Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: Iranian Hackers Modify PLC Logic in US Infrastructure Attacks
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:09:38 +0000
════════════════════════
⌗ Tags: #Cyber Security #CISA Advisory #Critical Infrastructure #ICS Security #Iranian hackers #PLC Hacking
Information Security News
Iranian Hackers Modify PLC Logic in US Infrastructure Attacks
Covert Sabotage of Critical Infrastructure Iranian threat actors have developed sophisticated techniques to covertly manipulate programmable logic controllers (PLCs), ensuring that human operators…
7 views
Daily Writeups
⤷ Title: CVE-2026-16812: VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 15:26:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arista #CVE_2026_16812 #CVE_2026_17191 #CVE_2026_17192 #exploited in the wild #os command injection #ssrf #VCO #VeloCloud #VeloCloud Orchestrator
Daily CyberSecurity
CVE-2026-16812: VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild
TL;DR: Arista confirmed that CVE-2026-16812, a VeloCloud command injection flaw, is under active attack. The bug scores a maximum CVSS 10.0 and needs no credentials. Arista also patched two relate…
8 views
Daily Writeups
⤷ Title: VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:50:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #active directory #Operation STANDOFF #proxy botnet #Raccoon Stealer #Russian_speaking threat group #Telegram account farm #VMRay
Daily CyberSecurity
VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub
At a glance Actor or group Unnamed Russian-speaking crew tracked as Operation STANDOFF; self-branded “GG Influence” and “ggstandoff” Activity type Pay-per-install malware, …
10 views
Daily Writeups
⤷ Title: Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:01:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BirdTroy #DriveTroy #Gomir #HttpTroy #Kimsuky #Linux Backdoor #North Korea #supply chain attack
Daily CyberSecurity
Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants
At a glance Actor or group Kimsuky, a North Korea-linked group also tracked as Springtail, Thallium and APT43 Activity type Espionage, supply-chain pivoting, credential theft, Linux backdoor deplo…
9 views
Daily Writeups
⤷ Title: How a Hidden GraphQL Endpoint Led Me to a Critical SQL Injection Worth €2,500
════════════════════════
𐀪 Author: 0xSADAT
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:58:18 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #infosec #bug_bounty #info_sec_writeups #cybersecurity
Medium
How a Hidden GraphQL Endpoint Led Me to a Critical SQL Injection Worth €2,500
A simple directory fuzzing session uncovered a hidden GraphQL endpoint. A harmless-looking search bar eventually turned into a confirmed…
10 views
Daily Writeups
⤷ Title: TryHeartMe THM write-up
════════════════════════
𐀪 Author: Creepus
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 15:31:01 GMT
════════════════════════
⌗ Tags: #labs #writeup #solved #hacking #tryhackme
Medium
TryHeartMe THM write-up
Introduction
7 views
Daily Writeups
⤷ Title: Volatility — Memory Forensics
════════════════════════
𐀪 Author: SAFAL GAUTAM
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:32:12 GMT
════════════════════════
⌗ Tags: #memory_forensics #hacking #cybersecurity #tools
Medium
Volatility — Memory Forensics
Volatility 2 and 3 have some genuinely frustrating setup quirks that aren’t documented clearly anywhere. Here’s everything worth knowing.
7 views
Daily Writeups
⤷ Title: TryHackMe: Passive Reconnaissance
════════════════════════
𐀪 Author: Chimeremeze
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:27:57 GMT
════════════════════════
⌗ Tags: #tryhackme #penetration_testing #cybersecurity
Medium
TryHackMe: Passive Reconnaissance
Introduction
8 views
Daily Writeups
⤷ Title: TryHackMe — Metasploit Meterpreter
════════════════════════
𐀪 Author: Ufuk Yaman
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:52:31 GMT
════════════════════════
⌗ Tags: #tryhackme #windows #metasploit #pentesting #exploitation
Medium
TryHackMe — Metasploit Meterpreter
Bu oda, Metasploit Framework’ün en güçlü bileşenlerinden biri olan Meterpreter’ın işlevselliğini, mimarisini ve kullanım yöntemlerini…
16 views
Daily Writeups
⤷ Title: TryHackMe The Brochure Day 0 Challenge
════════════════════════
𐀪 Author: Benedict
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:07:03 GMT
════════════════════════
⌗ Tags: #osint_investigation #tryhackme #osint
Medium
TryHackMe The Brochure Day 0 Challenge
This is a write-up of my thought process when solving the TryHackMe The Brochure challenge.
