Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: I Opened a Settings Page… and Found Everyone’s Personal Data Sitting Behind a URL
════════════════════════
𐀪 Author: Kanishkdadhich
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 08:51:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #piiexposure #appsec #broken_access_control #security_research
Medium
I Opened a Settings Page… and Found Everyone’s Personal Data Sitting Behind a URL
I Opened a Settings Page… and Found Everyone’s Personal Data Sitting Behind a URL
35 views
Daily Writeups
⤷ Title: The Scripts on Your Checkout Page Are Now a PCI DSS Problem
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 16:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: Agentjacking: Researchers Show How One Fake Bug Report Can Hijack AI Coding Agents
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 10:08:14 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Agentjacking #AI #AI Coding #Bug Report #Cyber Attack #Cybersecurity #RCE #Tenet #Vulnerability
Hackread
Agentjacking: Researchers Show How One Fake Bug Report Can Hijack AI Coding Agents
Tenet researchers reveal how fake Sentry bug reports can trick AI coding agents into running code, exposing a new Agentjacking risk for developers today.
30 views
Daily Writeups
⤷ Title: Broken Access Control — 2026’s #1 Bug
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #access_control #bug_bounty #owasp #hacker #bugcrowd
Medium
Broken Access Control — 2026’s #1 Bug
Hey everyone! Nitin here 👋
16 views
Daily Writeups
⤷ Title: BugTraceAI: More Autonomy, More Context, and a Better Workflow for Bug Bounty and Pentesting
════════════════════════
𐀪 Author: Albert Corzo
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 10:19:21 GMT
════════════════════════
⌗ Tags: #bugtraceai #bug_bounty #hacking
Medium
BugTraceAI: More Autonomy, More Context, and a Better Workflow for Bug Bounty and Pentesting
Over the past few weeks we have been pushing BugTraceAI in a very specific direction: take an autonomous web hacking tool that already…
11 views
Daily Writeups
⤷ Title: Thousands of Publicly Exposed MLflow Instances — A Hidden Risk in MLOps Infrastructure
════════════════════════
𐀪 Author: d3hack3r
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 09:31:09 GMT
════════════════════════
⌗ Tags: #ai_security #bug_bounty #mlflow #security #mlops
Medium
Thousands of Publicly Exposed MLflow Instances — A Hidden Risk in MLOps Infrastructure
Summary
9 views
Daily Writeups
⤷ Title: CTF Basics: Understanding the Linux Terminal
════════════════════════
𐀪 Author: Walter Moar
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #hacking #technology
Medium
CTF Basics: Understanding the Linux Terminal
Learn the Linux terminal, how to navigate the filesystem, and which commands are useful when a challenge involves using the terminal.
12 views
Daily Writeups
⤷ Title: Lab: Excessive trust in client-side controls (Business logic vulnerabilities)#lab1
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 10:34:47 GMT
════════════════════════
⌗ Tags: #burpsuite #portswigger #hacking #business_logic_flaw #cybersecurity
Medium
Lab: Excessive trust in client-side controls (Business logic vulnerabilities)#lab1
Solution:
9 views
Daily Writeups
⤷ Title: SCANNING NETWORKS
════════════════════════
𐀪 Author: Archie
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 09:58:51 GMT
════════════════════════
⌗ Tags: #port_scanning #cybersecurity #nmap #hacking
Medium
SCANNING NETWORKS
LAB 2: PORT AND SERVICE DISCOVERY
9 views
Daily Writeups
⤷ Title: The Shadow Behind the Attacks That No One Noticed: Klammer
════════════════════════
𐀪 Author: RTM.VAPT
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 10:45:37 GMT
════════════════════════
⌗ Tags: #hacktivism #cyberattack #infosec #cybersecurity #cybercrime
Medium
The Shadow Behind the Attacks That No One Noticed: Klammer
In the span of about a week in June 2026, three of the Philippines’ most sensitive government institutions were hit, one after another. The…
14 views
Daily Writeups
⤷ Title: Affordable Red Hat Certification Training in India
════════════════════════
