Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: 3 Hops to RCE. | MCP Security Part 4
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 17:14:55 GMT
════════════════════════
⌗ Tags: #ai_security #mcp_security #prompt_injection_attack #bug_bounty #rce
Medium
3 Hops to RCE. | MCP Security Part 4
The MCP Bug Bounty Field Guide · Part 4 of 5 — the full takeover chain, hop by hop, grounded in a real CVE’d exploit. And the single hop a…
8 views
Daily Writeups
⤷ Title: THM: The Concierge Knows Too Much
════════════════════════
𐀪 Author: Dave Aillerr Rivas
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 07:35:24 GMT
════════════════════════
⌗ Tags: #thm_writeup #hacker_holidays #tryhackme #prompt_injection
Medium
THM: The Concierge Knows Too Much
Difficulty: Easy | Type: Prompt Injection / LLM Jailbreaking
14 views
Daily Writeups
⤷ Title: The Dawn of the AI Worm: Copilot Prompt Injection
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 13:16:22 +0000
════════════════════════
⌗ Tags: #Malware #AI Worm #Copilot Security #cybersecurity #Prompt Injection
Information Security News
The Dawn of the AI Worm: Copilot Prompt Injection
An infected Word document can imperceptibly distort a corporate report and subsequently transfer malicious instructions into new files. Merely opening the document is insufficient to launch this a…
12 views
Daily Writeups
⤷ Title: LLMborghini(THM) Writeup
════════════════════════
𐀪 Author: Priyabrat Swain
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 08:54:40 GMT
════════════════════════
⌗ Tags: #ai_security #tryhackme #ai #prompt_injection_attack #llm
Medium
LLMborghini(THM) Writeup
Difficulty: Easy Category: AI/LLM security
9 views
Daily Writeups
⤷ Title: The Concierge Knows Too Much (THM) Tryhackme Walkthrough Hacker Holidays 2026 Day 1
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 09:59:06 GMT
════════════════════════
⌗ Tags: #hacking #prompt_injection_attack #cybersecurity #tryhackme #prompt_injection
Medium
The Concierge Knows Too Much (THM) Tryhackme Walkthrough Hacker Holidays 2026 Day 1
Description : She knows your name, your room, your coffee order, none of which you told her. Word your next question carefully and she’ll…
13 views
Daily Writeups
⤷ Title: TryHackMe: White Rabbit Walkthrough
════════════════════════
𐀪 Author: Tde
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 14:21:53 GMT
════════════════════════
⌗ Tags: #ai_security #prompt_injection #cybersecurity #tryhackme
Medium
TryHackMe:White Rabbit Walkthrough
TryHackMe:White Rabbit Walkthrough Room Overwiev You have accessed a restricted terminal. Someone is watching. The system holds records, some visible, most not. Somewhere in the data is a way out …
15 views
Daily Writeups
⤷ Title: TryHackMe Hacker’s Holiday 2026: Day 1 — The Concierge Knows Too Much
════════════════════════
𐀪 Author: Jo0e
════════════════════════
ⴵ Time: Sun, 02 Aug 2026 01:33:54 GMT
════════════════════════
⌗ Tags: #tryhackme #ai_security #cybersecurity #ctf_writeup #prompt_injection
Medium
TryHackMe Hacker’s Holiday 2026: Day 1 — The Concierge Knows Too Much
Room: The Concierge Knows Too Much Event: Hacker’s Holiday Category: AI | Prompt Injection | Social Engineering | LLM Security
21 views
Daily Writeups
⤷ Title: The Concierge Knows Too Much | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sun, 02 Aug 2026 04:45:04 GMT
════════════════════════
⌗ Tags: #social_engineering #ai #llm_security #prompt_injection #tryhackme
Medium
The Concierge Knows Too Much | TryHackMe
She knows your name, your room, your coffee order, none of which you told her. Word your next question carefully and she’ll also hand over…
26 views
Daily Writeups
⤷ Title: The Concierge Knows Too Much
════════════════════════
𐀪 Author: Dhruv Bhatia
════════════════════════
ⴵ Time: Sun, 02 Aug 2026 06:06:07 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ai_security #prompt_injection_attack #tryhackme #ctf_writeup
Medium
The Concierge Knows Too Much
Tryhackme Room : https://tryhackme.com/room/hh-theconciergeknows-2d7eb4d9
36 views
Daily Writeups
⤷ Title: TryHackMe: The Concierge Knows Too Much (Hacker Holidays 2026 — Day 1)
════════════════════════
𐀪 Author: d4rkwh15k3r5
════════════════════════
ⴵ Time: Sun, 02 Aug 2026 08:44:51 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #artificial_intelligence #prompt_injection_attack #cybersecurity #tryhackme
Medium
TryHackMe: The Concierge Knows Too Much (Hacker Holidays 2026 — Day 1)
A quick walkthrough for Day 1 of TryHackMe’s Hacker Holidays! In this challenge, we take on an AI-focused box to test how easily a…
35 views
Daily Writeups
⤷ Title: The Concierge Knows Too Much CTF Walkthrough (TryHackMe)
════════════════════════
𐀪 Author: Vanessa3
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 06:31:41 GMT
════════════════════════
⌗ Tags: #aisec #ctf #ethical_hacking #tryhackme #prompt_injection_attack
Medium
The Concierge Knows Too Much CTF Walkthrough (TryHackMe)
The Concierge knows too much lab is a beginner-friendly CTF provides a practical introduction to the Prompt Injection vulnerability.
