Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Easy $150: Misconfigured SSO Led to Account Takeover
════════════════════════
𐀪 Author: Clement 'Tino
════════════════════════
ⴵ Time: Thu, 13 Mar 2025 10:50:15 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty_writeup #account_takeover #single_sign_on #sso
Medium
Easy $150: Misconfigured SSO Led to Account Takeover
Akwaaba! once again my people. In this piece, I will quickly talk about a vulnerability I recently discovered and got paid for. SSO…
60 views
Daily Writeups
⤷ Title: NSA and Global Allies Declare Fast Flux a National Security Threat
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 04 Apr 2025 11:36:49 +0000
════════════════════════
⌗ Tags: #Security #CISA #Cybersecurity #Double Flux #Fast Flux #NSA #Single Flux
Hackread
NSA and Global Allies Declare Fast Flux a National Security Threat
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
42 views
Daily Writeups
⤷ Title: Fast Flux Alert: National Security Agencies Warn of Evasive Tactic
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Sat, 05 Apr 2025 00:44:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #bulletproof hosting #Double Flux #Fast Flux #Single Flux
Daily CyberSecurity
Fast Flux Alert: National Security Agencies Warn of Evasive Tactic
Explore the threat of Fast Flux in cybersecurity. Learn how malicious actors evade defenses using this sophisticated technique.
23 views
Daily Writeups
⤷ Title: Critical Risk (CVSS 9.9): samlify Flaw Exposes SSO in Widely Used Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 20 May 2025 02:39:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication #CVE_2025_47949 #SAML #samlify #security #Single Sign_On #SSO
Daily CyberSecurity
Critical Risk (CVSS 9.9): samlify Flaw Exposes SSO in Widely Used Library
Critical vulnerability (CVSS 9.9) in samlify! This flaw puts many SSO implementations at risk, affecting a library with 768,000+ monthly downloads.
15 views
Daily Writeups
⤷ Title: Top 3 Mistakes New Cyber Learners Make (and I Made Them All)
════════════════════════
𐀪 Author: CyberSamantha
════════════════════════
ⴵ Time: Wed, 28 May 2025 21:38:40 GMT
════════════════════════
⌗ Tags: #women_in_tech #ethical_hacking #single_moms #cybersecurity
Medium
Top 3 Mistakes New Cyber Learners Make (and I Made Them All) 🚨
I’m a single mom learning cybersecurity. Most days, I study while my baby naps. Some days, no naps. 😅
16 views
Daily Writeups
⤷ Title: Critical Node-SAML Flaw (CVE-2025-54369) Exposes SAML 2.0 to Authentication Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 28 Jul 2025 00:13:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2025_54369 #cybersecurity #Node_SAML #SAML #SAML 2.0 #Single Sign_On #SSO #Vulnerability
Daily CyberSecurity
Critical Node-SAML Flaw (CVE-2025-54369) Exposes SAML 2.0 to Authentication Bypass
A critical flaw (CVE-2025-54369) in Node-SAML allows attackers to bypass SAML 2.0 authentication by manipulating unsigned assertion data. Update to v5.1.0 immediately!
6 views
Daily Writeups
⤷ Title: Critical Node-SAML Flaw (CVE-2025-54419, CVSS 10.0) Allows Authentication Bypass in SAML 2.0 Web Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Jul 2025 00:45:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cybersecurity #Node_SAML #Node.js #SAML 2.0 #Single Sign_On #SSO #Vulnerability #web applications
Daily CyberSecurity
Critical Node-SAML Flaw (CVE-2025-54419, CVSS 10.0) Allows Authentication Bypass in SAML 2.0 Web Apps
A critical vulnerability (CVE-2025-54419, CVSS 10.0) in Node-SAML allows attackers to bypass SAML 2.0 authentication by manipulating unsigned assertion data.
