Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: HTB Forest — Walkthrough by InferiorAK
════════════════════════
𐀪 Author: InferiorAK
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 09:10:48 GMT
════════════════════════
⌗ Tags: #ad_pentest #active_directory #hackthebox #penetration_testing #cybersecurity
Medium
HTB Forest — Walkthrough by InferiorAK
Active Directory Penetration Testing
12 views
Daily Writeups
⤷ Title: HTB Active — Walkthrough by InferiorAK
════════════════════════
𐀪 Author: InferiorAK
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 08:42:07 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #hackthebox #ad_pentest #cybersecurity
Medium
HTB Active — Walkthrough by InferiorAK
Active Directory Penetration Testing
13 views
Daily Writeups
⤷ Title: Hacker Holidays 2026: Day 7 Walkthrough (Do Not Disturb)
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 08:37:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #tryhackme #hacker_holidays_2026 #tryhackme_walkthrough
Medium
Hacker Holidays 2026: Day 7 Walkthrough (Do Not Disturb)
NoSQL injection bypassed the login. Server-Side Template Injection gave us code execution. A forgotten Node.js debugger running as a…
12 views
Daily Writeups
⤷ Title: TryHackMe | Overheard at Breakfast | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 09:46:00 GMT
════════════════════════
⌗ Tags: #osint #osint_investigation #tryhackme_walkthrough #tryhackme #tryhackme_writeup
Medium
TryHackMe | Overheard at Breakfast | Walkthrough
1.Download Task Files and Extract files
12 views
Daily Writeups
⤷ Title: Nmap Post Port Scans | JR PT Room
════════════════════════
𐀪 Author: Anas Rah
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 09:27:10 GMT
════════════════════════
⌗ Tags: #active_reconnaissance #tryhackme #nmap #tryhackme_walkthrough #cybersecurity
Medium
Nmap Post Port Scans | JR PT Room
Recently I completed my nmap post port scans room from jr pt module. and as the name suggests this room focuses on the post scans. This…
21 views
Daily Writeups
⤷ Title: Breakout The Cage — TryHackMe WriteUp with Flags
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 08:56:30 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme_walkthrough #tryhackme_writeup #cybersecurity #tryhackme
Medium
Breakout The Cage — TryHackMe WriteUp with Flags
Breakout The Cage — TryHackMe WriteUp with Flags Date: 08/02/2026 Room Link: https://tryhackme.com/room/breakoutthecage1 My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This …
18 views
Daily Writeups
⤷ Title: Skills Assessment — Password Attacks HackTheBox
════════════════════════
𐀪 Author: Cajebo
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 08:28:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackthebox_writeup #password_security #pentesting
Medium
Skills Assessment — Password Attacks HackTheBox
#Contexte: Betty Jayde works at Nexura LLC. We know she uses the password Texas123!@# on multiple websites, and we believe she may reuse it…
28 views
Daily Writeups
⤷ Title: 7 JWT Authentication Mistakes I Keep Seeing in Production
════════════════════════
𐀪 Author: CodeX Lancers
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 08:31:01 GMT
════════════════════════
⌗ Tags: #software_development #cybersecurity #api_security #jwt #authentication
Medium
🔐 7 JWT Authentication Mistakes I Keep Seeing in Production
JSON Web Tokens (JWTs) are one of the most popular authentication methods for modern web and mobile applications. Whether you’re building…
31 views
Daily Writeups
⤷ Title: New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 16:06:27 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 14:33:23 +0530
════════════════════════
⌗ Tags: No_Tags
24 views
Daily Writeups
⤷ Title: Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 11:34:47 +0000
════════════════════════
⌗ Tags: #Security #CISA #Cybersecurity #Forencis #Thermo Fisher #Vulnerability
Hackread
Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software
Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files.
