Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Crafting a Fully Undetectable Windows Payload Using C: A Red Team Perspective
════════════════════════
𐀪 Author: Aman
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 20:10:28 GMT
════════════════════════
⌗ Tags: #fup #undetectable_payload #payload #fud #ethical_hacking
Medium
Crafting a Fully Undetectable Windows Payload Using C: A Red Team Perspective
By Aman Gill
35 views
Daily Writeups
⤷ Title: RedInfraCraft V2: Automate Your Red Team Infrastructure with Ease
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:23:41 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Automation #cloud security #cybersecurity #ethical hacking #Infrastructure #Mythic C2 #Payload #Pentesting #phishing #Red Team #RedInfraCraft
Penetration Testing Tools
RedInfraCraft V2: Automate Your Red Team Infrastructure with Ease
RedInfraCraft V2 simplifies and automates the deployment of red team infrastructure, including Mythic C2, phishing, and payload setups, across multi-cloud environments
26 views
Daily Writeups
⤷ Title: ZigStrike: New Zig-Based Shellcode Loader Revolutionizes EDR Evasion with Advanced Injection Techniques
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 28 Jun 2025 00:14:58 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Anti_Sandbox #cybersecurity #EDR Bypass #malware #Offensive Security #Payload Delivery #Process injection #shellcode loader #Zig Language #ZigStrike
Penetration Testing Tools
ZigStrike: New Zig-Based Shellcode Loader Revolutionizes EDR Evasion with Advanced Injection Techniques
ZigStrike, a new shellcode loader in Zig, offers advanced injection techniques and anti-sandbox features to bypass EDR, providing stealthy execution via local/remote thread and memory mapping.
13 views
Daily Writeups
⤷ Title: Web Application Vulnerability Guide (VAPT) — Now Live on GitHub! ️
════════════════════════
𐀪 Author: Psyduck
════════════════════════
ⴵ Time: Sun, 13 Jul 2025 09:22:31 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #bug_bounty #mitigation #payload #vapt
Medium
🚨 Web Application Vulnerability Guide (VAPT) — Now Live on GitHub! 🛡️
In my journey through offensive security, I’ve encountered, tested, and documented dozens of vulnerabilities in real-world environments —…
15 views
Daily Writeups
⤷ Title: The Art of Crafting a Perfect Payload
════════════════════════
𐀪 Author: Sai Krishna
════════════════════════
ⴵ Time: Fri, 18 Jul 2025 18:41:47 GMT
════════════════════════
⌗ Tags: #payload #xss_attack #xss_vulnerability #bug_bounty #web_app_pentesting
Medium
The Art of Crafting a Perfect Payload
All it takes is one good payload to go from testing to total control. Ready to learn how it’s done?
20 views
Daily Writeups
⤷ Title: TryHackMe: Upload Vulnerabilities
════════════════════════
𐀪 Author: Babatunde Ojo
════════════════════════
ⴵ Time: Sat, 19 Jul 2025 14:11:59 GMT
════════════════════════
⌗ Tags: #tryhackme #file_upload #vulnerability #payload #php
Medium
TryHackMe: Upload Vulnerabilities
Tutorial room exploring some basic file-upload vulnerabilities in websites.
46 views
Daily Writeups
⤷ Title: Reflected XSS Vulnerability Found on TechHunk.com — A Short but Real Case Study
════════════════════════
𐀪 Author: Polash Mridha
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 18:41:10 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_security #xss_attack #payload #xss_vulnerability
Medium
Reflected XSS Vulnerability Found on TechHunk.com — A Short but Real Case Study
Introduction
18 views
Daily Writeups
⤷ Title: Web Uygulama Güvenliği (OWASP Top 10 Başlangıcı)
════════════════════════
𐀪 Author: Sadıkcan Tuluk
════════════════════════
ⴵ Time: Fri, 15 Aug 2025 13:39:17 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #payload #owasp #dvwa
Medium
Web Uygulama Güvenliği (OWASP, DVWA, Payloads)
OWASP Nedir ?