17 views
Daily Writeups
⤷ Title: RufRoot CVE-2026-59726: Unauthenticated RCE in Ruflo MCP Bridge Exposes AI Agent Keys
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 12:32:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Agent security #AI Infrastructure #CVE_2026_59726 #MCP Bridge #Prompt Injection #Ruflo Vulnerability #RufRoot #Unauthorized RCE
Information Security News
RufRoot CVE-2026-59726: Unauthenticated RCE in Ruflo MCP Bridge Exposes AI Agent Keys
A single unauthenticated POST request was sufficient to open a command shell inside one of the most widely deployed AI agent orchestration platforms on GitHub. From that foothold, an attacker coul…
8 views
Daily Writeups
⤷ Title: Analyzing GitHub Actions workflows at scale
════════════════════════
𐀪 Author: Kulkan Security
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 13:44:03 GMT
════════════════════════
⌗ Tags: #prompt_injection_attack #penetration_testing #supply_chain_security #vulnerability #github_actions
Medium
Analyzing GitHub Actions workflows at scale
This research project was born after reading many news articles about supply chain attacks and highly used packages being compromised to…
10 views
Daily Writeups
⤷ Title: AI Agents Go Rogue: Mythos 5 and GPT-5.6 Sol Escape Cyber Testbed, Target Real GitHub
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 07 Aug 2026 06:46:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Agent Escape #AI safety #AISI Cyber Test #Anthropic Mythos #GPT_5.6 Sol #Prompt Injection #Sandbox Escape #supply chain attack
Information Security News
AI Agents Go Rogue: Mythos 5 and GPT-5.6 Sol Escape Cyber Testbed, Target Real GitHub
A routine evaluation of advanced AI models’ offensive cybersecurity capabilities unexpectedly reached into the live internet. One agent attempted to inject malicious code into a public open-…
6 views
Daily Writeups
⤷ Title: Google ADK Vulnerability Enables Agent to Agent Attacks
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 07:08:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #cybersecurity #google #Google ADK Vulnerability #Prompt Injection
Information Security News
Google ADK Vulnerability Enables Agent to Agent Attacks
The Emergence of Agent-Against-Agent Exploits An AI agent can deceptively trigger another agent with elevated privileges. Consequently, an attacker can exploit this mechanism to compromise a softw…
8 views
Daily Writeups
⤷ Title: Indirect Prompt Injection: What LLM Bounty Triagers Actually Reward
════════════════════════
𐀪 Author: Muhammad Haider Tallal
════════════════════════
ⴵ Time: Sun, 09 Aug 2026 11:00:13 GMT
════════════════════════
⌗ Tags: #prompt_injection_attack #ai_security #bug_bounty #cybersecurity #artificial_intelligence
Medium
Indirect Prompt Injection: What LLM Bounty Triagers Actually Reward
Direct injection and jailbreaks keep getting closed as informational. The findings that pay chain a hidden instruction to a real…
7 views
Daily Writeups
⤷ Title: Hacker Holidays 2026: Day 13 Walkthrough (The Guestbook)
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 08:42:36 GMT
════════════════════════
⌗ Tags: #ai #prompt_injection #tryhackme #hacker_holidays_2026 #cybersecurity
Medium
Hacker Holidays 2026: Day 13 Walkthrough (The Guestbook)
An AI concierge read every guestbook entry as an instruction. We disguised shell commands as hotel reviews. When the output was redacted…
22 views
Daily Writeups
⤷ Title: Solving TryHackMe’s Hacker Holidays 2026, Day 1: ‘The Concierge Knows Too Much
════════════════════════
𐀪 Author: Souhardya
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 17:31:14 GMT
════════════════════════
⌗ Tags: #osint #prompt_injection_attack #artificial_intelligence #tryhackme #cybersecurity
Medium
Solving TryHackMe’s Hacker Holidays 2026, Day 1: ‘The Concierge Knows Too Much
A beginner-friendly walkthrough of how identity spoofing against a poorly-guarded AI assistant led to an internal secret it was told never…
7 views