Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: THM - Support
════════════════════════
𐀪 Author: Francesco Pastore
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 18:54:26 GMT
════════════════════════
⌗ Tags: #hacking #tech #cybersecurity #security #technology
Medium
THM - Support
A writeup for “Support” on TryHackMe.
14 views
Daily Writeups
⤷ Title: The Hackers Hiding Their Traps Behind a Free Cloudflare Page
════════════════════════
𐀪 Author: Pop123
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 17:50:02 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #malware #technology #cloudflare
Medium
The Hackers Hiding Their Traps Behind a Free Cloudflare Page
A “copyright takedown notice” led to a page on Cloudflare’s own pages.dev, a web address your security tools wave straight through. Behind…
16 views
Daily Writeups
⤷ Title: IronWorm Explained: How a Rust-Built Malware Turns You Into the Attacker
════════════════════════
𐀪 Author: C.ishan pathirana
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 19:31:07 GMT
════════════════════════
⌗ Tags: #rust_programming_language #infosec #malware_analysis #vulnerability_research #cybersecurity
Medium
IronWorm Explained: How a Rust-Built Malware Turns You Into the Attacker
IronWorm: The Rust-Built Supply Chain Weapon That Turns Developers Against Each Other
18 views
Daily Writeups
⤷ Title: The End of Traditional Social Engineering: How Generative AI Is Rewriting Cybercrime and Business…
════════════════════════
𐀪 Author: eL Njas!™
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 17:53:16 GMT
════════════════════════
⌗ Tags: #social_engineering #infosec #ai
Medium
The End of Traditional Social Engineering: How Generative AI Is Rewriting Cybercrime and Business Risk.
For decades, cybersecurity teams focused on securing networks, endpoints, and applications. Yet in 2026, the most valuable target is…
19 views
Daily Writeups
⤷ Title: Lightweight Asymmetric Encryption for C2 Implants: A Red Teamer’s Guide from XOR to Rabin
════════════════════════
𐀪 Author: Alfred Abston
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 18:30:09 GMT
════════════════════════
⌗ Tags: #cryptography #penetration_testing #public_key_cryptography #cybersecurity #red_team
Medium
Lightweight Asymmetric Encryption for C2 Implants: A Red Teamer’s Guide from XOR to Rabin
A practical walkthrough of encryption choices for red team implants — from XOR and AES-CTR to Rabin key encapsulation — with a…
23 views
Daily Writeups
⤷ Title: Nmap Through the Lens of Networking — Part 2
════════════════════════
𐀪 Author: Mohan Sai Krishna G M
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 17:55:00 GMT
════════════════════════
⌗ Tags: #red_team #networking #cybersecurity #penetration_testing #technology
Medium
Nmap Through the Lens of Networking — Part 2
OS Detection, NSE, Timing, Evasion, and How Experienced Practitioners Actually Think
22 views
Daily Writeups
⤷ Title: Debugging PrintNightmare: Why Impacket Fails and How NDR Serialization Saves the Day
════════════════════════
𐀪 Author: sydrx
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 19:55:03 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #cybersecurity #printnightmare #active_directory
Medium
Debugging PrintNightmare: Why Impacket Fails and How NDR Serialization Saves the Day
A technical deep-dive into fixing RPC hangs, port conflicts, and rpc_x_bad_stub_data errors during Active Directory privilege escalation.
31 views
Daily Writeups
⤷ Title: Wireshark: The Tool That Lets You See What Your Network Is Really Doing
════════════════════════
𐀪 Author: BENSEC
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 18:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #networking #technology #ethical_hacking #wireshark
Medium
🌐 Wireshark: The Tool That Lets You See What Your Network Is Really Doing
Every second, your device is talking to the internet.
42 views
Daily Writeups
⤷ Title: The AI Bug Bounty Gold Rush: Why 2026 Is the Best Time to Start (Before Everyone Else Does)
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 20:20:14 GMT
════════════════════════
⌗ Tags: #hacking #artificial_intelligence #cybersecurity #make_money_online #bug_bounty
Medium
The AI Bug Bounty Gold Rush: Why 2026 Is the Best Time to Start (Before Everyone Else Does)
A field guide for the paranoid, the curious, and the slightly unhinged
24 views
Daily Writeups
⤷ Title: The Invisible Hijack: When Your AI Coding Assistant Turns Against You
════════════════════════
𐀪 Author: Lightning Developer
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 21:41:00 GMT
════════════════════════
⌗ Tags: #development #cybersecurity #hacking #ai_agent #ai
Medium
The Invisible Hijack: When Your AI Coding Assistant Turns Against You
A single HTTP request, zero authentication checks, and an alarming 85% chance your AI development tool could be running unauthorized code…
20 views
Daily Writeups
⤷ Title: C/C++ and Rust definitions for Windows API functions and data types
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 20:46:20 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #malware #infosec #pentesting
Medium
C/C++ and Rust definitions for Windows API functions and data types
If you have ever written Windows code in C/C++ and tried to move the same logic to Rust, you probably know the friction. The types are…
18 views
Daily Writeups
⤷ Title: Wazuh SIEM Lab Part 3: Attack Simulation and What the Dashboards Showed
════════════════════════
𐀪 Author: Funke Akindele
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 21:21:32 GMT
════════════════════════
⌗ Tags: #threat_hunting #wazuh #nikto #penetration_testing #mitre_attack
Medium
Wazuh SIEM Lab Part 3: Attack Simulation and What the Dashboards Showed
Part 3 of 3. Brute forcing SSH, scanning DVWA with Nikto, and seeing how the alerts, MITRE mappings and vulnerability data came together.
