Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Internal: TryHackMe Writeup [PT-BR]
════════════════════════
𐀪 Author: sbimoxa
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 23:21:31 GMT
════════════════════════
⌗ Tags: #ctf_writeup #tryhackme #cibersegurança #tryhackme_writeup #medium_brasil
Medium
Internal: TryHackMe Writeup [PT-BR]
Este writeup documenta o processo passo a passo para comprometer um servidor alvo. Além de mostrar quais comandos foram executados, o…
8 views
Daily Writeups
⤷ Title: TryHackMe Hacker Holidays 2026 | Day 2 | Room 404
════════════════════════
𐀪 Author: MistressOfTheDarkweb
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 23:08:39 GMT
════════════════════════
⌗ Tags: #tryhackme #web_hacking #cybersecurity
Medium
TryHackMe Hacker Holidays 2026 | Day 2 | Room 404
Concierge Briefing
8 views
Daily Writeups
⤷ Title: SQL Injection Lab | TryHackMe (THM)
════════════════════════
𐀪 Author: Nuray Xudadatova
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 23:02:43 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #sql_injection_attack #sql_injection #tryhackme #sql_database
Medium
SQL Injection Lab | TryHackMe (THM)
Understand how SQL injection attacks work and how to exploit this vulnerability.
9 views
Daily Writeups
⤷ Title: TryHackMe Hacker Holidays 2026 | Day 1 | AI
════════════════════════
𐀪 Author: MistressOfTheDarkweb
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 22:56:37 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #tryhackme
Medium
TryHackMe Hacker Holidays 2026 | Day 1 | AI
Concierge Briefing
10 views
Daily Writeups
⤷ Title: Day 1/10: The Attacker’s Recon Phase — Cyber Kill Chain
════════════════════════
𐀪 Author: Kay
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 22:29:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #information_security #reconnaissance #soc_analyst
Medium
Day 1/10: The Attacker’s Recon Phase — Cyber Kill Chain
Every cyberattack starts long before any exploit is executed. Today marks Day 1 of documenting my walkthrough of the Cyber Kill Chain on…
15 views
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
18 views
Daily Writeups
⤷ Title: Everything Is Input: SQL Injection Through Parameter Names
════════════════════════
𐀪 Author: Clark Voss
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:50:43 GMT
════════════════════════
⌗ Tags: #security #ethical_hacking #cybersecurity #bug_bounty #hacking
Medium
Everything Is Input: SQL Injection Through Parameter Names
How a 500 error, a hunch, and a lot of manual testing led me to a SQL injection I had never seen before and why I had to write my own…
15 views
Daily Writeups
⤷ Title: Guía Definitiva de Seguridad en APIs: OWASP Top 10, Bypasses y Mitigación
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #technology #api #bug_bounty #hacking #cybersecurity
11 views
Daily Writeups
⤷ Title: Muhsin Ali Shah — Cybersecurity Researcher, Cloud Security Engineering Student & AI Enthusiast
════════════════════════
𐀪 Author: Muhsin Ali Shah
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 00:14:12 GMT
════════════════════════
⌗ Tags: #pakistan #cybersecurity #careers #hacking #ethical_hacking
Medium
Muhsin Ali Shah — Cybersecurity Researcher, Cloud Security Engineering Student & AI Enthusiast
Cybersecurity Researcher, Cloud Security Engineering Student & AI Enthusiast
13 views
Daily Writeups
⤷ Title: Walkthrough: TryHackMe Room ValenFind
════════════════════════
𐀪 Author: LZR_404
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:36:45 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ethical_hacking #tryhackme #cybersecurity
Medium
Walkthrough: TryHackMe Room ValenFind
When building modern web applications, the phrase “your secrets are safe with us” is usually a comforting promise. In the case of…
20 views
Daily Writeups
⤷ Title: Telnet vs SSH: por qué una sesión puede verse completa en una captura de red
════════════════════════
𐀪 Author: Andrespistone
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:41:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #linux #ethical_hacking
21 views
Daily Writeups
⤷ Title: HTTP sin TLS: así quedan expuestas las credenciales en una captura de red
════════════════════════
𐀪 Author: Andrespistone
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:20:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #ethical_hacking #kali_linux
19 views
Daily Writeups
⤷ Title: Acoustic Keystroke Attack Decodes Typing Using Language Models
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:36:27 +0000
