Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: The Five Summits of Software Supply-Chain Security
════════════════════════
𐀪 Author: Ankit Gupta
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 05:29:00 GMT
════════════════════════
⌗ Tags: #application_security #devsecops #software_supply_chain #open_source #cybersecurity
Medium
The Five Summits of Software Supply-Chain Security
A field guide · Part 1 of 6 — the view from base camp
7 views
Daily Writeups
⤷ Title: No Human Typed a Single Command. An AI Agent Breached Hugging Face Anyway.
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 04:40:00 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #artificial_intelligence #technology #machine_learning
Medium
No Human Typed a Single Command. An AI Agent Breached Hugging Face Anyway.
2.5 days. 17,600 actions. Zero human direction. This is the incident every security team needs to understand right now.
7 views
Daily Writeups
⤷ Title: Glitch: From a Hidden Token to Root
════════════════════════
𐀪 Author: Enryuuu
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 04:02:40 GMT
════════════════════════
⌗ Tags: #infosec #ctf_writeup #tryhackme #ctf #cybersecurity
Medium
Glitch: From a Hidden Token to Root
This write-up documents my approach to solving the Glitch room on TryHackMe, an easy-difficulty challenge built around a web application…
8 views
Daily Writeups
⤷ Title: Active Directory Explained from Zero: How It Actually Works
════════════════════════
𐀪 Author: Himanshu Parmar
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 05:56:53 GMT
════════════════════════
⌗ Tags: #windows #active_directory #cybersecurity #ethical_hacking #penetration_testing
Medium
Active Directory Explained from Zero: How It Actually Works
Active Directory From Zero to Hero - Part 1
17 views
Daily Writeups
⤷ Title: TryHackMe Hacker Holidaty 2026 Day 8 Walkthrough (Towel On The Sunbed)
════════════════════════
𐀪 Author: Anoobkrishna
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 05:41:22 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #hackerholiday2026 #tryhackme
Medium
TryHackMe Hacker Holidaty 2026 Day 8 Walkthrough (Towel On The Sunbed)
Introduction
10 views
Daily Writeups
⤷ Title: Towel on the Sunbed — Tryhackme write-up
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 05:28:58 GMT
════════════════════════
⌗ Tags: #business_logic #burpsuite #tryhackme #web_hacking #api
Medium
Towel on the Sunbed — Tryhackme write-up
Solution:
11 views
Daily Writeups
⤷ Title: Overheard at Breakfast — TryHackMe WalkTrrough (Hacker Holidays)
════════════════════════
𐀪 Author: Sunjid Ahmed Siyem
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 04:08:01 GMT
════════════════════════
⌗ Tags: #overheard_at_breakfast #hacker_holidays #tryhackme #tryhackme_hacker_holidays
Medium
Overheard at Breakfast — TryHackMe WalkTrrough (Hacker Holidays)
Room Link: Overheard at Breakfast
13 views
Daily Writeups
⤷ Title: tryhackme — towel on the sunbed
════════════════════════
𐀪 Author: Nanashi Bx2
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 03:57:15 GMT
════════════════════════
⌗ Tags: #web_security #race_condition #cybersecurity #hacker_holidays_2026 #tryhackme
Medium
tryhackme — towel on the sunbed
Room: Towel on the Sunbed (https://tryhackme.com/room/hh-towelonthesunbed-61271709) Platform: TryHackMe Difficulty: Medium Category: Web…
11 views
Daily Writeups
⤷ Title: The Rise of DarkSword: Unpacking the Next-Generation iOS Exploit Kit
════════════════════════
𐀪 Author: Rishav anand
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 05:20:41 GMT
════════════════════════
⌗ Tags: #red_team #cybersecurity #ios #ethical_hacking #exploitation
Medium
The Rise of DarkSword: Unpacking the Next-Generation iOS Exploit Kit
Ever heard of this?? iPhones also can be hackable
19 views
Daily Writeups
⤷ Title: Intigriti July 2026 CTF Write-Up: Exploiting JSON Parser Differential (Duplicate-Key Confusion) to…
════════════════════════
𐀪 Author: Zabed Ullah Poyel
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 04:23:17 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #bug_bounty_writeup #web_security #intigriti #ctf_writeup
Medium
Intigriti July 2026 CTF Write-Up: Exploiting JSON Parser Differential (Duplicate-Key Confusion) to…
Challenge: Canonically Yours
Platform: Intigriti Monthly CTF — July 2026
Category: Web Security / Broken Access Control
Vulnerability: JSON…
22 views
Daily Writeups
⤷ Title: CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 12:30:13 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: KindaRails2Shell: Ruby on Rails CVE-2026-66066 RCE Flaw
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 07:28:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Storage #CVE_2026_66066 #cybersecurity #KindaRails2Shell #Ruby on Rails
Information Security News
KindaRails2Shell: Ruby on Rails CVE-2026-66066 RCE Flaw