8 views
Daily Writeups
⤷ Title: YACS — Ethical Hacking & Cybersecurity Course in Kerala
════════════════════════
𐀪 Author: Eldho Yacs
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 15:33:40 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
YACS — Ethical Hacking & Cybersecurity Course in Kerala
Looking for the best ethical hacking course in Kerala or a hands-on cybersecurity course in Kerala? Welcome to YACS (Yet Another Cyber…
11 views
Daily Writeups
⤷ Title: Introduction
════════════════════════
𐀪 Author: Shreya Upadhyay
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 15:25:05 GMT
════════════════════════
⌗ Tags: #students #cybersecurity #content_creation #technology #ethical_hacking
Medium
Introduction
Hii , My name is Shreya a student , currently pursuing my Bachelor’s degree and from today on I am starting my journey here and will…
12 views
Daily Writeups
⤷ Title: Database developments DON’Ts
════════════════════════
𐀪 Author: Zahir Mohideen
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 15:46:51 GMT
════════════════════════
⌗ Tags: #explain_plan #sql #best_practices #sql_injection #database_development
Medium
Database developments DON’Ts
This is my first blog. Based on your feedback , I will be updating this blog , post new blogs .Thanks for looking into this .
22 views
Daily Writeups
⤷ Title: Reading the patch instead of the code: SQL Injection in GLPI (CVE-2026–53629)
════════════════════════
𐀪 Author: Paulo Werneck (5kr1pt)
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 13:52:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #offensive_security #sql_injection #vulnerability_research #cve
Medium
Reading the patch instead of the code: SQL Injection in GLPI (CVE-2026–53629)
On March 3, 2026, GLPI shipped a fix for a SQL injection in the history filters, CVE-2026–29047. Five lines added across two files…
37 views
Daily Writeups
⤷ Title: Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 22:46:28 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: Daylight Security Launches Detection Program Visibility
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 16:40:31 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #Daylight Security
Hackread
Daylight Security Launches Detection Program Visibility
Follow us on all major social media platforms @Hackread
25 views
Daily Writeups
⤷ Title: Forgot Password Security Testing Checklist
════════════════════════
𐀪 Author: Varshith Reddy
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 17:55:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #web_security #authentication #password_security
Medium
Forgot Password Security Testing Checklist
User Enumeration
13 views
Daily Writeups
⤷ Title: Change Password Security Testing Checklist
════════════════════════
𐀪 Author: Varshith Reddy
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 17:55:26 GMT
════════════════════════
⌗ Tags: #authentication #cybersecurity #bug_bounty #account_security #application_security
Medium
Change Password Security Testing Checklist
Old Password Verification
9 views
Daily Writeups
⤷ Title: Business Logic Vulnerabilities — Field Guide
════════════════════════
𐀪 Author: adce626
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 17:47:49 GMT
════════════════════════
⌗ Tags: #bug_bounty #adce626 #logic
Medium
Business Logic Vulnerabilities — Field Guide
Business logic flaws: Design flaws letting users manipulate workflows (like altering prices) undetected by automated scanners.
11 views
Daily Writeups
⤷ Title: How I Found a Broken Access Control Vulnerability During a Penetration Test
════════════════════════
𐀪 Author: Prachi_Tyagi
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 16:57:02 GMT
════════════════════════
⌗ Tags: #pentesting #information_technology #bug_bounty #ethical_hacking #cybersecurity
Medium
How I Found a Broken Access Control Vulnerability During a Penetration Test
If there’s one vulnerability I keep running into during penetration testing, it’s Broken Access Control. It doesn’t always involve…
12 views
Daily Writeups
⤷ Title: Nebula AI Explained | The Future of AI-Powered Ethical Hacking & Security Automation
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 16:31:51 GMT
════════════════════════
⌗ Tags: #hacking #artificial_intelligence #cybersecurity #bug_bounty #web_development
Medium
Nebula AI Explained | The Future of AI-Powered Ethical Hacking & Security Automation 🔥
How Nebula Is Transforming Penetration Testing with AI, Local LLMs, and Intelligent Security Workflows
13 views