𐀪 Author: cybersecuritycourse
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 10:35:04 GMT
════════════════════════
⌗ Tags: #ethical_hacking #redhat_linux #cybersecurity #education #red_hat_training
Medium
Affordable Red Hat Certification Training in India
In today’s technology-driven world, Linux administration, automation, cloud computing, and containerization skills are among the most…
14 views
Daily Writeups
⤷ Title: MITRE ATT&CK Reconnaissance: Gather Victim Host Information (Hardware, Software, Firmware, and…
════════════════════════
𐀪 Author: Shalu
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 10:28:05 GMT
════════════════════════
⌗ Tags: #information_security #ethical_hacking #information_technology #cybersecurity #networking
Medium
MITRE ATT&CK Reconnaissance: Gather Victim Host Information (Hardware, Software, Firmware, and Client Configuration)
Understanding How Threat Actors Profile Target Systems Before an Attack
28 views
Daily Writeups
⤷ Title: Lab 20: Basic SSRF against the local server
════════════════════════
𐀪 Author: Tkacala
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 10:06:55 GMT
════════════════════════
⌗ Tags: #portswigger #ethical_hacking #burpsuite #cybersecurity
Medium
Lab 20: Basic SSRF against the local server
Tujuan
47 views
Daily Writeups
⤷ Title: DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 19:00:07 +0530
════════════════════════
⌗ Tags: No_Tags
40 views
Daily Writeups
⤷ Title: Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 17:28:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: 145 Mastra npm Packages Compromised via Hijacked Contributor Account
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 13:08:24 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: DragonForce Ransomware Abused Microsoft Teams to Hide Malware Activity
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 12:34:24 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Malware #backdoor #BYOVD #Cyber Attack #Cybersecurity #DragonForce #Microsoft #Microsoft Teams #Privacy #Ransomware #Vulnerability
Hackread
DragonForce Ransomware Abused Microsoft Teams to Hide Malware Activity
DragonForce ransomware abused Microsoft Teams relay systems to hide a custom backdoor, steal files and encrypt systems at a US services firm.
19 views
Daily Writeups
⤷ Title: Weaponizing Time: An Elite Guide to Race Conditions
════════════════════════
𐀪 Author: Kareem Mohamed (0xY0K4_CL4W )
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 13:40:10 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #bug_hunting #race_condition #bug_bounty
Medium
Weaponizing Time: An Elite Guide to Race Conditions
Most hackers look for flaws in the input, but what about looking for flaws in time? Imagine requesting a single $100 ATM withdrawal, but…
12 views
Daily Writeups
⤷ Title: CSRF Attacks: How They Work and How to Stop Them
════════════════════════
𐀪 Author: Tharindu Jayawardhana
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 13:51:00 GMT
════════════════════════
⌗ Tags: #web_security #web_development #cybersecurity #csrf #application_security
Medium
CSRF Attacks: How They Work and How to Stop Them
Cross-Site Request Forgery (CSRF) is one of the oldest web vulnerabilities, and it is still common today. It is dangerous precisely because…
12 views
Daily Writeups
⤷ Title: Username enumeration via subtly different responses
════════════════════════
𐀪 Author: Ericmpta
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 13:37:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #authentication #web_security #penetration_testing #hacking
Medium
Username enumeration via subtly different responses
This lab is vulnerable to username enumeration and password brute-force attacks. It has an account with a predictable username and…
10 views
Daily Writeups
⤷ Title: Jacob the Boss (THM) Tryhackme Medium Challenge Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 13:13:35 GMT
════════════════════════
⌗ Tags: #linux #hacking #tryhackme #privilege_escalation #cybersecurity
Medium
Jacob the Boss (THM) Tryhackme Medium Challenge Walkthrough
Description : Find a way in and learn a little more.
7 views