37 views
Daily Writeups
⤷ Title: White Rabbit — TryHackMe (WriteUp)
════════════════════════
𐀪 Author: Ankita Chowdhury
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 20:48:36 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #thm_writeup #tryhackme_walkthrough #white_rabbit_challenge
Medium
White Rabbit — TryHackMe (WriteUp)
Given Challenge Data: —
33 views
Daily Writeups
⤷ Title: Deepfake Vishing Secrets Revealed
════════════════════════
𐀪 Author: Dr. Mack Jackson Jr
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 23:09:45 GMT
════════════════════════
⌗ Tags: #hacking #cyber_security_awareness #cybersecurity #small_business #deepfakes
Medium
Deepfake Vishing Secrets Revealed
What Hackers Don’t Want Your Executive Team to Know
26 views
Daily Writeups
⤷ Title: Performing OS Discovery
════════════════════════
𐀪 Author: Archie
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 23:05:06 GMT
════════════════════════
⌗ Tags: #network_scanning #hacking #cybersecurity
Medium
Performing OS Discovery
Introduction
22 views
Daily Writeups
⤷ Title: How I Automated Signal Detection With SDR and Machine Learning
════════════════════════
𐀪 Author: Michael Preston
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 23:19:01 GMT
════════════════════════
⌗ Tags: #automation #signal_analysis #sdr #machine_learning #ethical_hacking
Medium
How I Automated Signal Detection With SDR and Machine Learning
Using pattern recognition to reduce manual spectrum monitoring
27 views
Daily Writeups
⤷ Title: LiteLLM Authentication Bypass via Host Header Injection (CVE-2026-49468)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:35:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Gateway #API security #Authentication Bypass #CVE_2026_49468 #CWE_290 #FastAPI #host header injection #LiteLLM #LLM Proxy #Starlette
Daily CyberSecurity
LiteLLM Authentication Bypass via Host Header Injection (CVE-2026-49468)
A critical LiteLLM authentication bypass (CVE-2026-49468) lets crafted Host Header Injection reach protected AI Gateway routes. Patch in 1.84.0.
21 views
Daily Writeups
⤷ Title: Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:00:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI workflow security #API security #CVE_2026_55450 #CWE_306 #CWE_400 #Denial of Service #File Upload Vulnerability #Information Disclosure #Langflow #unauthenticated upload
Daily CyberSecurity
Langflow File Upload Flaw: Details and PoC Exploit Publicly Disclosed (CVE-2026-55450)
A critical Langflow file upload flaw (CVE-2026-55450) is public with a PoC, enabling unauthenticated denial-of-service and path disclosure. Patch 1.9.1.
18 views
Daily Writeups
⤷ Title: Rockwell Automation patches multiple ICS flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 00:33:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #1794_AENTR #Authentication Bypass #AVEVA PI Data Archive #CVE_2026_0647 #Denial of Service #EtherNet/IP #FactoryTalk Historian #FLEX I/O #ICS security #Rockwell Automation
Daily CyberSecurity
Rockwell Automation patches multiple ICS flaws
Rockwell Automation vulnerabilities affect FactoryTalk Historian and FLEX I/O adapters, including a critical unauthenticated password-change flaw.
11 views
Daily Writeups
⤷ Title: How I Found a Server-Side Entitlement Issue That Allowed Free Users to Access Premium Features
════════════════════════
𐀪 Author: Thoristo
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:45:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackerone #bug_bounty #ethical_hacking #pentesting
Medium
How I Found a Server-Side Entitlement Issue That Allowed Free Users to Access Premium Features
While testing a SaaS platform through its VDP, I noticed that several features were locked behind higher subscription tiers. I wanted to see whether those restrictions were actually enforced by the backend.
13 views
Daily Writeups
⤷ Title: $900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:31:01 GMT
════════════════════════
⌗ Tags: #information_security #session_flaw #bug_bounty #programming #cybersecurity
Medium
$900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
Hi Everyone! Recently, while testing a SaaS platform (let’s call it ExampleCenter), I came across a very interesting access control issue…
16 views