Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: Why Patching Your Website Isn’t Enough: Understanding PHP2Shell (CVE-2026–109618 and…
════════════════════════
𐀪 Author: Jamila Sallem
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 03:58:32 GMT
════════════════════════
⌗ Tags: #web_application_security #tryhackme #security #php2shell #php
Medium
Why Patching Your Website Isn’t Enough: Understanding PHP2Shell (CVE-2026–109618 and CVE-2026–109619)
I just finished the TryHackMe room on PHP2Shell, and this is what I learned:
24 views
Daily Writeups
⤷ Title: $8,400 for a Message With No Return Address Check: postMessage Origin Validation Bypass to Account…
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 06:41:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty #hacking #security
Medium
$8,400 for a Message With No Return Address Check: postMessage Origin Validation Bypass to Account Takeover
Browsers give web pages a way to talk to each other across different origins when they genuinely need to — an embedded payment widget…
10 views
Daily Writeups
⤷ Title: PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
════════════════════════
𐀪 Author: ExploitDNA
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:46:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #php #security #artificial_intelligence #infosec
Medium
PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
Part 1: Introduction, Background, and Why PHP2Shell Matters
20 views
Daily Writeups
⤷ Title: PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
════════════════════════
𐀪 Author: xC0D3F4TH3R
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:38:52 GMT
════════════════════════
⌗ Tags: #php_developers #cybersecurity #hacking #security #software_development
Medium
PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
github : https://github.com/xC0D3F4TH3R/PHP2SHELL-DEFENSIVE-KIT
14 views
Daily Writeups
⤷ Title: 426 Android and iOS Apps Linked to PHP2Shell Backend Risks
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 12:41:06 +0000
════════════════════════
⌗ Tags: #Security #Android #APPS #Cybersecurity #iOS #NowSecure #PHP #PHP2Shell #Privacy #Vulnerability
Hackread
426 Android and iOS Apps Linked to PHP2Shell Backend Risks
426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns about backend security.
14 views
Daily Writeups
⤷ Title: Duplicate. Duplicate. Informative.
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #security #hacking #bug_bounty #cybersecurity #careers
Medium
Duplicate. Duplicate. Informative.
Nobody posts the eleven months before the payout. That is the only period that decides whether you make it.
13 views
Daily Writeups
⤷ Title: How security engineers actually assess AI-generated code
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #software_engineering #infosec #cybersecurity #security #vibe_coding
Medium
How security engineers actually assess AI-generated code
A mindset shift for the new era.
11 views
Daily Writeups
⤷ Title: How can a zero width character leads to privilege escalation
════════════════════════
𐀪 Author: Tomahawk
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:23:44 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #information_security #security #bug_bounty
Medium
How can a zero width character leads to privilege escalation
Whoami??
8 views
Daily Writeups
⤷ Title: Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 17:31:31 +0000
════════════════════════
⌗ Tags: #Security #Malware #Brazil #Cyber Attack #Cybersecurity #Overlord RAT #Portugal #RAT #security #WatchGuard #Windows
Hackread
Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign
WatchGuard details Overlord RAT attacks using fake Brazilian legal notices, plus Lampion malware and a separate remote access campaign targeting users in Portugal.
11 views
Daily Writeups
⤷ Title: Learn Networking by Hacking Your Own LAN — Part 1: SSH and tcpdump
════════════════════════
𐀪 Author: EdgyCorner
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 17:50:42 GMT
════════════════════════
⌗ Tags: #terminal #kali_linux #hacking #security #networking
Medium
Learn Networking by Hacking Your Own LAN — Part 1: SSH and tcpdump
You do not need a lab. You need two computers and a Wi-Fi router you own.
9 views