Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Google Selfie Video Sign-In Recovers Locked Accounts
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:22:11 +0000
════════════════════════
⌗ Tags: #Technology #Account Recovery #Account Security #Biometrics #deepfake #google #Passkeys #Selfie Video
Daily CyberSecurity
Google Selfie Video Sign-In Recovers Locked Accounts
We live in an age thoroughly dependent on digital accounts. How, then, does one prove one is oneself after losing a phone, forgetting a password, or finding every backup device unavailable? Seekin…
5 views
Daily Writeups
⤷ Title: HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:00:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Traffic Server #CVE_2026_44909 #CVE_2026_59173 #CVE_2026_59762 #Denial of Service #HTTP/2 DoS vulnerability #memory exhaustion #stalled flow control
Daily CyberSecurity
HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control
A newly disclosed HTTP/2 DoS vulnerability affects several server implementations at once. A remote, unauthenticated attacker can crash or freeze a server by abusing normal flow-control settings. …
5 views
Daily Writeups
⤷ Title: TA488 and TA458 Steal Government Email Using Half-Click Webmail Exploits
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:44:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #half_click exploits #Proofpoint #SpyPress #TA458 #TA488 #webmail zero_days #Zimbra #ZimReaper
Daily CyberSecurity
TA488 and TA458 Steal Government Email Using Half-Click Webmail Exploits
At a Glance Actor or group TA488 (Void Blizzard, Laundry Bear) and TA458 (Operation RoundPress), both Russia-aligned Activity type Espionage via cross-site scripting flaws in webmail; credential a…
4 views
Daily Writeups
⤷ Title: JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:22:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2026_64812 #CVE_2026_64813 #CVE_2026_65907 #IntelliJ IDEA #JetBrains #JetBrains vulnerabilities #TeamCity
Daily CyberSecurity
JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development
TL;DR JetBrains fixed 18 vulnerabilities across GoLand, IntelliJ IDEA, PhpStorm, PyCharm, TeamCity, and WebStorm. Two IntelliJ IDEA flaws in Remote Development sessions carry a maximum CVSS score …
7 views
Daily Writeups
⤷ Title: Apache Syncope Patches SQL Injection and Privilege Escalation Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:10:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache security #Apache Syncope vulnerabilities #CVE_2026_57308 #CVE_2026_62183 #Identity Management #patch management #privilege escalation flaw #sql injection
Daily CyberSecurity
Apache Syncope Patches SQL Injection and Privilege Escalation Flaws
The Apache Syncope project has patched two security flaws in its identity management platform. Both Apache Syncope vulnerabilities carry an “important” severity rating. One allows SQL …
9 views
Daily Writeups
⤷ Title: The Confused Deputy in the AWS Cloud: Bypassing Kubernetes NodeRestriction via IAM Spoofing
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:48:27 GMT
════════════════════════
⌗ Tags: #kubernetes #cybersecurity #bug_bounty #aws #cloud_security
Medium
The Confused Deputy in the AWS Cloud: Bypassing Kubernetes NodeRestriction via IAM Spoofing
Introduction
6 views
Daily Writeups
⤷ Title: AI vs. Human Audit: Why Automation Cannot Replace Cybersecurity Expertise
════════════════════════
𐀪 Author: SdxShadowlabs
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:19:39 GMT
════════════════════════
⌗ Tags: #ai #audit #bug_bounty #sdxshadowlabs #cybersecurity
Medium
AI vs. Human Audit: Why Automation Cannot Replace Cybersecurity Expertise
The cybersecurity industry is currently saturated with claims that artificial intelligence will soon replace human security analysts and…
7 views
Daily Writeups
⤷ Title: How a Simple Google Dork Led Me to Find Reflected XSS & HTML Injection on NASA and Earn a Letter of…
════════════════════════
𐀪 Author: ItsS4LEH
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:07:34 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty_tips #bug_bounty_writeup #bug_bounty #bugbounty_writeup
Medium
How a Simple Google Dork Led Me to Find Reflected XSS & HTML Injection on NASA and Earn a Letter of Recognition [April 2026]
Disclaimer
5 views
Daily Writeups
⤷ Title: Bypassing reCAPTCHA Due to Missing Server-Side Validation
════════════════════════
𐀪 Author: 0X0DOoOM
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:07:35 GMT
════════════════════════
⌗ Tags: #hackerone #recaptcha #web_application_security #bug_bounty #misconfiguration
Medium
Bypassing reCAPTCHA Due to Missing Server-Side Validation
اللَهُمَّ صلِّ وسَلِم وبَارِك على سيدنا محمد (ﷺ)
7 views
Daily Writeups
⤷ Title: What is Vulnerability Assessment vs Penetration Testing?