21 views
Daily Writeups
⤷ Title: Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 08:08:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple Security #auth.db #DesktopServicesHelper #LPE #macOS #privilege escalation #Public PoC #Root Exploit
Daily CyberSecurity
Public PoC Exploits macOS DesktopServicesHelper for Root With No User Interaction
TL;DR A researcher has published full details and a working proof-of-concept for a macOS privilege escalation bug. It turns an unprivileged user into root in about two seconds, with no user intera…
14 views
Daily Writeups
⤷ Title: Amazon Links North Korean Hackers to NPM Supply Chain Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 08:01:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amazon Threat Intelligence #DPRK #North Korea #npm #Open Source Security #Sapphire Sleet #supply chain attack
Daily CyberSecurity
Amazon Links North Korean Hackers to NPM Supply Chain Attacks
At a glance Actor DPRK-linked group (Sapphire Sleet, Stardust Chollima, BlueNoroff, UNC1069) Activity NPM supply chain compromise via maintainer social engineering Targets Users of the axios, debu…
15 views
Daily Writeups
⤷ Title: Finding Exposed Cloud Keys & Secrets
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #secrets #cybersecurity #bugcrowd
Medium
Finding Exposed Cloud Keys & Secrets
Hey everyone! Nitin here 👋
13 views
Daily Writeups
⤷ Title: Breaking API Gateway Isolation with Path Traversal and URL Parsing Discrepancies
════════════════════════
𐀪 Author: Hazem Brini
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 11:08:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #bug_bounty_writeup #bug_bounty #information_security
Medium
Breaking API Gateway Isolation with Path Traversal and URL Parsing Discrepancies
How a simple “../” and CRLF injection bypassed proxy restrictions and exposed internal services
15 views
Daily Writeups
⤷ Title: I Found an Unauthenticated WebSocket Leaking Live Customer Data
════════════════════════
𐀪 Author: 0xJad
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 10:27:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #bug_bounty #ethical_hacking #websocket
Medium
I Found an Unauthenticated WebSocket Leaking Live Customer Data
I found an unauthenticated WebSocket endpoint on a major company infrastructure that was streaming live customer check-in data, full names…
13 views
Daily Writeups
⤷ Title: Hacker Holidays 2026: Day 8 Walkthrough (Towel on the Sunbed)
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 10:09:51 GMT
════════════════════════
⌗ Tags: #tryhackme #bug_bounty #cybersecurity #race_condition #hacker_holidays_2026
Medium
Hacker Holidays 2026: Day 8 Walkthrough (Towel on the Sunbed)
A rewards system let you claim 50 points every 24 hours. We claimed it three times in the same millisecond. Welcome to race conditions.
11 views
Daily Writeups
⤷ Title: How I Landed My First $200 Bounty With One Unusual SSRF
════════════════════════
𐀪 Author: Afi0pchik
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 09:59:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #software_engineering #technology #programming
Medium
I Found an SSRF That Nobody Would Screenshot — So I Made It Screenshot Itself
$200 for one SSRF bug most hunters would've missed - a screenshot renderer leaking internal metrics. My first bounty, full breakdown.
13 views
Daily Writeups
⤷ Title: Free models + open-source SAST + offensive Skills matched frontier CVE finds. Cost: about $0.
════════════════════════
𐀪 Author: MixBanana
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 11:19:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #open_source #static_analysis #application_security #artificial_intelligence
Medium
Free models + open-source SAST + offensive Skills matched frontier CVE finds. Cost: about $0.
Subtitle: Everyone argued about Sol and Mythos. I wired tools and Skills into cheap models and got the same class of bugs on public code.
11 views
Daily Writeups
⤷ Title: Cascade Write-Up (Medium Difficulty)
════════════════════════
𐀪 Author: Joseph "n3m0” KANKO
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 10:38:13 GMT
════════════════════════
⌗ Tags: #life_hacking #ctf_walkthrough #hacking #active_directory #ctf_writeup
Medium
Cascade Write-Up (Medium Difficulty)
Hello, welcome to this write-up post for the Cascade Active Directory machine.
11 views
Daily Writeups
⤷ Title: Kobold on HTB — By BitR1FT
════════════════════════
𐀪 Author: BitR1ft
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 11:10:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #hackthebox #bitr1ft #infosec
Medium
Kobold on HTB — By BitR1FT
Exploiting an unauthenticated MCP API command injection (CVE-2026–23520) and a Docker socket escape for full system compromise.
12 views