Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Firebase Storage Bucket Recon
════════════════════════
𐀪 Author: AbhirupKonwar
════════════════════════
ⴵ Time: Sun, 27 Jul 2025 14:51:03 GMT
════════════════════════
⌗ Tags: #ethical_hacking #pentesting #bug_bounty_tips #firebase #attack_surface_management
Medium
Firebase Storage Bucket Recon
Extremely powerful dorks that attackers love
67 views
Daily Writeups
⤷ Title: The Silent Risk in Your ICS: Why S7 Protocol Needs Security Attention
════════════════════════
𐀪 Author: Azim Uddin
════════════════════════
ⴵ Time: Sat, 02 Aug 2025 14:15:23 GMT
════════════════════════
⌗ Tags: #censys #attack_surface_management #cybersecurity #blue_team #red_team
Medium
The Silent Risk in Your ICS: Why S7 Protocol Needs Security Attention
The ASM Perspective on Industrial Security…
23 views
Daily Writeups
⤷ Title: Mapping Threat Infrastructures Identified Through Criminal IP’s Top 10 Search Keywords
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 02:39:01 GMT
════════════════════════
⌗ Tags: #top_10 #threat_intelligence #criminal_ip_top_10 #cybersecurity #attack_surface_management
Medium
Mapping Threat Infrastructures Identified Through Criminal IP’s Top 10 Search Keywords
The Criminal IP search engine, used in over 180 countries worldwide, collects a vast amount of search data every day.
What are the most…
16 views
Daily Writeups
⤷ Title: Affordable but Vulnerable? The Cybersecurity Side of CMORE HMI
════════════════════════
𐀪 Author: Azim Uddin
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 07:02:30 GMT
════════════════════════
⌗ Tags: #ot_security #attack_surface_management #censys #cybersecurity #defense
Medium
Affordable but Vulnerable? The Cybersecurity Side of CMORE HMI
I found many endpoints open, insecure and can change the settings
14 views
Daily Writeups
⤷ Title: UrlScan Dorks for endpoints hiding behind ASN and Subnet
════════════════════════
𐀪 Author: AbhirupKonwar
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 08:26:24 GMT
════════════════════════
⌗ Tags: #attack_surface_management #bug_bounty #ethical_hacking #pentesting #bug_bounty_tips
Medium
UrlScan Dorks for endpoints hiding behind ASN and Subnet
Hidden endpoint discovery techniques via Urlscan.io
31 views
Daily Writeups
⤷ Title: How Criminal IP is Securing the Expanding Attack Surface — Before It’s Too Late
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Thu, 25 Sep 2025 00:59:27 GMT
════════════════════════
⌗ Tags: #attack_surface_management #attack_surface #white_papers #threat_intelligence #cybersecurity
Medium
How Criminal IP is Securing the Expanding Attack Surface — Before It’s Too Late
In today’s fast-moving cyber threat landscape, traditional defenses are no longer enough.
AI SPERA’s Criminal IP, developed out of Korea…
35 views
Daily Writeups
⤷ Title: I Ran an EASM Sweep — The Findings Terrified Me (And They Should Terrify Every Engineering Leader)
════════════════════════
𐀪 Author: Azim Uddin
════════════════════════
ⴵ Time: Sun, 05 Oct 2025 11:28:41 GMT
════════════════════════
⌗ Tags: #blue_team #attack_surface_management #cybersecurity #red_team #engineering
Medium
I Ran an EASM Sweep — The Findings Terrified Me (And They Should Terrify Every Engineering Leader)
“You can’t defend what you can’t see.”
12 views
Daily Writeups
⤷ Title: How to Reduce Your MTTR by Focusing on Externally Exploitable Vulnerabilities
════════════════════════
𐀪 Author: Cytrusst
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 11:40:01 GMT
════════════════════════
⌗ Tags: #vulnerability_management #cybersecurity #attack_surface #cytrusst #attack_surface_management
Medium
How to Reduce Your MTTR by Focusing on Externally Exploitable Vulnerabilities
The MTTR Trap: Why Being Busy Doesn’t Make You Secure
13 views
Daily Writeups
⤷ Title: Attack Surface Management (ASM) — The Foundation of Modern Cyber Resilience
════════════════════════
𐀪 Author: Jackdavis Iap
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 09:54:28 GMT
════════════════════════
⌗ Tags: #attack_surface_management #cybersecurity
Medium
Attack Surface Management (ASM) — The Foundation of Modern Cyber Resilience
Understanding the Expanding Attack Surface
18 views
Daily Writeups
⤷ Title: Frogy: The New Recon Tool That Maps and Prioritizes Your Entire Attack Surface
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 04:03:42 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Asset Discovery #Attack Surface Management #bug bounty #cybersecurity #Frogy 2.0 #Pentesting #reconnaissance
Penetration Testing Tools
Frogy: The New Recon Tool That Maps and Prioritizes Your Entire Attack Surface
Frogy 2.0 is an automated ASM tool that maps subdomains, verifies live assets, and smartly prioritizes targets using a composite scoring system for red teams.
