Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: New “PowMix” Botnet Preys on Czech Workforce with Lure of Compliance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:11:43 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #botnet #Cisco Talos #cyber_espionage #Czech Republic #EDEKA Phishing #Heroku Abuse #infosec #Malware Analysis #PowerShell Malware #PowMix #REST API Mimicry
Daily CyberSecurity
New "PowMix" Botnet Preys on Czech Workforce with Lure of Compliance
Cisco Talos uncovers PowMix, a stealthy botnet targeting Czech HR via AMSI bypass and Heroku-hosted C2. Learn how this malware evades modern EDR systems.
26 views
Daily Writeups
⤷ Title: Breaking API Security: Attack Surface, Trust Boundaries, and Exploitation Paths
════════════════════════
𐀪 Author: Divine
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 18:09:07 GMT
════════════════════════
⌗ Tags: #api #web_security #bug_bounty #rest_api
Medium
Breaking API Security: Attack Surface, Trust Boundaries, and Exploitation Paths
API security When it comes to API Security and the attack surface our focus shifts from endpoints /login, /profile and the likes to objects, actions and trust assumptions within the API call An API …
14 views
Daily Writeups
⤷ Title: Filtros em APIs REST não são só query params
════════════════════════
𐀪 Author: Erik Barroso
════════════════════════
ⴵ Time: Thu, 07 May 2026 22:11:41 GMT
════════════════════════
⌗ Tags: #filtros #sql_injection #sql #api #rest_api
Medium
Você provavelmente está implementando filtros errado na sua API REST
Filtros parecem apenas query params, mas envolvem validação, segurança, autorização, performance, paginação, cache e consistência de…
21 views
Daily Writeups
⤷ Title: Você provavelmente está implementando filtros errado na sua API REST
════════════════════════
𐀪 Author: Erik Barroso
════════════════════════
ⴵ Time: Thu, 07 May 2026 22:11:41 GMT
════════════════════════
⌗ Tags: #filtros #sql_injection #sql #api #rest_api
Medium
Você provavelmente está implementando filtros errado na sua API REST
Filtros parecem apenas query params, mas envolvem validação, segurança, autorização, performance, paginação, cache e consistência de…
43 views
Daily Writeups
⤷ Title: Under Siege: Critical Auth Bypass Flaw in Burst Statistics Plugin Puts 115,000+ WordPress Sites at Risk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 06:44:34 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Hijacking #authentication bypass #Burst Statistics #CVE_2026_8181 #Patch Update 2026 #Plugin Flaw #REST API Exploit #website security #Wordfence #WordPress Vulnerability
Penetration Testing Tools
Under Siege: Critical Auth Bypass Flaw in Burst Statistics Plugin Puts 115,000+ WordPress Sites at Risk
WordPress websites have once again fallen under siege due to a critical flaw in a popular extension. On
17 views
Daily Writeups
⤷ Title: CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:49:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Secure Workload #Cisco Security Advisory #CVE_2026_20223 #CVSS 10 #Cyber Security #infosec #Patch Alert #privilege escalation #REST API Exploit #Tenant Cross_Bypass #Zero_Trust Microsegmentation
Daily CyberSecurity
CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
Cisco drops an urgent advisory for CVE-2026-20223 (CVSS 10.0) in Secure Workload. Unauthenticated remote attackers can steal full Site Admin privileges.
14 views
Daily Writeups
⤷ Title: API Pentesting | TryHackMe | practical challenge
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Sun, 24 May 2026 19:36:00 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #pentesting #api_security #rest_api #cybersecurity
Medium
API Pentesting | TryHackMe | practical challenge
Explore how to identify and exploit common API security vulnerabilities.
41 views
Daily Writeups
⤷ Title: Finding and Exploiting an unused API endpoint
════════════════════════
𐀪 Author: Dalila
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:00:05 GMT
════════════════════════
⌗ Tags: #rest_api_security #api_security #owasp_api #owasp_api_security_top_10 #api_endpoint_monitoring
Medium
Finding and Exploiting an unused API endpoint
This lab demonstrates how an unused API endpoint can be exploited. By analyzing HTTP requests and taking advantage of gaps revealed in…
36 views
Daily Writeups
⤷ Title: The Security Implications of HTTP QUERY: Analyzing RFC 10008
════════════════════════
𐀪 Author: Kabil Preetham K
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 14:15:54 GMT
════════════════════════
⌗ Tags: #api_security #rest_api #https #web_security #cybersecurity
Medium
The Security Implications of HTTP QUERY: Analyzing RFC 10008
The publication of Request for Comments (RFC) 10008 in June 2026 represents the most fundamental restructuring of HTTP protocol semantics…
14 views
Daily Writeups
⤷ Title: HTTP QUERY Method Explained:
════════════════════════
𐀪 Author: Simran Madhok
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 16:28:50 GMT
════════════════════════
⌗ Tags: #http_query #api_development #rest_api #api_security #web_development
Medium
HTTP QUERY Method Explained: RFC 10008 and the Future of Safe API Queries
Switch to QUERY http method Secure coding should always be the top priority for developers while building applications. Hence it was a welcome news when the HTTP QUERY Method was formally introduced …
23 views