Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: Cyber Security Ethics: Defining the Moral Boundaries
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 21:10:04 GMT
════════════════════════
⌗ Tags: #moral_boundaries #cyber_security_ethics #cybersecurity #digital_ethic #ethics
Medium
Cyber Security Ethics: Defining the Moral Boundaries
In the rapidly evolving digital landscape, cybersecurity stands as a crucial bulwark against an array of threats, yet its practices are…
14 views
Daily Writeups
⤷ Title: Remote code execution via polyglot web shell upload — PortSwigger Walkthrough
════════════════════════
𐀪 Author: Amr Elharery
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 21:05:54 GMT
════════════════════════
⌗ Tags: #file_upload #rce #penetration_testing #pentesting #web_penetration_testing
Medium
Remote code execution via polyglot web shell upload — PortSwigger Walkthrough
Introduction
23 views
Daily Writeups
⤷ Title: I Paid ₹1 for a ₹1000 Event – How “Vibe Coding” Can Lead to Real-World Failures
════════════════════════
𐀪 Author: Dnavin
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 20:51:53 GMT
════════════════════════
⌗ Tags: #vibe_coding #payments #ai_coding #penetration_testing #software_development
Medium
I Paid ₹1 for a ₹1000 Event – How “Vibe Coding” Can Lead to Real-World Failures
During a casual weekend pentest on mysamay.in, a platform used for marathon registrations across India, I stumbled upon something wild:
19 views
Daily Writeups
⤷ Title: GreenHorn HTB Walkthrough
════════════════════════
𐀪 Author: Isiaq Bolaji Ibrahim
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 20:34:09 GMT
════════════════════════
⌗ Tags: #htb #htb_writeup #hackthebox_walkthrough #hackthebox #hackthebox_writeup
Medium
GreenHorn HTB Walkthrough
Welcome to another Hack The Box walkthrough. The machine we are going to pwn is the GreenHorn machine. Today, we will look at how to pwn…
25 views
Daily Writeups
⤷ Title: ASC Cyber WarGames 2025 Qualifications — (Web)
════════════════════════
𐀪 Author: Abdelrahman Radwan
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 20:04:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql_injection #ctf_writeup #jwt #web_security
Medium
ASC Cyber WarGames 2025 Qualifications — (Web)
بِسْمِ اللَّهِ الرَّحْمَنِ الرَّحِيمِ
32 views
Daily Writeups
⤷ Title: TOTP in the Clear: Proton Authenticator’s Privacy Misstep on iOS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 23:40:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #ios #MFA #Plaintext Logs #Proton Authenticator #Secrets #TOTP #Update #vulnerability
Penetration Testing Tools
TOTP in the Clear: Proton Authenticator’s Privacy Misstep on iOS
Proton Authenticator for iOS exposed TOTP secrets in plaintext logs, risking 2FA account leaks. A swift patch fixed it—but trust may take longer.
26 views
Daily Writeups
⤷ Title: Critical Command Injection Flaws in Trend Micro Apex One Actively Exploited
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 23:05:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_54948 #CVE_2025_54987 #cybersecurity #rce #Remote Code Execution #Trend Micro Apex One #Vulnerability
Daily CyberSecurity
Critical Command Injection Flaws in Trend Micro Apex One Actively Exploited
Trend Micro warns of two critical RCE flaws (CVE-2025-54948, -54987) in Apex One (on-prem) actively exploited in the wild. A fix tool is available, but disables remote agent installs.
32 views
Daily Writeups
⤷ Title: How I Discovered a Critical OTP Rate Limiting Vulnerability on a Bug Bounty Program
════════════════════════
𐀪 Author: Lime
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 22:33:29 GMT
════════════════════════
⌗ Tags: #bug_bounty
Medium
How I Discovered a Critical OTP Rate Limiting Vulnerability on a Bug Bounty Program
I’m Lime, a bug bounty hunter and penetration tester. Today I’m sharing a critical vulnerability I discovered on a VDP (Vulnerability…
19 views
Daily Writeups
⤷ Title: Security Logging and Monitoring Failures (OWASP A09): Complete Hacking and Bug Bounty Guide
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 00:01:41 GMT
════════════════════════
⌗ Tags: #web_development #penetration_testing #ethical_hacking #cybersecurity #bug_bounty
Medium
Security Logging and Monitoring Failures (OWASP A09): Complete Hacking and Bug Bounty Guide
Discover how the lack of logs and alerts facilitates attacks, allows for the erasure of traces, and conceals lateral movement.
10 views
Daily Writeups
⤷ Title: AI Security: What is MCP Security & Why It Matters Now?
════════════════════════
𐀪 Author: Rahul Bhichher
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 23:55:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #mcp_server #ai_security #model_context_protocol
Medium
AI Security: What is MCP Security & Why It Matters Now?
When I first heard about the Model Context Protocol, or MCP, it reminded me of the early days of APIs and cloud services.
