Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Cryptographic Paradigm Shift: Google Officially Launches Device Bound Session Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:26:03 +0000
════════════════════════
⌗ Tags: #Google #browser session hijacking defense #cookie refresh token rotation #Device Bound Session Credentials #Google Chrome DBSC protocol #hardware bound authentication security #infostealer malware protection #macOS Secure Enclave key pairs #session cookie theft mitigation #W3C web security standards #Windows TPM cryptographic binding
Information Security News
Device Bound Session Credentials: Google Neutralizes Cookie Theft
Google debuts Device Bound Session Credentials (DBSC). Learn how this hardware-anchored TPM protocol stops session hijacking and cookie theft.
38 views
Daily Writeups
⤷ Title: Weaponizing Management Consoles: The FortiClient EMS Exploitation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:25:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arctic Wolf Labs report #CVE_2026_35616 vulnerability #EKZ Infostealer analysis #endpoint security bypass #FortiClient EMS exploit #session cookie hijacking
Information Security News
FortiClient EMS Exploit: EKZ Infostealer Malware Guide
Analyze the recent FortiClient EMS exploit. Learn how attackers leverage CVE-2026-35616 to deliver EKZ Infostealer and bypass endpoint protection.
14 views
Daily Writeups
⤷ Title: phpBB Authentication Bypass Fixed in Version 3.3.17
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:35:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Aikido Security #authentication bypass #Forum Security #phpBB #Session Hijacking #Web Vulnerability
Information Security News
phpBB Authentication Bypass Fixed in Version 3.3.17
A critical phpBB authentication bypass in 3.3.16 and earlier lets attackers hijack any user session with a single HTTP request. Update now.
11 views
Daily Writeups
⤷ Title: Payroll Pirate Hijacks Sessions to Steal Paychecks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 07:25:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM Phishing #Business Email Compromise #MFA Bypass #Payroll Fraud #Payroll Pirate #Session Hijacking
Information Security News
Payroll Pirate Hijacks Sessions to Steal Paychecks
BushidoToken details Payroll Pirate, an AiTM phishing campaign that hijacks authenticated sessions to redirect payroll payments to attackers.
12 views
Daily Writeups
⤷ Title: $900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:31:01 GMT
════════════════════════
⌗ Tags: #information_security #session_flaw #bug_bounty #programming #cybersecurity
Medium
$900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
Hi Everyone! Recently, while testing a SaaS platform (let’s call it ExampleCenter), I came across a very interesting access control issue…
16 views
Daily Writeups
⤷ Title: Session Fixation
════════════════════════
𐀪 Author: Ahemd ashraf
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 21:06:39 GMT
════════════════════════
⌗ Tags: #session_fixation #bugbounty_writeup #bug_bounty_tips
Medium
Session Fixation
Title
22 views
Daily Writeups
⤷ Title: pretix Patches Two Critical Session Takeover and SSRF Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 13:14:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Key Leak #CVE_2026_13602 #CVE_2026_13603 #Payment Plugins #pretix #Session Takeover #ssrf
Daily CyberSecurity
pretix Patches Two Critical Session Takeover and SSRF Flaws
The pretix team shipped version 2026.5.3 to fix two critical flaws. The update also covers 2026.4.5 and 2026.3.5.post1, plus several payment plugins. Both bugs rate critical, so admins should patc…
15 views
Daily Writeups
⤷ Title: The Wristband Problem
════════════════════════
𐀪 Author: Sentinel Layer
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 03:01:02 GMT
════════════════════════
⌗ Tags: #web_security #authentication #application_security #cybersecurity #session_hijacking
Medium
The Wristband Problem
The Wristband Problem! A few years ago I stayed at an all-inclusive resort for a friend’s wedding. At check-in, they scanned my ID, took a photo, and clipped a paper wristband around my wrist …
11 views
Daily Writeups
⤷ Title: Session Management | TryHackMe WalkThrough
════════════════════════
𐀪 Author: Cyrus Isaac
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:57:38 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #session_management #tryhackme_writeup
Medium
Session Management | TryHackMe WalkThrough
Task1: Introduction
23 views
Daily Writeups
⤷ Title: Logout Security Testing Checklist
════════════════════════
𐀪 Author: Varshith Reddy
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:20:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #session_management #authentication #web_security
Medium
Logout Security Testing Checklist
Session Invalidation
13 views
Daily Writeups
⤷ Title: Kena Session Cookie Stealer: Reset PC Saja Ternyata Gak Cukup! Ini Langkah Pengamanan yang Benar
════════════════════════
𐀪 Author: rizko
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #session_hijacking #cookies_stealer #cookies #hacking
Medium
Kena Session Cookie Stealer: Reset PC Saja Ternyata Gak Cukup! Ini Langkah Pengamanan yang Benar
Pernah gak bayangin: PC kamu tiba-tiba kena malware infostealer seperti akun discord mengirim giveaway scam ke semua server atau teman…
15 views