Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Climbing the Stairs to SYSTEM: From One User to the Whole Domain
════════════════════════
𐀪 Author: Will Giles | Cybersecurity
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 20:01:11 GMT
════════════════════════
⌗ Tags: #active_directory #active_directory_security #cybersecurity #penetration_testing
Medium
Climbing the Stairs to SYSTEM: From One User to the Whole Domain
How I worked a single low-privileged account all the way up to SYSTEM on the domain controller, one step at a time.
19 views
Daily Writeups
⤷ Title: SQL Injection (SQLi): A Beginner’s Guide to Understanding One of the Most Common Web…
════════════════════════
𐀪 Author: VICTUS(RQ)
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 21:47:14 GMT
════════════════════════
⌗ Tags: #sql_injection #sqlinjectiontypes #owasp_top_10 #ethical_hacking #purpose_learning
Medium
SQL Injection (SQLi): A Beginner’s Guide to Understanding One of the Most Common Web…
Introduction
12 views
Daily Writeups
⤷ Title: DAY 13-NAMP FOR BEGINNERS
════════════════════════
𐀪 Author: Wandesrtech
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 20:46:00 GMT
════════════════════════
⌗ Tags: #linux #ethical_hacking #nmap #cybersecurity #reconnaissance
Medium
DAY 13-NAMP FOR BEGINNERS
Introduction
18 views
Daily Writeups
⤷ Title: New Tool, The Six Eyes!
════════════════════════
𐀪 Author: The Husky Hacker
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 20:33:24 GMT
════════════════════════
⌗ Tags: #ethical_hacking_tools #ethical_hacking
Medium
New Tool, The Six Eyes!
So, I kept making nerdy tools and really had the idea, Gojo has the six eyes, why not make that a quicker script with PowerShell for quick…
18 views
Daily Writeups
⤷ Title: OAuth Is Still Misunderstood
════════════════════════
𐀪 Author: Lu Li
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 21:45:08 GMT
════════════════════════
⌗ Tags: #software_development #oauth2 #api_security #web_development #cybersecurity
Medium
OAuth Is Still Misunderstood
OAuth has a reputation for being complicated, mysterious, and slightly annoying. To be fair, it has worked hard to earn that reputation.
22 views
Daily Writeups
⤷ Title: Blind SQL isn’t Blind any More
════════════════════════
𐀪 Author: Hyper Vare
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 21:28:57 GMT
════════════════════════
⌗ Tags: #blind_sql_injection #database_hacking #i_can_see_blind_sql #sql_injection
Medium
Blind SQL isn’t Blind any More
Hi, I am HV (Harsh Vardhan) a Security Researcher. So, that’s it about me.
30 views
Daily Writeups
⤷ Title: Reflected XSS into a JavaScript string with angle brackets HTML encoded | Shiv Kumar | OWASP Top 10…
════════════════════════
𐀪 Author: Shiv Kumar
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 23:25:13 GMT
════════════════════════
⌗ Tags: #xss_attack #aplication_security #reflected_xss #owasp_top_10 #bug_bounty
Medium
Reflected XSS into a JavaScript string with angle brackets HTML encoded | Shiv Kumar | OWASP Top 10…
Portswigger lab Reflected XSS into a JavaScript string with angle brackets HTML encoded
32 views
Daily Writeups
⤷ Title: The Single-Primitive Write: WriteProcessMemory’s Hidden Page Flip
════════════════════════
𐀪 Author: Tom O'Neill
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 22:15:43 GMT
════════════════════════
⌗ Tags: #malware #windows_internals #ethical_hacking #cybersecurity #windows
Medium
The Single-Primitive Write: WriteProcessMemory’s Hidden Page Flip
Documenting Undocumented WriteProcessMemory Behavior
27 views
Daily Writeups
⤷ Title: The Fallacy of the Valid Signature: Why Critical Transaction Flows Need More Than Cryptographic…
════════════════════════
𐀪 Author: Declerus Yves Kerbens
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 21:56:55 GMT
════════════════════════
⌗ Tags: #pki #cryptography #appsec #certificate_pinning #api_security
Medium
The Fallacy of the Valid Signature: Why Critical Transaction Flows Need More Than Cryptographic…
Abstract
18 views
Daily Writeups
⤷ Title: ErrTraffic Malware Spreads ClickFix Lures via Hacked WordPress Sites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 01:26:58 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #CVE_2020_25213 #ErrTraffic #EtherHiding #Malware_as_a_Service #TDS #Vidar #wordpress
Daily CyberSecurity
ErrTraffic Malware Spreads ClickFix Lures via Hacked WordPress Sites
ErrTraffic malware powers ClickFix attacks on hacked WordPress sites, using EtherHiding on the blockchain to hide its C2 and spread infostealers.
26 views
Daily Writeups
⤷ Title: Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 01:11:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #admin panel #Authorization Bypass #Avo #CVE_2026_55518 #Missing Authorization #privilege escalation #Rails Security #ruby on rails
Daily CyberSecurity
Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps
CVE-2026-55518 is a critical Avo authorization bypass flaw enabling privilege escalation in Ruby on Rails admin panels. Update to Avo 3.32.1 now.