10 views
Daily Writeups
⤷ Title: The Ultimate Payload Checklist for XSS, SQLi, LFI, and SSTI
════════════════════════
𐀪 Author: Santhosh Adiga U
════════════════════════
ⴵ Time: Sun, 26 Oct 2025 21:29:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #bug_bounty #payload #penetration_testing
Medium
The Ultimate Payload Checklist for XSS, SQLi, LFI, and SSTI
A practical, hands-on checklist of advanced XSS, SQLi, Path Traversal, and Code Injection payloads designed to bypass WAFs and find…
36 views
Daily Writeups
⤷ Title: From Page to Payload: Turning Knowledge into Exploits the Right Way
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 03:08:40 GMT
════════════════════════
⌗ Tags: #payload #cybersecurity #exploit #ethical_hacking #penetration_testing
Medium
From Page to Payload: Turning Knowledge into Exploits the Right Way
How I Learned to Bridge the Gap Between Theory and Practice Without Breaking the Law
14 views
Daily Writeups
⤷ Title: Here’s How You Get Easily Hacked and Why It Never Shows
════════════════════════
𐀪 Author: Sam Writes Security
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 04:43:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #windows #pdf #payload #hacking
Medium
Here’s How You Get Easily Hacked and Why It Never Shows
The magic happens behind the scenes while you’re watching the show.
14 views
Daily Writeups
⤷ Title: Metasploit Framework Rehberi
════════════════════════
𐀪 Author: Halil Ibrahim Eroglu
════════════════════════
ⴵ Time: Sat, 06 Dec 2025 06:21:53 GMT
════════════════════════
⌗ Tags: #metasploit #pentesting #cybersecurity #vulnerability #payload
Medium
Metasploit Framework Rehberi
Metasploit, hem siber güvenlik uzmanları hem de ne yazık ki siber suçlular tarafından benimsenen bu güçlü platform, ofansif güvenlik…
26 views
Daily Writeups
⤷ Title: The Payload Masterclass: From “What Is It?” to “How to Hack It” (Ethically)
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Sun, 07 Dec 2025 09:37:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #payload #websec #cybersecurity #web_security
Medium
The Payload Masterclass: From “What Is It?” to “How to Hack It” (Ethically)
You’ve heard the term. Maybe you’ve seen it in a movie where a hacker types furiously and says, “Payload delivered.” But what does that…
30 views
Daily Writeups
⤷ Title: This Image Can Hack Your PC — What You Need to Know (Safe Explanation)
════════════════════════
𐀪 Author: Syed Muhammad Hatim Javaid
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 02:20:04 GMT
════════════════════════
⌗ Tags: #malware #payload #malicious #cybersecurity #ethical_hacking
Medium
This Image Can Hack Your PC — What You Need to Know (Safe Explanation)
Images are everywhere: social media, email, websites, messaging apps. They seem harmless — but in rare cases, specially crafted images can…
43 views
Daily Writeups
⤷ Title: CVE-2026-25544: Critical Payload CMS SQLi (CVSS 9.8) Exposes Admin Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 00:07:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #blind sqli #CVE_2026_25544 #database security #Drizzle ORM #Headless CMS #Next.js #Patch Alert #Payload CMS #sql injection #web development
Daily CyberSecurity
CVE-2026-25544: Critical Payload CMS SQLi (CVSS 9.8) Exposes Admin Tokens
Critical Payload CMS flaw CVE-2026-25544 (CVSS 9.8) allows SQL injection via JSON fields. Unauthenticated attackers can steal admin tokens. Update to v3.73.0.
13 views
Daily Writeups
⤷ Title: Evasion in Rust: Automate Your Stealth with the LazyDLLSideload Proxy Generator
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 07:39:54 +0000
════════════════════════
⌗ Tags: #Open Source Tool #DLL proxying #DLL Sideloading #dyncvoke #EDR evasion #LazyDLLSideload #Malware Development #payload embedding #red team tools #Rust #Tech News 2026 #windows_sys
Penetration Testing Tools
Evasion in Rust: Automate Your Stealth with the LazyDLLSideload Proxy Generator
LazyDLLSideload is a Rust-powered powerhouse for red teams. Automate DLL proxying, obfuscate strings, and bypass EDR with dynamic syscall execution.
29 views
Daily Writeups
⤷ Title: Password Hijack in the Modern Stack: Payload CMS Patches Critical 9.1 CVSS Reset Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 14:30:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backend Security #CVE_2026_34751 #Headless CMS #infosec #Next.js #password reset #Patch Alert #Payload CMS #React #TypeScript #Vulnerability #Web Security
Daily CyberSecurity
Password Hijack in the Modern Stack: Payload CMS Patches Critical 9.1 CVSS Reset Flaw
Payload CMS fixes a critical 9.1 CVSS flaw (CVE-2026-34751) in its password reset flow. Attackers could hijack accounts. Update to v3.79.1 immediately!
7 views
Daily Writeups
⤷ Title: Payload | TryHackMe
════════════════════════
𐀪 Author: Binish Alamgir
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 09:17:03 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #cybersecurity #payload #technology
Medium
Payload| TryHackMe
Payload| TryHackMe The SOC alert arrived at 03:14. No deployments were scheduled. No changes were logged. The ML inference server had been making outbound HTTPS connections to an unrecognised …
25 views