Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: How SOCs Improve Key Cybersecurity KPIs with Better Threat Analysis
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 10:15:08 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #KPI #security #SOC #Threat Analysis
Hackread
How SOCs Improve Key Cybersecurity KPIs with Better Threat Analysis
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
29 views
Daily Writeups
⤷ Title: Electron Flaws: ASAR Bypass & Buffer Overflow Threaten Desktop Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 09:29:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASAR Archive #cybersecurity #Desktop Applications #Electron #Heap Buffer Overflow #Integrity Bypass #rce #Remote Code Execution #visual studio code
Daily CyberSecurity
Electron Flaws: ASAR Bypass & Buffer Overflow Threaten Desktop Apps
Electron has critical flaws: CVE-2024-46993 allows RCE via image buffer overflow, and CVE-2024-46992 is an ASAR integrity bypass on Windows.
15 views
Daily Writeups
⤷ Title: US Lawmakers Demand OnePlus Probe: Allegations of Data Transfer to Chinese Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 08:19:14 +0000
════════════════════════
⌗ Tags: #Data Leak #china #Data Privacy #Investigation #John Moolenaar #national security #Raja Krishnamoorthi #Reuters #Smartphone #Tech Regulation #US Lawmakers
Daily CyberSecurity
US Lawmakers Demand OnePlus Probe: Allegations of Data Transfer to Chinese Servers
Two US lawmakers are pushing for a Commerce Department investigation into OnePlus, alleging its devices transmit sensitive user data to Chinese servers without consent
22 views
Daily Writeups
⤷ Title: Fedora Linux Delays 32-bit Support End: Community Backlash Saves Gaming & Legacy Hardware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 08:11:22 +0000
════════════════════════
⌗ Tags: #Linux #32_bit Support #64_bit #Bazzite #Community Feedback #Fedora Linux #gaming #Linux Distribution #open_source #Operating System #Steam
Daily CyberSecurity
Fedora Linux Delays 32-bit Support End: Community Backlash Saves Gaming & Legacy Hardware
Fedora Linux has withdrawn its proposal to drop 32-bit support for version 44, delaying the end of 32-bit editions due to community backlash and concerns for Linux gaming.
16 views
Daily Writeups
⤷ Title: Apple Loses Dismissal Bid: Judge Forces iPhone Antitrust Lawsuit to Proceed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 08:05:08 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #App Store #Apple #Department of Justice #DMA #DOJ #iphone #Judge Julien Neals #Lawsuit #monopoly #Tech Regulation
Daily CyberSecurity
Apple Loses Dismissal Bid: Judge Forces iPhone Antitrust Lawsuit to Proceed
A US federal judge denied Apple's motion to dismiss the DOJ antitrust lawsuit. The case, accusing Apple of anticompetitive practices in the iPhone ecosystem, will proceed.
13 views
Daily Writeups
⤷ Title: Hacker Pleads Guilty: Breached Orgs to Promote Cybersecurity Services, Faces Prison
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 07:58:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #breach #Cybercrime #Cybersecurity Services #Federal Charges #Hacking #Nicholas Michael Kloster #social engineering #US Department of Justice
Daily CyberSecurity
Hacker Pleads Guilty: Breached Orgs to Promote Cybersecurity Services, Faces Prison
Nicholas Michael Kloster pleaded guilty to hacking organizations to promote his cybersecurity services, facing up to 5 years in prison for his illegal "self-promotion" tactics.
12 views
Daily Writeups
⤷ Title: Linux Kernel 6.16-rc4 Released: Focus on Filesystem Fixes, Driver Improvements, & Hardware Support
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 07:51:08 +0000
════════════════════════
⌗ Tags: #Linux #Bug Fixes #drivers #File Systems #Intel Wildcat Lake #Kernel Update #Linux Kernel #Nvidia Blackwell #Nvidia Hopper #open_source #rc4 #Release Candidate
Daily CyberSecurity
Linux Kernel 6.16-rc4 Released: Focus on Filesystem Fixes, Driver Improvements, & Hardware Support
Linux Kernel 6.16-rc4 is out, focusing on filesystem fixes (bcachefs, SMB, Btrfs) and driver improvements. Final release expected in ~1 month, with Nvidia Blackwell/Hopper GPU support.
17 views
Daily Writeups
⤷ Title: Raspberry Pi Unveils $4 Radio Module 2: Bringing Wi-Fi 4 & Bluetooth 5.2 to Custom Boards
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 07:47:14 +0000
════════════════════════
⌗ Tags: #Technology #Bluetooth 5.2 #embedded systems #hardware #IOT #Microcontroller #Pico 2 W #Pico W #Radio Module 2 #Raspberry Pi #Tech News #Wi_Fi 4 #Wireless Module
Daily CyberSecurity
Raspberry Pi Unveils $4 Radio Module 2: Bringing Wi-Fi 4 & Bluetooth 5.2 to Custom Boards
Raspberry Pi launched a $4 Radio Module 2, offering Wi-Fi 4 and Bluetooth 5.2 to custom boards. It's pre-certified and ideal for low-cost IoT projects.
16 views
Daily Writeups
⤷ Title: Day 8:Stored XSS into anchor href attribute with double quotes HTML-encoded : Zero to Hero Series…
════════════════════════
𐀪 Author: RayofHope
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 10:27:52 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #ethical_hacking #bug_bounty #stored_xss #web_penetration_testing
Medium
Day 8:Stored XSS into anchor href attribute with double quotes HTML-encoded : Zero to Hero Series…
Hi, my fellow hackers. This is Rayofhope. I have over 5 years of experience and am currently working as a consultant with a Big 4 firm.
