Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Your EC2 Is Probably Vulnerable. And AWS Isn’t Going to Tell You.
════════════════════════
𐀪 Author: Yajur
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 01:23:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloud_computing #devops #technology #aws
Medium
Your EC2 Is Probably Vulnerable. And AWS Isn’t Going to Tell You.
AWS Inspector Explained: A No-Fluff Guide to Catching CVEs in EC2, Lambda & ECR.
13 views
Daily Writeups
⤷ Title: HackTheBox: Don’t Panic! reverse engineering writeup
════════════════════════
𐀪 Author: Rana chouchane
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 00:54:54 GMT
════════════════════════
⌗ Tags: #hackthebox #cybersecurity #ctf_writeup #ctf #ctf_walkthrough
Medium
HackTheBox: Don’t Panic! reverse engineering writeup
Introduction
13 views
Daily Writeups
⤷ Title: Stop Killing Our Operating Systems
════════════════════════
𐀪 Author: Midna
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 00:50:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #bad_business #microsoft #operating_systems #technology
Medium
Stop Killing Our Operating Systems
18 views
Daily Writeups
⤷ Title: I Took the TryHackMe PT1 Exam — And It Sucked
════════════════════════
𐀪 Author: Yofom
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 02:51:47 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme
Medium
I Took the TryHackMe PT1 Exam — And It Sucked
Web #1:
The first web application is vulnerable to Cross-Site Scripting (XSS) via the loan comment field, where malicious input such as <img src=’’ onerror=document.cookie=”XSS=XSS”> can be injected…
22 views
Daily Writeups
⤷ Title: TryHackMe PT1 Suck
════════════════════════
𐀪 Author: Kecoloc
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 02:25:03 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme
Medium
TryHackMe PT1 Suck
Web #1:
The first web application is vulnerable to Cross-Site Scripting (XSS) via the loan comment field, where malicious input such as <img src=’’ onerror=document.cookie=”XSS=XSS”> can be injected…
31 views
Daily Writeups
⤷ Title: Threat Hunting Pivoting — Discvovery
════════════════════════
𐀪 Author: Kloveslemnyuy
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 02:20:02 GMT
════════════════════════
⌗ Tags: #threat_hunting #tryhackme #pivoting #discovery #enumeration
Medium
📌 Threat Hunting Pivoting — Discvovery
Overview
27 views
Daily Writeups
⤷ Title: TryHackMe PT1
════════════════════════
𐀪 Author: Mahawev
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 02:19:32 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #tryhackme_walkthrough
Medium
TryHackMe PT1
Web #1:
The first web application is vulnerable to Cross-Site Scripting (XSS) via the loan comment field, where malicious input such as <img src=’’ onerror=document.cookie=”XSS=XSS”> can be injected…
32 views
Daily Writeups
⤷ Title: Walkthrough — TryHackMe Challenge: OhSINT
════════════════════════
𐀪 Author: Sertac Kansiz
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 01:29:39 GMT
════════════════════════
⌗ Tags: #tryhackme #osint #ohsint #tryhackme_walkthrough #ctf_writeup
Medium
Walkthrough — TryHackMe Challenge: OhSINT
In this walkthrough, we’ll see what kind of information can be gathered from a single JPEG file. Even though people reading this…
26 views
Daily Writeups
⤷ Title: Essential Linux Commands Every Ethical Hacker Should Know (With Practical Examples) —  Part 1
════════════════════════
𐀪 Author: Hammad Zahid
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 02:56:24 GMT
════════════════════════
⌗ Tags: #kali_linux #linux_commands #ethical_hacking #basic_commands #linux
Medium
Essential Linux Commands Every Ethical Hacker Should Know (With Practical Examples) —  Part 1
Only 40 min Read and Practice
20 views
Daily Writeups
⤷ Title: I Reported a Critical Stored XSS to Zora — What Happened Next Will Dishearten You
════════════════════════
𐀪 Author: John Yangtsali
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 02:21:48 GMT
════════════════════════
⌗ Tags: #programming #ethical_hacking #writing
Medium
I Reported a Critical Stored XSS to Zora — What Happened Next Will Dishearten You
Summary:
30 views
Daily Writeups
⤷ Title: The Night Bangladesh Bank Nearly Lost $1 Billion
════════════════════════
𐀪 Author: zahidul Islam Ratul
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 02:01:38 GMT
════════════════════════
⌗ Tags: #ethical_hacking #money_heist #bangladesh_bank #north_korea_threat #lazarus_group
Medium
The Night Bangladesh Bank Nearly Lost $1 Billion
Behind the scenes of the boldest digital robbery in Bangladesh’s history
37 views
Daily Writeups
⤷ Title: CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 10:21:00 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Microsoft: SharePoint Zero-Day Exploit Leaked, Bypassed Patch, and Actively Attacked By China-Linked APTs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 03:37:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #China APTs #cybersecurity #Exploit Leak #Microsoft #Patch Bypass #RCE #SharePoint #Trend Micro #vulnerability #zero_day
Penetration Testing Tools
Microsoft: SharePoint Zero-Day Exploit Leaked, Bypassed Patch, and Actively Attacked By China-Linked APTs
Microsoft admits its July SharePoint patch failed as a zero-day exploit (CVE-2025-53770), likely leaked from MAPP, is actively used by China-linked APTs to bypass defenses and compromise systems.