21 views
Daily Writeups
⤷ Title: Three Critical pgAdmin 4 Vulnerabilities Patched: XSS, Auth Bypass, and AI Assistant SQLi
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 00:30:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_12045 #CVE_2026_12046 #CVE_2026_12048 #pgAdmin #pgAdmin 4 vulnerabilities #PostgreSQL #Prompt injection #Stored XSS
Daily CyberSecurity
Three Critical pgAdmin 4 Vulnerabilities Patched: XSS, Auth Bypass, and AI Assistant SQLi
Three critical pgAdmin 4 vulnerabilities (CVE-2026-12046, CVE-2026-12048, CVE-2026-12045) risk XSS and RCE. Update to pgAdmin 4 9.16 now.
23 views
Daily Writeups
⤷ Title: Public Exploit Released for FreeBSD kTLS Local Root Flaw CVE-2026-45257
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 00:00:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_45257 #freebsd #Kernel TLS #kTLS #Local Privilege Escalation #Local Root #proof_of_concept #sendfile
Daily CyberSecurity
Public Exploit Released for FreeBSD kTLS Local Root Flaw CVE-2026-45257
A public PoC exploit for the FreeBSD kTLS vulnerability (CVE-2026-45257) enables local privilege escalation to root. Patch your FreeBSD systems now.
22 views
Daily Writeups
⤷ Title: DragonForce Hides Backdoor C2 Inside Microsoft Teams TURN Relays
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 03:30:15 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor.Turn #BYOVD #DragonForce #Hackledorb #Microsoft Teams #QUIC #ransomware #TURN Relay
Daily CyberSecurity
DragonForce Hides Backdoor C2 Inside Microsoft Teams TURN Relays
DragonForce ransomware deployed Backdoor.Turn, a Microsoft Teams backdoor that hides C2 in Teams TURN relays. Symantec details the novel technique.
15 views
Daily Writeups
⤷ Title: 2,060 New CVEs and 4 Actively Exploited Flaws (June 15-21, 2026)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 03:13:03 +0000
════════════════════════
⌗ Tags: #Weekly Recap #Actively Exploited #CISA KEV #CVE #LiteSpeed #Oracle #Splunk #Vulnerability Roundup #Weekly CVE Report
Daily CyberSecurity
2,060 New CVEs and 4 Actively Exploited Flaws (June 15-21, 2026)
This weekly CVE report covers 2,060 new vulnerabilities from June 15-21, including 358 critical flaws and 4 actively exploited CVEs now in CISA KEV.
19 views
Daily Writeups
⤷ Title: Four undici Vulnerabilities Affect a Package With 133M Weekly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 02:00:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_6734 #CVE_2026_9697 #nodejs #npm #SOCKS5 #TLS Bypass #undici #WebSocket
Daily CyberSecurity
Four undici Vulnerabilities Affect a Package With 133M Weekly Downloads
Four undici vulnerabilities (CVE-2026-6734, CVE-2026-9697) affect the Node.js HTTP client, which sees 133M weekly downloads. Update undici now.
28 views
Daily Writeups
⤷ Title: XSS, CSRF, SQL Injection, and SSRF Explained with Real Stories
════════════════════════
𐀪 Author: Wanuja Ranasinghe
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 02:31:00 GMT
════════════════════════
⌗ Tags: #sql_injection #xss_attack #web_security #software_architecture #software_security
Medium
XSS, CSRF, SQL Injection, and SSRF Explained with Real Stories
Beginner-friendly attack explanations and how developers prevent them
36 views
Daily Writeups
⤷ Title: Microsoft Details Support Lifecycle for Windows 11 Version 26H2
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:36:55 +0000
════════════════════════
⌗ Tags: #Windows #IT Administration #Microsoft #OS Update #Windows 11 #Windows 11 version 26H2
Daily CyberSecurity
Microsoft Details Support Lifecycle for Windows 11 Version 26H2
Microsoft outlines the official support lifecycle and deployment guidelines for Windows 11 version 26H2, urging IT admins to prepare.
27 views
Daily Writeups
⤷ Title: Gemini CLI Deprecation: Google Moves Developers to Antigravity CLI
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 04:36:44 +0000
════════════════════════
⌗ Tags: #Technology #Antigravity CLI #Developer Tools #Gemini CLI #Gemini Code Assist #google
Daily CyberSecurity
Gemini CLI Deprecation: Google Moves Developers to Antigravity CLI
Google's Gemini CLI deprecation took effect on June 18, 2026. Personal accounts must now migrate to Antigravity CLI. See who's affected and why.
22 views
Daily Writeups
⤷ Title: Windows Recycle Bin Bug Surfaces After the June 2026 Update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 04:34:11 +0000
════════════════════════
⌗ Tags: #Windows #June 2026 Update #KB5094126 #Patch Tuesday #Recycle Bin bug #Windows 11
Daily CyberSecurity
Windows Recycle Bin Bug Surfaces After the June 2026 Update
Microsoft confirms a Windows Recycle Bin bug in the June 2026 update that shows internal $R filenames when you delete a single file.
18 views
Daily Writeups
⤷ Title: Unlimited Coupon Abuse → A Critical Business Logic Flaw
════════════════════════
𐀪 Author: Mian Hammad
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:57:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #pentesting #bussines_logic #api
Medium
🚨 Unlimited Coupon Abuse → A Critical Business Logic Flaw
Hello Everyone , My Name is Mian Hammad, And today I’m sharing Unlimited Coupon Abuse.
15 views