14 views
Daily Writeups
⤷ Title: Day 12 Blind SQL injection with conditional errors — Zero to Hero Blind Injection — Portswigger
════════════════════════
𐀪 Author: RayofHope
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 10:26:11 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cybersecurity #web_penetration_testing #penetration_testing
Medium
Day 12 Blind SQL injection with conditional errors — Zero to Hero Blind Injection — Portswigger
Hi, my fellow hackers. This is Rayofhope. I have over 5 years of experience and am currently working as a consultant with a Big 4 firm.
20 views
Daily Writeups
⤷ Title: Deepfakes: The New Weapon in Cyber Attacks
════════════════════════
𐀪 Author: Natarajan C K
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 10:32:51 GMT
════════════════════════
⌗ Tags: #cyber_attack_real_time #security #cybersecurity #deepfakes #bug_bounty
Medium
Deepfakes: The New Weapon in Cyber Attacks
Imagine receiving a video call from your CEO instructing you to transfer a large sum of money to a new account. The voice, the face, and…
16 views
Daily Writeups
⤷ Title: Bypassing Application Limit on Free Plan via Parallel Requests
════════════════════════
𐀪 Author: Khaledelnabet
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 10:01:28 GMT
════════════════════════
⌗ Tags: #bug_bounty #security #hacking #hacker #cybersecurity
Medium
Bypassing Application Limit on Free Plan via Parallel Requests
Summary
14 views
Daily Writeups
⤷ Title: IDOR: Improper Access Control in Meta Verified Waiting List Management
════════════════════════
𐀪 Author: Ramzy Bouyahya
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 09:58:26 GMT
════════════════════════
⌗ Tags: #facebook_bug_bounty #bug_bounty_writeup #facebook #bug_bounty #meta_bug_bounty
Medium
IDOR: Improper Access Control in Meta Verified Waiting List Management
Description
16 views
Daily Writeups
⤷ Title: CSRF Is Still Alive: A Modern Guide for Hackers and Defenders
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 09:11:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #ai #bug_bounty #infosec
Medium
CSRF Is Still Alive: A Modern Guide for Hackers and Defenders
Part 2: Bypassing Modern CSRF Mitigations
16 views
Daily Writeups
⤷ Title: Reusing an Expired Invitation to Rejoin the Organization
════════════════════════
𐀪 Author: Khaledelnabet
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 09:04:14 GMT
════════════════════════
⌗ Tags: #hacking #bugs #cybersecurity #bug_bounty #security
Medium
Reusing an Expired Invitation to Rejoin the Organization
An invitation to join an organization can be reused even after the user has already accepted it and joined the organization once. This…
22 views
Daily Writeups
⤷ Title: CSRF Is Still Alive: A Modern Guide for Hackers and Defenders
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 08:59:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #infosec #bug_bounty #ai
Medium
CSRF Is Still Alive: A Modern Guide for Hackers and Defenders
Even in the age of SameSite cookies and secure frameworks, Cross-Site Request Forgery (CSRF) is still a threat — especially in legacy…
15 views
Daily Writeups
⤷ Title: DevSecOps in Action: How to Add Security Checks Across Your Development Lifecycle
════════════════════════
𐀪 Author: Sai Jami
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 08:54:33 GMT
════════════════════════
⌗ Tags: #shift_left_strategy #shift_left_security #devsecops #application_security #security_by_design
Medium
DevSecOps in Action: How to Add Security Checks Across Your Development Lifecycle
Shift Security Left with Practical Steps
19 views
Daily Writeups
⤷ Title: ICS ve SCADA Pentester’ları için PERA Modeli Neden Önemlidir?
════════════════════════
𐀪 Author: Hazar Taspinar
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 10:08:29 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #scada #ot_security #cybersecurity
Medium
ICS ve SCADA Pentester’ları için PERA Modeli Neden Önemlidir?
Herkese Merhaba, Bu yazımda sizlere Endüstriyel Kontrol Sistemleri (ICS) içerisinde kullanılan ağ segmentasyonu yapısını, yani SCADA Purdue…
13 views
Daily Writeups
⤷ Title: Top 3 Security Training Platforms in 2025 (Tested for Hands-On Learning)
════════════════════════
𐀪 Author: InfoSec Write-ups
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 09:49:32 GMT
════════════════════════
⌗ Tags: #security_training #cybersecurity #infosec #security #hacking
Medium
Top 3 Security Training Platforms in 2025 (Tested for Hands-On Learning)
The best hands-on security training platforms for individuals and teams in 2025
15 views
Daily Writeups
⤷ Title: Day 2 – The Shift: From User to Hunter
════════════════════════
𐀪 Author: An0n
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 09:47:46 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #hacking #hacking_tools #linux
Medium
Go check Day 1🔥
The Terminal Doesn’t Lie—But It Hides
16 views
Daily Writeups
⤷ Title: ☁️Cloud Security | Alert: Exposed lambda functions
════════════════════════
𐀪 Author: Sudarshan Patel
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 09:36:07 GMT
════════════════════════
⌗ Tags: #cloud_security #cloud_penetration_testing #aws_hacking #penetration_testing #hacking
Medium
🚨☁️Cloud Security | 🚨Alert: Exposed lambda functions💻🔒
Hello everyone! 👋 I hope you all are doing well. First and foremost, thank you so much for taking the time to read my posts and for your…
21 views