A crafted image can turn a standard avatar upload form into a covert conduit for stealing web application secrets. A vulnerable Ruby on Rails server may expose encryption keys, database passwords,…
22 views
Daily Writeups
⤷ Title: SNOWLIGHT Malware Campaign Exposed by Open Directories
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 06:28:11 +0000
════════════════════════
⌗ Tags: #Malware #Chinese Hackers #Cyber Espionage #cybersecurity #malware #SNOWLIGHT
Information Security News
SNOWLIGHT Malware Campaign Exposed by Open Directories
The operators behind a massive, globally coordinated hacking campaign committed a fatal operational security error. They inadvertently left directories entirely open on the centralized server util…
9 views
Daily Writeups
⤷ Title: Gitea Vulnerability CVE-2026-59774 Enables Unauthenticated Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 07:53:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Read #CVE_2026_59774 #Gitea #Path Traversal #rce #Remote Code Execution #Vulnerability
Daily CyberSecurity
Gitea Vulnerability CVE-2026-59774 Enables Unauthenticated Remote Code Execution
TL;DR Gitea 1.27.1 patches a critical Gitea vulnerability, CVE-2026-59774, rated CVSS 9.8. An unauthenticated attacker can read arbitrary server files through a public repository, then escalate to…
9 views
Daily Writeups
⤷ Title: Microsoft Teams Vishing Campaign STAC4749 Deploys Chaos Ransomware
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 07:31:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chaos Ransomware #Microsoft Teams vishing #ransomware #social engineering #STAC4749 #Vishing
Daily CyberSecurity
Microsoft Teams Vishing Campaign STAC4749 Deploys Chaos Ransomware
At a glance Actor STAC4749 (unattributed threat cluster) Activity Teams vishing, remote access, ransomware Targets Dozens of North American organizations (Canada, U.S.) Scale At least three Chaos …
10 views
Daily Writeups
⤷ Title: Dysphoria Botnet Uses Blockchain Domains for C2 and Turns Victims Into Relays
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 06:30:09 +0000
════════════════════════
⌗ Tags: #Malware #Blockchain C2 #ddos #DDoS_for_hire #Dysphoria #Dysphoria Botnet #ENS #IoT botnet #XLab
Daily CyberSecurity
Dysphoria Botnet Uses Blockchain Domains for C2 and Turns Victims Into Relays
At a glance Malware family Dysphoria (jackskid/fbot-derived IoT botnet) Threat actor Unattributed; run as a commercial DDoS-for-hire service Target About 200,000 IoT and embedded Linux devices wor…
11 views
Daily Writeups
⤷ Title: 15 Ways Cybercriminals Abuse AI in Real Campaigns: Learn to Spot and Counter Modern Attacks
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 06:09:26 GMT
════════════════════════
⌗ Tags: #hacking #cybercrime #bug_bounty #cybersecurity #penetration_testing
Medium
15 Ways Cybercriminals Abuse AI in Real Campaigns: Learn to Spot and Counter Modern Attacks
Ever catch yourself wondering if that phishing email was crafted by a person — or something smarter? Here’s a number to chew on: in 2023…
12 views
Daily Writeups
⤷ Title: Why Every Developer Should Threat Model Before Writing a Single Line of Code: A Practical Level 2…
════════════════════════
𐀪 Author: Gabriel Odusanya
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 07:36:57 GMT
════════════════════════
⌗ Tags: #data_flow_diagram #application_security #stride #threat_modeling #cybersecurity
Medium
Why Every Developer Should Threat Model Before Writing a Single Line of Code: A Practical Level 2 DFD Walkthrough
Understanding threat modelling, the STRIDE framework, and how a simple Data Flow Diagram can prevent security disasters before they happen.
17 views
Daily Writeups
⤷ Title: Your AI Agent Has an IDOR Problem
════════════════════════
𐀪 Author: Serhat ÇİÇEK
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 07:20:26 GMT
════════════════════════
⌗ Tags: #llm #cybersecurity #application_security #ai_agent #idor
Medium
Your AI Agent Has an IDOR Problem
Everyone’s hardening LLM agents against prompt injection. The bug that actually leaks your data is broken object-level authorization…
11 views
Daily Writeups
⤷ Title: OSCP|PG|HUB
════════════════════════
𐀪 Author: Abhishek Maitra
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 06:44:04 GMT
════════════════════════
⌗ Tags: #oscp #provinggrounds #oscp_preparation #hacking #penetration_testing
Medium
OSCP|PG|HUB
Initial nmap scan discovery shows port 22,80 and 8082 are open.
7 views
Daily Writeups
⤷ Title: Building a Semi-Autonomous SOC, Part 3: Automated Response & Red Team Results
════════════════════════
𐀪 Author: Edris Hassani
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 07:02:06 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #homelab #artificial_intelligence #automation
Medium
Building a Semi-Autonomous SOC, Part 3: Automated Response & Red Team Results
By Edris Hassani and Hadi Tavana
5 views