Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: The Missing Identity Layer for AI Agents
════════════════════════
𐀪 Author: Saivarma Dantuluri
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 16:49:26 GMT
════════════════════════
⌗ Tags: #identity #ai_agent #api_security #cybersecurity #llm
Medium
The Missing Identity Layer for AI Agents
Why autonomous agents need their own AuthN/AuthZ and what an “Agentic IDP” actually looks like
26 views
Daily Writeups
⤷ Title: Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
════════════════════════
𐀪 Author: HobbiesPark
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 17:37:36 GMT
════════════════════════
⌗ Tags: #spring_security #java #spring_boot #microservices #ssrf
Medium
Spring Boot 4.1’s New SSRF Filter Never Touched My Feign Calls — Here’s the Trap
I upgraded a service to Spring Boot 4.1, switched on its new SSRF filter, and braced for the usual fallout — a global block rule shredding…
40 views
Daily Writeups
⤷ Title: The Database Handed Me Every Password — It Just Needed the Right Table Name
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 19:42:59 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #penetration_testing #bug_bounty #web_security
Medium
The Database Handed Me Every Password — It Just Needed the Right Table Name
One quote, one Oracle quirk, and a gift shop printed its entire user list.
27 views
Daily Writeups
⤷ Title: Ethical Hacking for Beginners — Day 5: Kali Linux Commands Every Hacker Must Know (Part 2) —…
════════════════════════
𐀪 Author: HusnaAnjum
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 19:10:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #kali_linux #hacking #linux #ethical_hacking
Medium
Ethical Hacking for Beginners — Day 5: Kali Linux Commands Every Hacker Must Know (Part 2) — Permissions, Processes, Packages &…
Ethical Hacking Series
24 views
Daily Writeups
⤷ Title: Abusing Pastebin for Sensitive Data Exfiltration
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 18:51:53 GMT
════════════════════════
⌗ Tags: #malware #hacking #cybersecurity #infosec #pentesting
Medium
Abusing Pastebin for Sensitive Data Exfiltration
When an attacker has compromised a machine and collected sensitive information, the challenge is not just getting the data out, it’s doing…
22 views
Daily Writeups
⤷ Title: How Hackers Stole 40 Million Credit Cards Through an HVAC Company
════════════════════════
𐀪 Author: Mahidinesh
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 18:31:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #data_breach #technology #information_security #hacking
Medium
How Hackers Stole 40 Million Credit Cards Through an HVAC Company
Hackers didn’t attack Target first. They hacked a small HVAC company — and used that access to steal 40 million credit card numbers.
21 views
Daily Writeups
⤷ Title: IDS vs IPS: What Nobody Tells You Until You’ve Actually Blocked Your Own Traffic
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 19:11:29 GMT
════════════════════════
⌗ Tags: #suricata #networking #technology #infosec #cybersecurity
Medium
IDS vs IPS: What Nobody Tells You Until You’ve Actually Blocked Your Own Traffic
I wrote a rule, ran it, and watched Facebook disappear from my own browser in real time.
23 views
Daily Writeups
⤷ Title: ️‍♂️ TryHackMe Writeup: The Mission ContAInment
════════════════════════
𐀪 Author: C1PH32
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 19:33:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #cybersecurity #ai #incident_response
Medium
🕵️‍♂️ TryHackMe Writeup: The Mission ContAInment
Hey everyone! Welcome to my first writeup. Today, we are tackling a really cool investigation.
30 views
Daily Writeups
⤷ Title: Careers in Cyber — TryHackme
════════════════════════
𐀪 Author: Andreyna Marques Carvalho
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 11:26:16 GMT
════════════════════════
⌗ Tags: #walkthrough #tryhackme_walkthrough #ctf #careers_in_cyber #tryhackme
Medium
TryHackme —Careers in Cyber [COMPLETED — walkthrough]
1- Introduction
37 views
Daily Writeups
⤷ Title: “I Won’t Let Your Future Customers Register” — Hunting an Email Verification Bug Through Recon
════════════════════════
𐀪 Author: Muhammad Murtaza
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 21:05:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #bug_bounty #web_security #ethical_hacking_training
Medium
“I Won’t Let Your Future Customers Register” — Hunting an Email Verification Bug Through Recon
A bug bounty story about how a routine reconnaissance exercise led to discovering an insecure email change workflow.