20 views
Daily Writeups
⤷ Title: Critical Flaw in Wix’s New AI Platform Base44 Allowed Unauthorized Access to Private Enterprise Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 00:42:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Platform #Authentication Bypass #Base44 #cybersecurity #Single Sign_On #SSO #Vulnerability #Wix #Wiz Research
Daily CyberSecurity
Critical Flaw in Wix's New AI Platform Base44 Allowed Unauthorized Access to Private Enterprise Apps
Wiz Research uncovered a critical flaw in Wix's new AI platform, Base44, that allowed unauthorized access to private enterprise applications and sensitive data by bypassing SSO.
19 views
Daily Writeups
⤷ Title: Critical Flaw in Wix’s Base44 AI Platform Allowed Access to Private Enterprise Apps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 00:25:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Platform #authentication bypass #Base44 #cybersecurity #Single Sign_On #SSO #vulnerability #Wix #Wiz Research
Penetration Testing Tools
Critical Flaw in Wix's Base44 AI Platform Allowed Access to Private Enterprise Apps
Wiz Research uncovered a critical vulnerability in Base44, Wix's AI-powered coding platform, that allowed unauthorized access to private enterprise applications by bypassing SSO.
29 views
Daily Writeups
⤷ Title: The Missing Piece of SSO: A Practical Guide to Single Logout (SLO)
════════════════════════
𐀪 Author: Kunal Sinha
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 17:09:04 GMT
════════════════════════
⌗ Tags: #information_security #single_logout #cybersecurity #authentication #session_management
Medium
The Missing Piece of SSO: A Practical Guide to Single Logout (SLO)
Have you ever logged out of your company’s email, only to realize you’re still signed into your internal chat application? This common…
16 views
Daily Writeups
⤷ Title: Raspberry Pi OS Trixie Released: Solves the Year 2038 Problem and Unveils New Control Centre
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 02:23:48 +0000
════════════════════════
⌗ Tags: #Linux #Control Centre #Debian 13 #OS Update #Raspberry Pi OS #Single Board Computer #Trixie #Year 2038
Penetration Testing Tools
Raspberry Pi OS Trixie Released: Solves the Year 2038 Problem and Unveils New Control Centre
Raspberry Pi OS Trixie, based on Debian 13, is released. It solves the Year 2038 problem with 64-bit time, introduces a unified Control Centre, and features a refreshed UI.
8 views
Daily Writeups
⤷ Title: The One Password to Rule Them All: Single Sign-On (SSO) I
════════════════════════
𐀪 Author: Stephnoramafeng
════════════════════════
ⴵ Time: Sat, 11 Oct 2025 08:01:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #single_sign_on #cyber_security_awareness #cybersecurity_education
Medium
The One Password to Rule Them All: Single Sign-On (SSO) I
The day I realized I was living 27 different online lives — each with its own password.
24 views
Daily Writeups
⤷ Title: The One Login to Rule Them All: Single Sign On-SSO II (the technical version)
════════════════════════
𐀪 Author: Stephnoramafeng
════════════════════════
ⴵ Time: Sun, 12 Oct 2025 06:18:04 GMT
════════════════════════
⌗ Tags: #technology #single_sign_on #cyber_security_awareness #cybersecurity #cybersecurity_education
Medium
The One Login to Rule Them All: Single Sign On-SSO II (the technical version)
The One Login to Rule Them All: Single Sign On-SSO II (the technical version) I still get a little giddy remembering the first time I fired up Kali, typed sudo apt update && sudo apt upgrade, and …
17 views
Daily Writeups
⤷ Title: Golden Ticket Attack on Kerberos and Single Sign-On: Risks and How to Prevent It
════════════════════════
𐀪 Author: Isaac obune
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 02:42:38 GMT
════════════════════════
⌗ Tags: #active_directory #golden_ticket_attack #cybersecurity #single_sign_on #kerberos
Medium
Golden Ticket Attack on Kerberos and Single Sign-On: Risks and How to Prevent It
What Is a Golden Ticket Attack?