33 views
Daily Writeups
⤷ Title: Turning Visibility Into Defense: Connecting the Attack Surface to the Detection Surface
════════════════════════
𐀪 Author: Jon Schipp
════════════════════════
ⴵ Time: Wed, 26 Nov 2025 03:50:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #attack_surface #detection_engineering #threat_detection #attack_surface_management
Medium
Turning Visibility Into Defense: Connecting the Attack Surface to the Detection Surface
First published on jonschipp.com.
14 views
Daily Writeups
⤷ Title: Attack Surface Management with AI: continuously discovering shadow assets, APIs, and misconfigs
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Sun, 07 Dec 2025 01:08:16 GMT
════════════════════════
⌗ Tags: #attack_surface_management #hacking #ai #cybersecurity #programming
Medium
Attack Surface Management with AI: continuously discovering shadow assets, APIs, and misconfigs
Attack Surface Management (ASM) is about one simple idea: you cannot protect what you cannot see. AI makes this much stronger by…
16 views
Daily Writeups
⤷ Title: GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 02:29:13 GMT
════════════════════════
⌗ Tags: #attack_surface_management #ssrf #cve_2021_39935 #gitlab #threat_intelligence
Medium
GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
In early February 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2021–39935, a Server-Side Request…
27 views
Daily Writeups
⤷ Title: What Is A Subdomain And How To Perform Subdomain Enumaration?
════════════════════════
𐀪 Author: Kutay Söker
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 20:22:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_penetration_testing #attack_surface_management #subdomains_enumeration #penetration_testing
Medium
What Is A Subdomain And How To Perform Subdomain Enumaration?
Hi! Today we will talk about domains, subdomains and subdomain enumaration. If want to understand what the subdmains are we have to get to…
26 views
Daily Writeups
⤷ Title: 9 Powerful Attack Surface Management Checks Before a Pentest
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 10:18:16 GMT
════════════════════════
⌗ Tags: #penetration_testing #appsec #cloud_security #attack_surface_management #cybersecurity
Medium
9 Powerful Attack Surface Management Checks Before a Pentest
Modern attackers don’t “start hacking” when they find a vulnerability. They start earlier — by building a map of everything you expose to…
42 views
Daily Writeups
⤷ Title: Attack Surface Drift Between Pentests
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 09:10:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #cloud_security #attack_surface_management #cybersecurity #api_security
Medium
Attack Surface Drift Between Pentests
Attack Surface Drift: Why Your Security Posture Changes Faster Than Your Last Pentest
11 views
Daily Writeups
⤷ Title: Attack Surface Management (ASM): Kendi Varlıklarını Bir Hacker Gibi İzle
════════════════════════
𐀪 Author: Fatih UYSAL
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 14:12:11 GMT
════════════════════════
⌗ Tags: #web_app_security #pentesting #bug_bounty #cybersecurity #attack_surface_management
Medium
Attack Surface Management (ASM): Kendi Varlıklarını Bir Hacker Gibi İzle
Gölge BT’den Subdomain Takeover’a: Görünmeyeni Yönetmek ve Korumak
17 views
Daily Writeups
⤷ Title: VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:20:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Attack Surface Management #Cisco Catalyst Zero Day #CVE_2026_20182 #NGINX CVE_2026_42945 #Probllama CVE_2024_37032 #ProFTPD SQL Injection #threat intelligence 2026 #UAT_8616 #VulnCheck Report #WordPress Security
Penetration Testing Tools
VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
A constellation of severe vulnerabilities sweeping across ubiquitous server frameworks and third-party extensions has emerged as the focal
16 views
Daily Writeups
⤷ Title: Attackers Already Have a Map of Your Network. Do You?
════════════════════════
𐀪 Author: Himanshu Dhiman
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 15:46:36 GMT
════════════════════════
⌗ Tags: #infosec #attack_surface_management #cloud_security #cybersecurity #vulnerability_management
Medium
Attackers Already Have a Map of Your Network. Do You?
Attack Surface Management is the discipline of seeing your company the way the internet already sees it — and closing the gap before…
11 views
Daily Writeups
⤷ Title: Reconnaissance: The Attack You Don’t See Coming — and the Defence You’re Not Building
════════════════════════
𐀪 Author: Rubakrishnawork
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 11:47:34 GMT
════════════════════════
⌗ Tags: #osint #penetration_testing #cybersecurity #reconnaissance #attack_surface_management
Medium
Reconnaissance: The Attack You Don’t See Coming — and the Defence You’re Not Building
How adversaries map your organization before you know they’re watching — and how defenders can flip the script
13 views