32 views
Daily Writeups
⤷ Title: Microsoft Edge Unleashes “Copilot Mode”: AI Assistant Gains Full Browse Context Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 03:55:42 +0000
════════════════════════
⌗ Tags: #Technology #AI Assistant #artificial intelligence #browser #Copilot Mode #microsoft edge #privacy #Productivity #Tech News #Web Browse
Daily CyberSecurity
Microsoft Edge Unleashes "Copilot Mode": AI Assistant Gains Full Browse Context Access
Microsoft Edge introduces "Copilot Mode," an experimental AI feature allowing the assistant to analyze all open tabs and Browse history for enhanced, context-aware assistance.
19 views
Daily Writeups
⤷ Title: Google Chrome Integrates AI-Powered Review Summaries to Boost Online Shopping Confidence
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 03:30:56 +0000
════════════════════════
⌗ Tags: #Technology #AI #Customer Reviews #e_commerce #google chrome #Online Shopping #Reviews #ScamAdviser #Tech News #Trustpilot
Daily CyberSecurity
Google Chrome Integrates AI-Powered Review Summaries to Boost Online Shopping Confidence
Google Chrome now displays AI-generated review summaries for online stores, helping US users quickly assess retailer credibility and product quality from multiple rating platforms.
16 views
Daily Writeups
⤷ Title: PayPal Launches “Pay with Crypto”: US Merchants Can Now Accept 100+ Cryptocurrencies with Low Fees
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 03:26:52 +0000
════════════════════════
⌗ Tags: #Technology #Bitcoin #Crypto Payments #cryptocurrency #Ethereum #Merchants #paypal #PYUSD #stablecoin #Transaction Fees #US
Daily CyberSecurity
PayPal Launches "Pay with Crypto": US Merchants Can Now Accept 100+ Cryptocurrencies with Low Fees
PayPal introduces "Pay with Crypto," allowing US merchants to accept over 100 cryptocurrencies, with funds converting to fiat or PYUSD at low transaction fees (0.99% for first year).PayPal, Crypto Payments, Cryptocurrency, Merchants, Bitcoin, Ethereum, PYUSD…
15 views
Daily Writeups
⤷ Title: Microsoft Uncovers “Sploitlight”: macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 03:20:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple Intelligence #CVE_2025_31199 #cybersecurity #data leak #macOS #Sploitlight #Spotlight #TCC Bypass #Vulnerability
Daily CyberSecurity
Microsoft Uncovers "Sploitlight": macOS Flaw (CVE-2025-31199) Bypasses TCC, Leaking Apple Intelligence Data
Microsoft discovered "Sploitlight" (CVE-2025-31199), a macOS flaw exploiting Spotlight plugins to bypass TCC, leading to private data exfiltration, including Apple Intelligence cached info.
13 views
Daily Writeups
⤷ Title: Sensitive Key Storage Flaws in ASUS’ MyASUS App Threaten Token Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 03:10:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASUS #cybersecurity #MyASUS #software update #Token Theft
Daily CyberSecurity
Sensitive Key Storage Flaws in ASUS’ MyASUS App Threaten Token Security
ASUS has patched two high-severity flaws (CVE-2025-4569, CVE-2025-4570) in MyASUS, stemming from insecure token storage that could lead to unauthorized access. Update immediately!
15 views
Daily Writeups
⤷ Title: ️ JWT Do It? How None Algorithm and Leaky Secrets Let Me Forge Admin Tokens
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 03:46:59 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #infosec #money #hacking
Medium
🔐🕵️ JWT Do It? How None Algorithm and Leaky Secrets Let Me Forge Admin Tokens
Hey there!😁
21 views
Daily Writeups
⤷ Title: Visit kalkikrivadna.com
════════════════════════
𐀪 Author: Krivadna
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 03:14:21 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bugbounty_writeup #bug_bounty #freelancing
Medium
Visit kalkikrivadna.com
9 views
Daily Writeups
⤷ Title: “Climbing the Filesystem Ladder: Path Traversal Is Still Alive (And Kicking Your Backend)”
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 03:01:17 GMT
════════════════════════
⌗ Tags: #information_security #infosec #cybersecurity #ai #bug_bounty
Medium
🧨 “Climbing the Filesystem Ladder: Path Traversal Is Still Alive (And Kicking Your Backend)”
“You thought ‘../../etc/passwd’ was old school? It still works — and it’s everywhere.”
9 views