34 views
Daily Writeups
⤷ Title: Cloudflare Outage: Internal Failure Shuts Down Sites, Exposing Hidden Security Gaps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:29:05 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Bot Management #Cloudflare #cybersecurity #DDoS protection #internet infrastructure #Outage #Security Perimeter #Single Point of Failure
Penetration Testing Tools
Cloudflare Outage: Internal Failure Shuts Down Sites, Exposing Hidden Security Gaps
A database error in Cloudflare's Bot Management system caused a global outage, forcing sites to run without security filtering and renewing single point of failure risks.
29 views
Daily Writeups
⤷ Title: Internal Errors Plague Cloud Giants: AWS, Azure, & Cloudflare Hit by Configuration Outages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 03:06:01 +0000
════════════════════════
⌗ Tags: #Technology #AWS #Cloud Outage #Cloud Resilience #Cloudflare #Configuration Error #DNS Failure #metadata #Microsoft Azure #Single Point of Failure
Penetration Testing Tools
Internal Errors Plague Cloud Giants: AWS, Azure, & Cloudflare Hit by Configuration Outages
Recent outages at AWS, Azure, and Cloudflare show that internal configuration errors, not attacks, are the new single point of failure in hyper-automated global cloud infrastructure.
26 views
Daily Writeups
⤷ Title: CRISPR vs. Cholesterol: Single-Dose Gene Editing Eliminates Major Heart Disease Risk Factors
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 03:21:29 +0000
════════════════════════
⌗ Tags: #Technology #AHA 2025 #Cardiovascular Disease #Cholesterol #CRISPR #Epigenomic Editing #Gene Editing #PCSK9 #Scribe Therapeutics #Single_Dose Therapy
Penetration Testing Tools
CRISPR vs. Cholesterol: Single-Dose Gene Editing Eliminates Major Heart Disease Risk Factors
The CRISPR gene-editing system has now reached one of the principal drivers of cardiovascular disease: dangerous blood lipids.
5 views
Daily Writeups
⤷ Title: The Single-Step Sniper: Bypassing EDR Hooks with TrapFlagForSyscalling
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:34:50 +0000
════════════════════════
⌗ Tags: #Open Source Tool #EDR Bypass #EFLAGS #Malware Development #NtAllocateVirtualMemory #red teaming #Single_Step Exception #Syscall Tampering #Trap Flag #User_land Hooking #VEH
Penetration Testing Tools
The Single-Step Sniper: Bypassing EDR Hooks with TrapFlagForSyscalling
Master TrapFlagForSyscalling: Use the CPU’s Trap Flag and VEH to hijack whitelisted syscalls and bypass EDR user-land hooks with stealth.
11 views
Daily Writeups
⤷ Title: Double the RAM, Half the Stress: Raspberry Pi 4’s Secret Design Overhaul to Combat the 2026 Memory Crisis
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:35:34 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #dual_memory #hardware revision #LPDDR4 #Memory Shortage #pieeprom_2026_01_09 #price hike 2026 #Raspberry Pi 4B #Rev 1.5 #single_board computer
Daily CyberSecurity
Double the RAM, Half the Stress: Raspberry Pi 4’s Secret Design Overhaul to Combat the 2026 Memory Crisis
13 views
Daily Writeups
⤷ Title: The Tiny Titan: Why Raspberry Pi is the Unexpected King of the AI Agent Revolution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:16:08 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #AI HAT+ #Eben Upton #Edge Inference #Llama 3 #London Stock Exchange #Mistral #OpenClaw #Raspberry Pi #Raspberry Pi 5 #single_board computer #stock market 2026 #Tech News
Daily CyberSecurity
The Tiny Titan: Why Raspberry Pi is the Unexpected King of the AI Agent Revolution
A 42% stock surge and the rise of "Edge Inference" have transformed the Raspberry Pi into the premier low-cost vessel for autonomous AI agents in 2026.
23 views