Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: Day 13: Hacking the Human — The Psychology of Social Engineering and Phishing
════════════════════════
𐀪 Author: Ndu
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 18:48:14 GMT
════════════════════════
⌗ Tags: #social_engineering #ethical_hacking #ndu202500361 #networking #cybersecurity
Medium
Day 13: Hacking the Human — The Psychology of Social Engineering and Phishing
Day 13: Cybersecurity Mastery series
22 views
Daily Writeups
⤷ Title: How I Found 2 Path Traversal CVEs in PraisonAI Using AI
════════════════════════
𐀪 Author: Himanshu Gupta
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 18:27:53 GMT
════════════════════════
⌗ Tags: #ethical_hacking #automation #education #cybersecurity #artificial_intelligence
Medium
How I Found 2 Path Traversal CVEs in PraisonAI Using AI
A beginner-friendly breakdown of two real vulnerabilities and how AI helped uncover them through source-to-sink analysis.
32 views
Daily Writeups
⤷ Title: SQL INJECTION PART 1
════════════════════════
𐀪 Author: Anubhav_bora
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 18:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #web_penetration_testing #sql_injection
Medium
SQL INJECTION PART 1
Your App Is Asking the Database Questions. What If Someone Changes the Question?
42 views
Daily Writeups
⤷ Title: Stop Guessing XSS Payloads
════════════════════════
𐀪 Author: Marduk I Am
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 20:24:00 GMT
════════════════════════
⌗ Tags: #cross_site_scripting #web_security #ethical_hacking #cybersecurity #bug_bounty
Medium
Stop Guessing XSS Payloads
Identify Context in 3 Steps
35 views
Daily Writeups
⤷ Title: Water Bottle Tryhackme Writeup
════════════════════════
𐀪 Author: Jawstar
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 19:15:50 GMT
════════════════════════
⌗ Tags: #tryhackme #osint_challenge #bug_bounty #tryhackme_walkthrough #osint
Medium
Water Bottle Tryhackme Writeup
Author : Jawstar
35 views
Daily Writeups
⤷ Title: CVE-2026–23398: PoC — A NULL Pointer in ICMP Tag Validation, and Why “One Packet” Is Never the…
════════════════════════
𐀪 Author: KeyboardSamurai
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 19:09:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #exploit #poc #linux #hacking
Medium
CVE-2026–23398: PoC — A NULL Pointer in ICMP Tag Validation, and Why “One Packet” Is Never the…
CVE-2026–23398 is a remote denial-of-service in the Linux kernel IPv4 ICMP path: amissing NULL check in icmp_tag_validation() allows a…
32 views
Daily Writeups
⤷ Title: Understanding Dark Web AI Scams and Emerging Online Risks
════════════════════════
𐀪 Author: Tor BBB
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 19:12:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #osint #darkweb
Medium
Understanding Dark Web AI Scams and Emerging Online Risks
Artificial intelligence is transforming the internet, but it is also introducing new forms of risk. One growing concern is the rise of dark…
31 views
Daily Writeups
⤷ Title: How I Became an Organization Owner via Invite Manipulation (Privilege
Escalation)
════════════════════════
𐀪 Author: Ahmed Mahmoud
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 20:43:49 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #privilege_escalation #cybersecurity #penetration_testing
Medium
How I Became an Organization Owner via Invite Manipulation (Privilege
Escalation)
“سُبْحَانَكَ لا عِلْمَ لَنَا إِلَّا مَا عَلَّمْتَنَا إِنَّكَ أَنْتَ الْعَلِيمُ الْحَكِيمُ”
40 views
Daily Writeups
⤷ Title: Pentester Labs Recon 00 write up
════════════════════════
𐀪 Author: Robert Nyinge
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 19:31:38 GMT
════════════════════════
⌗ Tags: #pentester_labs #pentesting #recon #reconnaissance
Medium
Pentester Labs Recon 00 write up
Hello hackers, this is a write-up for the Recon series on Pentester Lab, Recon 00
40 views
Daily Writeups
⤷ Title: How I Discovered a Blind SQL Injection in a Private program
════════════════════════
𐀪 Author: mrx_w_
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 22:09:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup #hackerone #hacking #bugcrowd
Medium
How I Discovered a Blind SQL Injection in a Private program
Hi, I’m mrx_w_ (Adem Ziane Berroudja), a bug bounty hunter on Bugcrowd. You can find me on Twitter and LinkedIn under mrx_w_. In this…
35 views
Daily Writeups
⤷ Title: Tryhackme Write-up: Corp Website (Romance and Co) 2026
════════════════════════
𐀪 Author: Day0x0f
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 21:25:12 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #bug_bounty #privilege_escalation #web_app_pentesting #ctf_writeup
