers: Who’s Really Winning in 2026?
════════════════════════
𐀪 Author: Pramod Jogdand
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 11:50:58 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #artificial_intelligence
Medium
AI vs Hackers: Who’s Really Winning in 2026?
The same AI built to protect us is now being used to attack us — and most people don't even know it.
8 views
Daily Writeups
⤷ Title: DOM XSS — The Sneaky One Scanners Miss
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 11:31:00 GMT
════════════════════════
⌗ Tags: #hacking #bugbounty_writeup #web_security #technology #ethical_hacking
Medium
DOM XSS — The Sneaky One Scanners Miss
Hey everyone! Nitin here 👀
10 views
Daily Writeups
⤷ Title: Odysseus: The Ultimate Self-Hosted AI Workspace for Pentesting
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 11:15:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #hacking #artificial_intelligence #web_development
Medium
Odysseus: The Ultimate Self-Hosted AI Workspace for Pentesting 🔥
Building Your Own AI-Powered Ethical Hacking Laboratory
119 views
Daily Writeups
⤷ Title: I Bought “The Johnny Sins of Hacking Gadgets”
════════════════════════
𐀪 Author: Satyam Pathania
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 11:11:30 GMT
════════════════════════
⌗ Tags: #hacking #m5stack #technology #cardputer_adv #cybersecurity
Medium
I Bought “The Johnny Sins of Hacking Gadgets”
Meet the Cardputer ADV: The Cyberdeck That Fits in Your Pocket
7 views
Daily Writeups
⤷ Title: Writeup for CyLab/picoCTF challenge “Web Gauntlet 3”
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 11:01:00 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #hacking #ctf_writeup #cylab
Medium
Writeup for CyLab/picoCTF challenge “Web Gauntlet 3”
Learn why SQL injection denylists fail through CyLab’s “Web Gauntlet 3”, where a tight character limit adds a new constraint to an already…
15 views