Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The Patch Is Applied. Your Board Still Wants Proof.
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 10:31:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #compliance #penetration_testing #ciso #vulnerability_management
Medium
The Patch Is Applied. Your Board Still Wants Proof.
Why “we patched it” no longer satisfies auditors, insurers, or your own leadership team, and what a targeted external retest is actually…
13 views
Daily Writeups
⤷ Title: Metasploit: Meterpreter — In-Memory Execution, Command Vectors, and Post-Exploitation
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 10:22:06 GMT
════════════════════════
⌗ Tags: #tryhackme #post_exploitation #cybersecurity #meterpreter #metasploit
Medium
Metasploit: Meterpreter — In-Memory Execution, Command Vectors, and Post-Exploitation
Introduction
14 views
Daily Writeups
⤷ Title: Annie — TryHackMe WriteUp with Flags
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 10:09:58 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #ctf_writeup #cybersecurity #tryhackme_walkthrough
Medium
Annie — TryHackMe WriteUp with Flags
Date: 13/08/2026
21 views
Daily Writeups
⤷ Title: Belajar VAPT #1: Membongkar Data Rahasia dengan SQL Injection (PortSwigger Lab)
════════════════════════
𐀪 Author: BIT Journal
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 10:28:24 GMT
════════════════════════
⌗ Tags: #sql_injection #vapt #learning
Medium
Belajar VAPT #1: Membongkar Data Rahasia dengan SQL Injection (PortSwigger Lab)
SQL Injection
26 views
Daily Writeups
⤷ Title: ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 18:53:51 +0530
════════════════════════
⌗ Tags: No_Tags
15 views
Daily Writeups
⤷ Title: How MCP Servers Can Expose Enterprise Secrets
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 17:28:00 +0530
════════════════════════
⌗ Tags: No_Tags
15 views
Daily Writeups
⤷ Title: Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 16:22:34 +0530
════════════════════════
⌗ Tags: No_Tags
14 views
Daily Writeups
⤷ Title: PATCHCORD Backdoor Spearheads South Asian Cyberespionage
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:33:58 +0000
════════════════════════
⌗ Tags: #Malware #APT36 #Cyberespionage #malware #PATCHCORD
Information Security News
PATCHCORD Backdoor Spearheads South Asian Cyberespionage
Security specialists at Acronis uncovered an active cyberespionage campaign targeting telecommunications companies in Afghanistan. Furthermore, the attackers focus heavily on government agencies a…
8 views
Daily Writeups
⤷ Title: Active Exploitation of macOS Screen Sharing Vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:06:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_65400 #cybersecurity #macos #Screen Sharing #vulnerability
Information Security News
Active Exploitation of macOS Screen Sharing Vulnerability
Malicious actors currently exploit a critical vulnerability in macOS. Specifically, attackers target computers with the “Screen Sharing” feature enabled and exposed. They successfully …
1 view
Daily Writeups
⤷ Title: HoneyMyte’s CoolClient Backdoor Adds Signed Kernel Rootkit Driver
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 12:06:52 +0000
════════════════════════
⌗ Tags: #Malware #CoolClient #DLL Sideloading #HoneyMyte #Kernel Driver #Mustang Panda #PlugX #rootkit
Information Security News
HoneyMyte’s CoolClient Backdoor Adds Signed Kernel Rootkit Driver
The threat group HoneyMyte, also tracked as Mustang Panda, has begun deploying an updated version of its CoolClient backdoor alongside a signed Windows kernel-level driver. Kaspersky’s Secur…
2 views
Daily Writeups
⤷ Title: Red Hat ACM Fixes Five Critical Flaws, Including CVE-2026-72526 RCE Bug (CVSS 9.9)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:15:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ArgoCD #CVE_2026_72508 #CVE_2026_72526 #CVE_2026_73268 #Kubernetes #OpenShift #privilege escalation #red hat #Remote Code Execution #RHACM
Daily CyberSecurity
Red Hat ACM Fixes Five Critical Flaws, Including CVE-2026-72526 RCE Bug (CVSS 9.9)
Red Hat patched five critical bugs in Advanced Cluster Management this week. Two of them allow RHACM remote code execution on managed clusters. Both score a 9.9 on the CVSS scale. The other three …
3 views
Daily Writeups
⤷ Title: OpenMatter Network to Take Verification Message to Belgrade Blockchain Week 2026
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:00:15 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
OpenMatter Network to Take Verification Message to Belgrade Blockchain Week 2026