Medium
Tryhackme Write-up: Corp Website (Romance and Co) 2026
Challenge: Corp Website Category: Web Difficulty: Medium
32 views
Daily Writeups
⤷ Title: The Helpful Internal Adversary: How AI threatens your data
════════════════════════
𐀪 Author: Nigel Kennis
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 22:40:22 GMT
════════════════════════
⌗ Tags: #web_exploitation #account_takeover #penetration_testing #hacking #idor_vulnerability
Medium
The Helpful Internal Adversary
How AI threatens your data
31 views
Daily Writeups
⤷ Title: Why TTX Should Be Your Worst Nightmare - WiCyS 2026 (Women in Cybersecurity) Annual Conference …
════════════════════════
𐀪 Author: Meera Tamboli
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 22:03:33 GMT
════════════════════════
⌗ Tags: #wicys #ai #cybersecurity #infosec #incident_response
Medium
Why TTX Should Be Your Worst Nightmare - WiCyS 2026 (Women in Cybersecurity) Annual Conference …
After attending conferences, I like to take notes and share the talks that stood out to me. This one was from WiCyS 2026 (Women in…
36 views
Daily Writeups
⤷ Title: Remote | HackTheBox | Walthrough | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 23:11:09 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #ethical_hacking #tech #hacking
Medium
Remote | HackTheBox | Walthrough | OSCP Preparation
Start off by setting our target machine’s IP as an environment variable ($target): this saves us having to constantly input the IP.
29 views
Daily Writeups
⤷ Title: Part 7: The AI under the hood and building trust in it’s automation
════════════════════════
𐀪 Author: Aparna Ash Himmatramka
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 00:56:47 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #application_security #ai #security
Medium
Part 7: The AI under the hood and building trust in it’s automation
Part 7 out of 8 of the Assisted Continuous Assurance series — rethinking AppSec from first principles
26 views
Daily Writeups
⤷ Title: The Helpful Internal Adversary
════════════════════════
𐀪 Author: Nigel Kennis
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 22:40:22 GMT
════════════════════════
⌗ Tags: #web_exploitation #account_takeover #penetration_testing #hacking #idor_vulnerability
Medium
The Helpful Internal Adversary
How AI threatens your data
29 views
Daily Writeups
⤷ Title: HackTheBox: Tenten — My First Taste of CTFs
════════════════════════
𐀪 Author: Divya
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 23:01:02 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #ethical_hacking #ctf #cybersecurity
Medium
HackTheBox: Tenten — My First Taste of CTFs
A beginner-friendly walkthrough of the Tenten machine, featuring WordPress enumeration, steganography, and privilege escalation
28 views
Daily Writeups
⤷ Title: Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:52:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Code Integrity #CVE_2026_5173 #DevOps Security #gitlab #GitLab CE #GitLab EE #graphql #infosec #privilege escalation #security update #terraform
Daily CyberSecurity
Security Alert: GitLab Issues Patch for High-Severity Vulnerabilities Across CE and EE
GitLab releases critical patches (18.10.3+) for WebSocket flaws, Terraform DoS, and unauthorized privilege demotions. Update your self-managed instances!
29 views
Daily Writeups
⤷ Title: SonicWall Issues Critical Patch for SMA 1000 Series to Stop SQL Injection and MFA Bypasses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:44:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4112 #CVE_2026_4114 #CVE_2026_4116 #cybersecurity #infosec #MFA Bypass #privilege escalation #SMA 1000 #SonicWall #sql injection #TOTP #Unicode Encoding
Daily CyberSecurity
SonicWall Issues Critical Patch for SMA 1000 Series to Stop SQL Injection and MFA Bypasses
SonicWall patches critical SMA 1000 flaws, including a 7.2 SQL injection for privilege escalation and Unicode-based MFA bypasses. Secure your VPN—update now!
22 views
Daily Writeups
⤷ Title: New Phishing Campaign Abuses GitHub to Target South Korea
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 02:01:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyberespionage #FortiGuard Labs #Github C2 #infosec #LNK malware #LotL #Mirae Asset 3.0 #phishing #powershell #south korea #VBScript #XenoRAT
Daily CyberSecurity
New Phishing Campaign Abuses GitHub to Target South Korea
FortiGuard Labs unmasks a South Korean espionage wave abusing the GitHub API for C2 and using LNK files to stay invisible. Protect your network from LotL.
16 views