════════════════════════
⌗ Tags: #Information Security #Acoustic Attack #AI security #cybersecurity #Keystroke Eavesdropping #language models
Information Security News
Acoustic Keystroke Attack Decodes Typing Using Language Models
The acoustic reverberations of keyboard strokes can betray far more information than previously imagined. Recently, a novel side-channel attack demonstrated that a brief audio recording suffices t…
14 views
Daily Writeups
⤷ Title: MCP Protocol Embraces Stateless Architecture in Major Overhaul
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:55:50 +0000
════════════════════════
⌗ Tags: #Technology #API Updates #MCP Protocol #Software Engineering #Stateless Architecture #web development
Daily CyberSecurity
MCP Protocol Embraces Stateless Architecture in Major Overhaul
The Model Context Protocol (MCP), spearheaded by Anthropic, recently launched its highly anticipated 2026-07-28 specification. The defining transformation of this update is the complete migration …
8 views
Daily Writeups
⤷ Title: Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:48:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #backdoor #CVE_2026_18072 #cybersecurity #wordpress
Daily CyberSecurity
Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites
TL;DR Threat actors injected a critical backdoor into the Advanced Responsive Video Embedder plugin. This flaw tracks as CVE-2026-18072 (CVSS 9.8). Attackers can bypass authentication entirely. Th…
9 views
Daily Writeups
⤷ Title: Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:26:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Check Point #CVE_2026_16232 #Rapid7 #Security Management Server #SmartConsole #zero_day
Daily CyberSecurity
Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public
TL;DR Attackers are exploiting a SmartConsole authentication bypass in Check Point management servers. The flaw, CVE-2026-16232, lets an unauthenticated attacker gain full administrator access. Ch…
9 views
Daily Writeups
⤷ Title: NVIDIA BlueField Flaw CVE-2026-65094 Allows Code Execution (CVSS 9.0)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:15:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #ConnectX #CVE_2026_65094 #DOCA #nvidia #NVIDIA BlueField #VIRTIO_Net
Daily CyberSecurity
NVIDIA BlueField Flaw CVE-2026-65094 Allows Code Execution (CVSS 9.0)
TL;DR NVIDIA patched a critical NVIDIA BlueField vulnerability tracked as CVE-2026-65094. The VIRTIO-Net flaw scores a CVSS of 9.0. A virtual machine user could trigger code execution in the affec…
11 views
Daily Writeups
⤷ Title: IBM Aspera Vulnerabilities Patched in Faspex 5 and Desktop App
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:03:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Aspera Faspex #CVE_2026_14958 #CVE_2026_14959 #CVE_2026_14973 #IBM Aspera #IBM Aspera Desktop #Path Traversal #Remote Code Execution
Daily CyberSecurity
IBM Aspera Vulnerabilities Patched in Faspex 5 and Desktop App
TL;DR IBM patched five IBM Aspera vulnerabilities across two products on July 20, 2026. They affect Aspera Faspex 5 and the Aspera Desktop App. The worst flaws reach a CVSS score of 9.3 and allow …
9 views
Daily Writeups
⤷ Title: How I Earned $[XXXX] By Breaking Into a Company’s “Employee-Only” Internal Platform
════════════════════════
𐀪 Author: Hemandhemanth
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:30:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #hacking #bug_bounty #ethical_hacking
Medium
How I Earned $[XXXX] By Breaking Into a Company’s “Employee-Only” Internal Platform
Sometimes the scariest vulnerabilities aren’t complex exploits — they’re one broken assumption in an otherwise “secure” flow. In this case…
10 views
Daily Writeups
⤷ Title: GTG-1002: how a Chinese hacking group got AI to run 90% of a cyberattack on its own
════════════════════════
𐀪 Author: Trends 24/7
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:31:01 GMT
════════════════════════
⌗ Tags: #hacking #ai #artificial_intelligence #cybersecurity #data_security
Medium
GTG-1002: how a Chinese hacking group got AI to run 90% of a cyberattack on its own
Hi everyone, I am Trends 24/7 and in this blog I want to walk you through something that changed how I think about AI security this year…
11 views
Daily Writeups
⤷ Title: Verbose
════════════════════════
𐀪 Author: Cardosoleo
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:15:42 GMT
════════════════════════
⌗ Tags: #hack_smarter #penetration_testing #verbose
Medium
Verbose
Objective / Scope
17 views