Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: HTB SQL INJECTION FUNDAMENTALS 2025 [UPDATED SKILLS ASSESSMENT]
════════════════════════
𐀪 Author: SAFAL GAUTAM
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 20:58:08 GMT
════════════════════════
⌗ Tags: #webshell #hackthebox_writeup #sql_injection #hackthebox #database
Medium
HTB SQL INJECTION FUNDAMENTALS 2025 [UPDATED SKILLS ASSESSMENT]
SQL injection is one of the most fundamental vulnerabilities in web applications, and mastering it is essential for anyone starting out in…
8 views
Daily Writeups
⤷ Title: Undetectable Beima Webshell Sold by College Student for Tuition Hijacks 5,200+ Gov/Edu Websites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 00:36:29 +0000
════════════════════════
⌗ Tags: #Malware #Beima PHP Webshell #botnet #Cybercrime Freelancing #Education Sites #rce #Undetectable #webshell
Daily CyberSecurity
Undetectable Beima Webshell Sold by College Student for Tuition Hijacks 5,200+ Gov/Edu Websites
A college student is selling access to 5,200+ gov/edu sites via the undetectable Beima PHP Webshell. The custom backdoor allows full RCE and fuels a growing cybercrime freelancing marketplace.
15 views
Daily Writeups
⤷ Title: CISA KEV Alert: EOL D-Link and Array Networks Command Injection Under Active Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 02:05:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Array Networks #CISA KEV #Command Injection #CVE_2025_66644 #D_Link #EOL #Japan #webshell
Daily CyberSecurity
CISA KEV Alert: EOL D-Link and Array Networks Command Injection Under Active Attack
CISA KEV adds EOL D-Link and Array Networks flaws. ArrayOS AG (CVE-2025-66644) is actively exploited in Japan to drop PHP webshells. Retire EOL D-Link and patch ArrayOS AG immediately.
19 views
Daily Writeups
⤷ Title: Tryhackme Writeup: Detecting Web Shell
════════════════════════
𐀪 Author: Sampana
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 11:03:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #webshell
Medium
Tryhackme Writeup: Detecting Web Shell
Explore web shell detection by analyzing logs, file systems, and network traffic.
31 views
Daily Writeups
⤷ Title: SQL Injection Vulnerability
════════════════════════
𐀪 Author: t4nu1
════════════════════════
ⴵ Time: Sun, 03 May 2026 06:17:38 GMT
════════════════════════
⌗ Tags: #sql_injection #file_upload #webshell
Medium
SQL Injection Vulnerability
Bee
14 views
Daily Writeups
⤷ Title: Omani Government Targeted in Blatant Iranian-Nexus Cyberespionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 12:20:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Data Leak #APT34 #cybersecurity #Data Breach #Hunt Intelligence #infosec #Iran APT #Middle East Security #MuddyWater #OilRig #Oman MJLA #UAE VPS #webshell
Daily CyberSecurity
Omani Government Targeted in Blatant Iranian-Nexus Cyberespionage
Hunt Intelligence uncovers a massive Iranian-nexus breach targeting the Omani Ministry of Justice. 26k records leaked via an unprotected UAE staging server.
14 views
Daily Writeups
⤷ Title: Massive FreePBX Exploitation Campaign Deploys JOMANGY Webshell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 27 May 2026 08:15:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Cyber Security #Cyble #FreePBX #INJ3CTOR3 #JOMANGY #VoIP Toll Fraud #webshell
Daily CyberSecurity
Massive FreePBX Exploitation Campaign Deploys JOMANGY Webshell
Cyble researchers uncover a widespread FreePBX exploitation campaign by INJ3CTOR3 deploying the novel JOMANGY webshell for toll fraud.
12 views
Daily Writeups
⤷ Title: Shell Payload Generation & Delivery | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 09:17:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #webshell #pentesting #metasploit
Medium
Shell Payload Generation & Delivery | TryHackMe
Generate, customise, and deploy shell payloads with msfvenom, Metasploit, and webshells
13 views
Daily Writeups
⤷ Title: CMS Exploitation Campaign Plants Webshells on Business Websites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:50:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ACSC #CMS Exploitation #CMS Vulnerabilities #Web Security #webshell #wordpress
Daily CyberSecurity
CMS Exploitation Campaign Plants Webshells on Business Websites
At a glance Actor / group Unattributed malicious cyber actors Activity Mass exploitation of CMS flaws to deploy webshells Targets / victims WordPress and other CMS sites; many Australian SMBs Scal…
11 views
Daily Writeups
⤷ Title: wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 01:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60137 #CVE_2026_63030 #Pre_Auth RCE #REST API batch #webshell #WordPress Core RCE #wordpress security #wp2shell exploit
Daily CyberSecurity
wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
Attackers are already dropping webshells on WordPress sites through a flaw in WordPress Core itself. The bug chain, named wp2shell, delivers an unauthenticated WordPress Core RCE. No plugin, no th…
31 views
Daily Writeups
⤷ Title: Practicing Classic Web Shell Exploitation (HTB Writeup)
════════════════════════
𐀪 Author: Emircan Altuntaş
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 19:15:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #webshell #hackthebox
Medium
Practicing Classic Web Shell Exploitation (HTB Writeup)
Recently, I felt like flexing some web exploitation skills and decided to warm up with a classic: uploading a web shell, getting code…
7 views