Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:34:33 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Brian Krebs #data breach #Edward Dubrovsky #Extortion #FBI #Ransomware #Ransomware Negotiators #Saif al_Din Khader #ShinyHunters
Hackread
US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims
Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations.
33 views
Daily Writeups
⤷ Title: I Built a Tool That Finds Bug Bounty Programs Across 4 Platforms
════════════════════════
𐀪 Author: M Umer Saqib
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:36:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #python #ethical_hacking #bug_bounty #web_security
Medium
I Built a Tool That Finds Bug Bounty Programs Across 4 Platforms
Subtitle: A simple web app that searches HackerOne, Bugcrowd, Intigriti and YesWeHack by in-scope asset, all in one place.
12 views
Daily Writeups
⤷ Title: When PKCE Isn’t Enough: How an OAuth Redirect URI Flaw Can Lead to Account Takeover
════════════════════════
𐀪 Author: Sanaullah Aman Korai
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:29:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #web_security #bug_bounty #oauth
Medium
When PKCE Isn’t Enough: How an OAuth Redirect URI Flaw Can Lead to Account Takeover
PKCE protects authorization codes from interception. But what happens when an identity provider sends the code to the wrong destination?
10 views
Daily Writeups
⤷ Title: White Hat Hacker from Tajikistan: How Pro Muzafarov Shukron Safeguards the Global Cyber World…
════════════════════════
𐀪 Author: Draklennn
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:11:18 GMT
════════════════════════
⌗ Tags: #infosec #programming #white_hat_hacker #cybersecurity #bug_bounty
Medium
White Hat Hacker from Tajikistan: How Pro Muzafarov Shukron Safeguards the Global Cyber World…
The Journey Into Cybersecurity Pro Muzafarov Shukron began his career in information security by deeply studying network architecture, web…
8 views
Daily Writeups
⤷ Title: XSS by Proxy: “Tricking the AI Into Reading Its Own Death Sentence Out Loud ”
════════════════════════
𐀪 Author: Aceproulx
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 15:31:15 GMT
════════════════════════
⌗ Tags: #xss_attack #bug_bounty_writeup #bug_bounty #cybersecurity #prompt_injection_attack
Medium
XSS by Proxy: “Tricking the AI Into Reading Its Own Death Sentence Out Loud 🤖📋”
Turns out you don’t need to find the XSS yourself when you can just ask an AI assistant to type it out for you, verbatim, no questions…
15 views
Daily Writeups
⤷ Title: Anthropic Tested Whether Small AI Models Could Spread Across Devices
════════════════════════
𐀪 Author: Zaid
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:22:53 GMT
════════════════════════
⌗ Tags: #hacking #claude #artificial_intelligence #ai_agent #anthropic_claude
Medium
Anthropic Tested Whether Small AI Models Could Spread Across Devices
A $55 TV box, a 9B model and an eight-node test network show how close AI worms really are, what the experiment did not prove, and what…
8 views
Daily Writeups
⤷ Title: HTB Lame
════════════════════════
𐀪 Author: Matusmelicherik
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:22:49 GMT
════════════════════════
⌗ Tags: #hacking #hackthebox #htb_writeup #ctf
Medium
HTB Lame
HackTheBox: Lame Walkthrough
14 views
Daily Writeups
⤷ Title: THM - Linux Threat Detection 3
════════════════════════
𐀪 Author: SleepySOC
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:29:35 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #tryhackme #tryhackme_writeup #tryhackme_walkthrough
Medium
THM - Linux Threat Detection 3
Lets start solving the room…
12 views
Daily Writeups
⤷ Title: GPP Password Attack in AD: Exploitation, Detection and Prevention
════════════════════════
𐀪 Author: Enes Cayvarli
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:48:12 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #cybersecurity #blue_team #ethical_hacking
Medium
GPP Password Attack in AD: Exploitation, Detection and Prevention
Active Directory environments often contain legacy configurations that can introduce unexpected security risks. One such issue is Group…
21 views
Daily Writeups
⤷ Title: TryHackMe: Anthem CTF Walkthrough
════════════════════════
𐀪 Author: betty yazar
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:59:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #ctf #tryhackme #cybersecurity #red_team