8 views
Daily Writeups
⤷ Title: The Ashley Madison Break
════════════════════════
𐀪 Author: Marvion Criddle
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 23:55:33 GMT
════════════════════════
⌗ Tags: #hacking #short_story #business #dating #cybersecurity
Medium
The Ashley Madison Break
What Happens When Privacy Is a Sales Pitch, Not a Standard
8 views
Daily Writeups
⤷ Title: The “Layered Instinct” Method: Why Most Cybersecurity Strategies Fail Before the First Alert
════════════════════════
𐀪 Author: Ahmed Awad ( NullC0d3 )
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 23:48:03 GMT
════════════════════════
⌗ Tags: #writing #life #cybersecurity #education #life_lessons
Medium
The “Layered Instinct” Method: Why Most Cybersecurity Strategies Fail Before the First Alert
“You patched. You logged. You trained the users.  So why did they still breach you?”
9 views
Daily Writeups
⤷ Title: New in the Loop with AI Pentesting
════════════════════════
𐀪 Author: Daniel Knight
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 23:34:01 GMT
════════════════════════
⌗ Tags: #pentesting #llm #cybersecurity
Medium
New in the Loop with AI Pentesting
To ensure safety at Vulnetic, there is a major feature we have pushed into the loop, which I will share here. I am hoping this becomes a…
11 views
Daily Writeups
⤷ Title: This One Network Mistake Could Let Hackers Spy on Everything You Do Online
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 23:17:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #networking #mitm #information_security
Medium
This One Network Mistake Could Let Hackers Spy on Everything You Do Online
Man-in-the-Middle Attacks: The Scariest Cyber Threat No One’s Talking About
21 views
Daily Writeups
⤷ Title: Hackviser — Roundcube ≤ 1.6.10
════════════════════════
𐀪 Author: Dogukan İSPİRLİ
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 22:47:18 GMT
════════════════════════
⌗ Tags: #ctf_writeup #vulnerability #cve_2025 #ctf_walkthrough #cybersecurity
Medium
Hackviser — Roundcube ≤ 1.6.10
Hackviser platformuna giriş yaparak Laboratuvarlar bölümündeki Yaygın Güvenlik Açıkları bölümüne giriş yapıyoruz ve CVE-2025 olan bölüme…
33 views
Daily Writeups
⤷ Title: Dark Web Websites: What They Are and Why People Visit Them
════════════════════════
𐀪 Author: SafeAeon Inc.
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 22:16:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #dark_web_link #darkwebsites
Medium
Dark Web Websites: What They Are and Why People Visit Them
You’ve probably heard of the dark web a hidden part of the internet that doesn’t show up on Google. But what about dark web websites? Are…
38 views
Daily Writeups
⤷ Title: pamspy: Credentials Dumper for Linux using eBPF
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 00:38:33 +0000
════════════════════════
⌗ Tags: #Open Source Tool
Penetration Testing Tools
pamspy: Credentials Dumper for Linux using eBPF
pamspy -- Credentials Dumper for Linux will track a particular userland function inside the PAM (Pluggable Authentication Modules) library
26 views
Daily Writeups
⤷ Title: evilgophish: Combination of evilginx2 and GoPhish
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 00:32:31 +0000
════════════════════════
⌗ Tags: #Open Source Tool #social engineering engagements
Penetration Testing Tools
evilgophish: Combination of evilginx2 and GoPhish
This is enticing to us to say the least, but when trying to use it for social engineering engagements, there are some issues off the bat
28 views
Daily Writeups
⤷ Title: Triple Threat in Triton: Critical Flaws Expose AI Servers to Full Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 00:12:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #cybersecurity #Data Tampering #Inference Server #NVIDIA Triton #RCE #remote code execution #vulnerability #Wiz Research
Penetration Testing Tools
Triple Threat in Triton: Critical Flaws Expose AI Servers to Full Takeover
NVIDIA has patched multiple critical flaws (CVSS 9.8) in its Triton Inference Server. A vulnerability chain allows unauthenticated attackers to gain RCE and seize AI servers.
10 views
Daily Writeups
⤷ Title: CISA Adds Three D-Link Flaws to KEV Catalog: EOL IP Cameras Under Active Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 01:48:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #cybersecurity #D_Link #end_of_life #EOL #exploitation #IP Camera #network_security #Vulnerability
Daily CyberSecurity
CISA Adds Three D-Link Flaws to KEV Catalog: EOL IP Cameras Under Active Exploitation
CISA adds three D-Link vulnerabilities (CVE-2020-25078, -25079, -2022-40799) to its KEV Catalog, confirming active exploitation of EOL IP cameras.
8 views
Daily Writeups
⤷ Title: Critical RCE Flaw (CVE-2025-54594) in React Native Bottom Tabs’ GitHub Actions Exposed Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 00:35:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD #CVE_2025_54594 #GitHub Actions #rce #React Native Bottom Tabs #Remote Code Execution #Secrets Exfiltration #supply chain attack #Vulnerability
Daily CyberSecurity
Critical RCE Flaw (CVE-2025-54594) in React Native Bottom Tabs' GitHub Actions Exposed Secrets
A critical vulnerability (CVE-2025-54594, CVSS 9.1) in React Native Bottom Tabs’ GitHub Actions allowed RCE and secret exfiltration. The flaw was patched, and no packages were affected.
13 views