Melbourne, Florida, 17th August 2026, CyberNewswire
1 view
Daily Writeups
⤷ Title: CVE-2026-19188: Haiwell HMI Gateway Flaw Lets Attackers Execute Arbitrary OS Commands With Root Privileges (CVSS 10.0)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 12:56:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_19188 #Haiwell #os command injection
Daily CyberSecurity
CVE-2026-19188: Haiwell HMI Gateway Flaw Lets Attackers Execute Arbitrary OS Commands With Root Privileges (CVSS 10.0)
TL;DR A critical Haiwell HMI Gateway flaw threatens industrial control systems worldwide. Specifically, this vulnerability allows unauthenticated attackers to execute commands directly on the host…
1 view
Daily Writeups
⤷ Title: The Door Was Unlocked All Along — A Complete Guide to Authentication Vulnerabilities
════════════════════════
𐀪 Author: // l1m1nal_3ntr0py
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:35:26 GMT
════════════════════════
⌗ Tags: #ethical_hacking_tutorial #penetration_testing #bug_bounty #web_security #cybersecurity_training
Medium
The Door Was Unlocked All Along — A Complete Guide to Authentication Vulnerabilities
By // l1m1nal_3ntr0py
3 views
Daily Writeups
⤷ Title: Five Green Checkmarks I Typed Myself: Making GitHub’s Own Bot Vouch for a Failing Plugin
════════════════════════
𐀪 Author: _marwankhodair_
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:30:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #github #bug_bounty #penetration_testing #github_copilot
Medium
Five Green Checkmarks I Typed Myself: Making GitHub’s Own Bot Vouch for a Failing Plugin
A Markdown table injection in a pull_request_target workflow, and the bounty verdict that made it funnier.
3 views
Daily Writeups
⤷ Title: Python Web Penetration Testing — Day 11: Remote Code Execution — The Ultimate Prize
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:16:55 GMT
════════════════════════
⌗ Tags: #programming #bug_bounty #technology #penetration_testing #cybersecurity
Medium
Python Web Penetration Testing — Day 11: Remote Code Execution — The Ultimate Prize
I found a file upload vulnerability that let me execute commands on the server. Within minutes, I had a reverse shell. Within hours, I had…
6 views
Daily Writeups
⤷ Title: He Sent 200,000 Reset Codes to Instagram in 10 Minutes. Instagram Paid Him $30,000.
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 12:09:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #artificial_intelligence #bug_bounty #ethical_hacking #programming
Medium
He Sent 200,000 Reset Codes to Instagram in 10 Minutes. Instagram Paid Him $30,000.
Quick note — I built HackThrough . It turns real bug bounty writeups into interactive step-by-step challenges. This bug is on there. Go…
13 views
Daily Writeups
⤷ Title: What Is API Security Testing? A Practical Guide
════════════════════════
𐀪 Author: Mohamed Basil
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:04:56 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_security #application_security #cybersecurity #api_security
Medium
What Is API Security Testing? A Practical Guide
How security engineers evaluate APIs for authentication weaknesses, BOLA/IDOR, business logic flaws, data exposure, and authorization…
9 views
Daily Writeups
⤷ Title: HTB: Crocodile
════════════════════════
𐀪 Author: CYBER_delta
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 11:50:43 GMT
════════════════════════
⌗ Tags: #htb_writeup #hacking #ftp_server #pentesting #cybersecurity
Medium
HTB: Crocodile
Anonymous services often leak credentials.
5 views
Daily Writeups
⤷ Title: Password Managers Explained: Why “Just Use a Strong Password” Isn’t Enough
════════════════════════
𐀪 Author: Hunzaifakhan
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:02:03 GMT
════════════════════════
⌗ Tags: #online_security #data_breach #password_manager #infosec #digital_safety
Medium
Password Managers Explained: Why “Just Use a Strong Password” Isn’t Enough
You’ve heard the advice a thousand times: “Use a strong, unique password for every account.” It’s solid advice, but it’s also incomplete…
3 views
Daily Writeups
⤷ Title: RootMe CTF Walkthrough: From Reconnaissance to Privilege Escalation
════════════════════════
𐀪 Author: Youssef Mohammed
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 13:45:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #web_security #penetration_testing #ethical_hacking
Medium
RootMe CTF Walkthrough: From Reconnaissance to Privilege Escalation
A practical walkthrough of the RootMe machine, covering reconnaissance, web enumeration, initial access, and privilege escalation.
3 views