Medium
TryHackMe: Anthem CTF Walkthrough
Overview
23 views
Daily Writeups
⤷ Title: Try Hack Me: Checkmate Write Up
════════════════════════
𐀪 Author: Jozepjoestar
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:27:19 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough
Medium
Try Hack Me: Checkmate Write Up
Reconnaissance
38 views
Daily Writeups
⤷ Title: TryHackMe The Greenholt Phish
════════════════════════
𐀪 Author: Zeliha Zengin
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:01:06 GMT
════════════════════════
⌗ Tags: #phishing #ctf_writeup #tryhackme #ctf #cybersecurity
Medium
TryHackMe The Greenholt Phish
Introduction
49 views
Daily Writeups
⤷ Title: Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 23:02:13 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 21:58:47 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: Critical Laravel TokenGuard Flaw (CVSS 9.2) Lets Attackers Log In as Any User
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 18:44:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Takeover #Authentication Bypass #Laravel #php #TokenGuard #Web Security
Daily CyberSecurity
Critical Laravel TokenGuard Flaw (CVSS 9.2) Lets Attackers Log In as Any User
TL;DR Laravel published two security advisories on October 19, 2026. The more serious one is a critical Laravel authentication bypass in TokenGuard, rated CVSS 9.2, that can lead to account takeov…
24 views
Daily Writeups
⤷ Title: Logistics Company Admin Panel Compromise
════════════════════════
𐀪 Author: L4ZZ3RJ0D
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 18:00:21 GMT
════════════════════════
⌗ Tags: #xss_attack #ctf_writeup #bug_bounty #bug_bounty_writeup #info_sec_writeups
Medium
Logistics Company Admin Panel Compromise
A logistics company handling shipping for thousands of businesses, with a support system where customers submit inquiries and staff review…
11 views
Daily Writeups
⤷ Title: Intercept HTTP Traffic Using Bettercap | Ethical Hacking Tutorial
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 17:42:48 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #bug_bounty #self_improvement #cybersecurity #networking
Medium
🚨 Intercept HTTP Traffic Using Bettercap | Ethical Hacking Tutorial
Want to understand how attackers intercept network traffic — and how ethical hackers detect these risks before they become security…
14 views
Daily Writeups
⤷ Title: Why developers should never trust a null origin (Portswigger CORS lab #2 )
════════════════════════
𐀪 Author: Mohamed Dwedar
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 17:12:01 GMT
════════════════════════
⌗ Tags: #web_security_testing #portswigger #cybersecurity #bug_bounty
Medium
Why developers should never trust a null origin ( Portswigger CORS lab #2 )
Why developers should never trust a null origin ( Portswigger CORS lab #2 ) ( lab #2 cors vulnerability with trusted null origin ) everything is the same in terms of the source code and the workflow …
19 views
Daily Writeups
⤷ Title: One Race Condition, Nine Projects, One Shared Data
════════════════════════
𐀪 Author: Shahd mourad
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 17:03:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #race_condition #bug_hunting
Medium
One Race Condition, Nine Projects, One Shared Data
While testing a web application I found a race condition in its project creation feature that allowed me to create nine projects with the…
11 views
Daily Writeups
⤷ Title: Command Injection: When the Shell Runs Your Input
════════════════════════
𐀪 Author: Raksharoot
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 16:55:32 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_security #cybersecurity #ethical_hacking #bug_bounty
Medium
Command Injection: When the Shell Runs Your Input
From ;id to JVM diagnostics, every way an OS command sneaks in.
8 views
Daily Writeups
⤷ Title: When the Security Shield Becomes the Attack Path: Hackers Exploit Critical SiteGuard WAF…
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 18:20:45 GMT
════════════════════════
⌗ Tags: #incident_response #cybersecurity #application_security #privilege_escalation #threat_detection
Medium
When the Security Shield Becomes the Attack Path: Hackers Exploit Critical SiteGuard WAF Vulnerability
A Web Application Firewall (WAF) is designed to protect applications from malicious traffic, block attacks, and strengthen an…
10 views