════════════════════════
𐀪 Author: Himanshu Parmar
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:46:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #application_security #information_security #ethical_hacking
Medium
What is Vulnerability Assessment vs Penetration Testing?
Introduction
10 views
Daily Writeups
⤷ Title: Stop Using requirements.txt: The pylock.toml Migration Guide
════════════════════════
𐀪 Author: Daily Python Programming
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:15:44 GMT
════════════════════════
⌗ Tags: #python #programming #hacking #software_engineering #devops
Medium
Stop Using requirements.txt: The pylock.toml Migration Guide
PEP 751 changes Python packaging forever. Here’s what I learned switching our production environments to tool-agnostic lock files.
6 views
Daily Writeups
⤷ Title: Internal (THM) Tryhackme Hard Challenge
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 14:05:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #tryhackme #privilege_escalation #linux
Medium
Internal (THM) Tryhackme Hard Challenge
Description : Penetration Testing Challenge
9 views
Daily Writeups
⤷ Title: Coercion to krbtgt: NTLM Relay and ADCS ESC8 in 2026
════════════════════════
𐀪 Author: Gilo
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:33:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #dfir #esc8 #adcs_attacks
Medium
Coercion to krbtgt: NTLM Relay and ADCS ESC8 in 2026
A lab-verified walkthrough of the coercion to relay to certificate chain, and the forensic method for reconstructing it after the fact.
13 views
Daily Writeups
⤷ Title: Is Penetration Testing Still Relevant
════════════════════════
𐀪 Author: Sachin
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:13:46 GMT
════════════════════════
⌗ Tags: #security_testing #penetration_testing #cybersecurity #cyber_physical_systems
Medium
Is Penetration Testing Still Relevant
What happens when your security testing is a snapshot but your systems never stop moving
20 views
Daily Writeups
⤷ Title: The Linux Command That Quietly Became My Favorite Debugging Tool
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 15:38:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #programming #coding #ethical_hacking
Medium
The Linux Command That Quietly Became My Favorite Debugging Tool
Reliable, fast, and always available
35 views
Daily Writeups
⤷ Title: ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 20:32:07 +0530
════════════════════════
⌗ Tags: No_Tags
17 views
Daily Writeups
⤷ Title: How I Find SQL Injection Vulnerabilities: My Bug Bounty Hunting Manual Testing Methodology
════════════════════════
𐀪 Author: SAYEM-EH
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 16:53:30 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #web_security #bug_bounty #penetration_testing
Medium
How I Find SQL Injection Vulnerabilities: My Bug Bounty Hunting Manual Testing Methodology
By S4YEM.7KuroX
17 views
Daily Writeups
⤷ Title: Blind SQL injection attack with Conditional Responses using Sniper and Cluster Bomb
════════════════════════
𐀪 Author: CyberLabyrinthX
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 16:23:22 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #ethical_hacking_training #portswigger_lab #bug_bounty #tryhackme_walkthrough
Medium
Blind SQL injection attack with Conditional Responses using Sniper and Cluster Bomb
Blind SQL Injection is a type of SQL injection where the application does not show query results or database errors, but an attacker can…
12 views
Daily Writeups
⤷ Title: The Bug Bounty Recon Workflow I Use Before Opening Burp Suite
════════════════════════
𐀪 Author: Michael Oscar
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 16:22:49 GMT
════════════════════════
⌗ Tags: #burpsuite #web_penetration_testing #bug_bounty #cybersecurity #reconnaissance
Medium
The Bug Bounty Recon Workflow I Use Before Opening Burp Suite
Why great bug bounty hunters spend more time understanding an application than attacking it.
7 views
Daily Writeups
⤷ Title: Zero-Click Attacks: The Silent Threat Redefining Cybersecurity
════════════════════════
𐀪 Author: GhostWriter
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 17:47:04 GMT
════════════════════════
⌗ Tags: #android #apple #cybersecurity #artificial_intelligence #hacking
Medium
Zero-Click Attacks: The Silent Threat Redefining Cybersecurity
Zero-Click Attacks: The Silent Threat Redefining Cybersecurity In an era where digital connectivity defines daily life, the most dangerous cyber threats are often the ones that demand nothing from …
9 views
Daily Writeups
⤷ Title: Left the Door Open on Purpose: Building a Live Honeypot and Watching the World Try to Walk Through…
════════════════════════
𐀪 Author: Tyler Reynolds
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 16:48:17 GMT
════════════════════════
⌗ Tags: #blue_team #microsoft_sentinel #cybersecurity #infosec #siem
Medium
Left the Door Open on Purpose: Building a Live Honeypot and Watching the World Try to Walk Through It
Deploying Microsoft Sentinel, exposing a VM to the internet, and observing real-world RDP brute force attacks from across the globe, and…
7 views