38 views
Daily Writeups
⤷ Title: Sliding Window Counter
════════════════════════
𐀪 Author: PINAR BİLDİRİCİ
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 20:48:51 GMT
════════════════════════
⌗ Tags: #rate_limiting #api_security #design_systems #sliding_window_counter
Medium
Sliding Window Counter
A Sliding Window Counter is a rate-limiting algorithm. It is used to control how many requests a user can send in a specific period of…
34 views
Daily Writeups
⤷ Title: FAT32 Filesystem Forensics: A Complete DFIR Walkthrough
════════════════════════
𐀪 Author: DeadHack
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 23:26:12 GMT
════════════════════════
⌗ Tags: #incident_response #malware_analysis #digital_forensics #tryhackme #cybersecurity
Medium
FAT32 Filesystem Forensics: A Complete DFIR Walkthrough
Here’s the cleaned-up version:
25 views
Daily Writeups
⤷ Title: How I Recon a Target, Part Two: Now We Poke It
════════════════════════
𐀪 Author: Babou
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 17:59:47 GMT
════════════════════════
⌗ Tags: #methodology #cybersecurity #rwanda #recon
Medium
How I Recon a Target, Part Two: Now We Poke It
Babou again. If you read part one, you’ll know I spent the whole thing being suspiciously well-behaved — mapping subdomains, ports…
23 views
Daily Writeups
⤷ Title: CISA Adds Cisco Unified CM and PTC Windchill Flaws to KEV Catalog
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 02:00:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #CISA KEV #Cisco Unified CM #CVE_2026_12569 #CVE_2026_20230 #FlexPLM #Known Exploited Vulnerabilities #PTC Windchill #ssrf
Daily CyberSecurity
CISA Adds Cisco Unified CM and PTC Windchill Flaws to KEV Catalog
CISA added two flaws to its KEV Catalog: a Cisco Unified CM SSRF bug and a PTC Windchill RCE. Federal agencies must patch by June 28, 2026.
14 views
Daily Writeups
⤷ Title: Chrome Security Update Patches Three High-Severity Browser Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 01:56:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #chrome #Chrome Security Update #CVE_2026_13281 #CVE_2026_13282 #CVE_2026_13283 #google chrome
Daily CyberSecurity
Chrome Security Update Patches Three High-Severity Browser Flaws
Google's Chrome security update patches three high-severity flaws in Mojo, Payments, and AdFilter. Update to 149.0.7827.200 now to stay protected.
17 views
Daily Writeups
⤷ Title: FFmpeg MagicYUV Vulnerability Exposes Media Applications
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 01:28:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8461 #FFmpeg #MagicYUV #PixelSmash #Vulnerability
Daily CyberSecurity
FFmpeg MagicYUV Vulnerability Exposes Media Applications
A critical FFmpeg MagicYUV vulnerability (CVE-2026-8461) allows attackers to achieve remote code execution via crafted media files. Patch systems quickly.
11 views
Daily Writeups
⤷ Title: Langflow Security Vulnerabilities Expose AI Systems
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 01:01:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_55255 #CVE_2026_55447 #CVE_2026_55450 #Langflow #rce #Vulnerability
Daily CyberSecurity
Langflow Security Vulnerabilities Expose AI Systems
Three critical Langflow security vulnerabilities (CVE-2026-55255, CVE-2026-55447, CVE-2026-55450) expose AI applications to RCE and DoS attacks. Patch now.
10 views
Daily Writeups
⤷ Title: Critical Event-Driven Ansible Flaw Leaks Stored Credentials
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 00:01:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Ansible Automation Platform #Credential Disclosure #CVE_2026_11807 #Event_Driven Ansible #Missing Authorization #red hat #websocket API
Daily CyberSecurity
Critical Event-Driven Ansible Flaw Leaks Stored Credentials
A missing authorization flaw in Event-Driven Ansible (CVE-2026-11807, CVSS 9.6) leaks credentials like OAuth tokens, vault passwords, and SSH keys.
13 views
Daily Writeups
⤷ Title: $1,100 Privilege Escalation: Group Leader Can Promote Anyone via Hidden Parameter
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 01:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #parameter_tampering #hacking #pentesting #bug_bounty
Medium
$1,100 Privilege Escalation: Group Leader Can Promote Anyone via Hidden Parameter
Hi Everyone! This one started as a simple permission check… but turned into a full role manipulation vulnerability inside a SaaS platform…
15 views
Daily Writeups
⤷ Title: Data Representation: Unmasking Bits, Hex, and Colors in Memory
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 01:43:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #binary_and_hexadecimal #data_representation #basic_software #tryhackme
Medium
Data Representation: Unmasking Bits, Hex, and Colors in Memory
Introduction
19 views
Daily Writeups
⤷ Title: Windows Fundamentals 3 — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 01:14:31 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #windows_fundamentals_3 #tryhackme #windows
Medium
Windows Fundamentals 3 — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
21 views