Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: AI Agents Don’t Need Passwords. They Need Identity.
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 02:32:16 GMT
════════════════════════
⌗ Tags: #ai #hacking #identity_security #cybersecurity #bug_bounty
Medium
AI Agents Don’t Need Passwords. They Need Identity.
Imagine this.
21 views
Daily Writeups
⤷ Title: From Scope to Payout: 9 Claude Code Plugins Worth a Hunter’s Terminal in 2026
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 02:01:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #tools #artificial_intelligence #bug_bounty #ethical_hacking
Medium
From Scope to Payout: 9 Claude Code Plugins Worth a Hunter’s Terminal in 2026
30-Second Version: A wave of security-specific Claude Code plugins shipped this year — marketplaces, MCP servers, and skill packs built…
24 views
Daily Writeups
⤷ Title: XBOW: THE FULL STORY
════════════════════════
𐀪 Author: Timsux Wales
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 02:16:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #offensive_security #xbow #autonomous_agent
Medium
XBOW: THE FULL STORY
So, How Did XBOW Actually Get Here? — Timsux Wales
41 views
Daily Writeups
⤷ Title: OhSINT — TryHackMe Walktrough
════════════════════════
𐀪 Author: Stephvannes Samuel Kevin
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 03:08:57 GMT
════════════════════════
⌗ Tags: #osint #tryhackme #cybersecurity #privacy #writeup
Medium
OhSINT — TryHackMe Walktrough
This is how, i got all information in one image.
37 views
Daily Writeups
⤷ Title: Beyond the Breach: Analyzing ShinyHunters Infrastructure, Communication Channels, and Dark Web…
════════════════════════
𐀪 Author: Sagar
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 03:20:52 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #threat_intelligence
Medium
Beyond the Breach: Analyzing ShinyHunters Infrastructure, Communication Channels, and Dark Web Assets
Using RST Cloud Threat Intelligence to Uncover Hidden Relationships Across ShinyHunters Malware, Infrastructure, and Threat Actor…
45 views
Daily Writeups
⤷ Title: Inspect HTML — A Beginner-Friendly picoCTF Web Exploitation Walkthrough
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 05:32:08 GMT
════════════════════════
⌗ Tags: #web_security #ctf #cybersecurity #hacking #bug_bounty
Medium
Inspect HTML — A Beginner-Friendly picoCTF Web Exploitation Walkthrough
Introduction
45 views
Daily Writeups
⤷ Title: Burp AT Isn’t an AI Scanner It’s a Pentesting Agent
════════════════════════
𐀪 Author: Nova
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 05:03:12 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #burp_at #cybersecurity #penetration_testing
Medium
Burp AT Isn’t an AI Scanner It’s a Pentesting Agent
Meta description: A hands-on exploration of Burp AT, including its tools, project context, skills, autonomy modes, new Effort control…
40 views
Daily Writeups
⤷ Title: PortSwigger Web Security Academy: All API Testing Labs Solved (Full Walkthrough)
════════════════════════
𐀪 Author: Blueorionn
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:00:08 GMT
════════════════════════
⌗ Tags: #portswigger #programming #ctf #bug_bounty #cybersecurity
Medium
PortSwigger Web Security Academy: All API Testing Labs Solved (Full Walkthrough)
The API Testing labs in PortSwigger Web Security Academy go beyond classic web vulnerabilities and teach you how to attack the hidden…
30 views
Daily Writeups
⤷ Title: Interceptor—TryHackMe Walkthrough | Backup File Leak, OTP Bypass & Command Injection via curl.
════════════════════════
𐀪 Author: A. AntorCSE404
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:55:25 GMT
════════════════════════
⌗ Tags: #programming #ctf #tryhackme #cybersecurity #hacking
Medium
Interceptor—TryHackMe Walkthrough | Backup File Leak, OTP Bypass & Command Injection via curl.
Source Disclosure → Auth Bypass → OS Command Injection
32 views
Daily Writeups
⤷ Title: Firewall Fundamentals: Firewall Types, Rule Components, and Hands On Windows and Linux Firewalls
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:41:46 GMT
════════════════════════
⌗ Tags: #tryhackme #network_security #infosec #cybersecurity #firewall
Medium
Firewall Fundamentals: Firewall Types, Rule Components, and Hands On Windows and Linux Firewalls
Introduction
26 views
Daily Writeups
⤷ Title: How Puffin Air-Gaps Threats While Keeping the Browser Fast
════════════════════════
𐀪 Author: Danny Lin
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:37:11 GMT
════════════════════════
⌗ Tags: #browser_security #cybersecurity #infosec #cloudmosa #ai_assisted_attacks
Medium
How Puffin Air-Gaps Threats While Keeping the Browser Fast
In December 1924, executives from the world's leading lamp makers — Osram, Philips, Tungsram, Tokyo Electric, Associated Electrical…
30 views
Daily Writeups
⤷ Title: Mountaineer — Nginx Off-by-Slash LFI + CUPP-Cracked KeePass to Root | TryHackMe
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:09:40 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #tryhackme #ethical_hacking #pentesting
Medium
Mountaineer — Nginx Off-by-Slash LFI + CUPP-Cracked KeePass to Root | TryHackMe
Mountaineer starts with a default Nginx page hiding a broken WordPress install, and the real way in is a misconfigured alias directive that…
34 views
Daily Writeups
⤷ Title: TryHackMe Defensive Security Intro Walkthrough
════════════════════════
𐀪 Author: 5um1t0x
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:08:10 GMT
════════════════════════
⌗ Tags: #ctf #blue_team #cybersecurity #tryhackme #soc_analyst
Medium
TryHackMe Defensive Security Intro Walkthrough
Introduction
41 views
Daily Writeups
⤷ Title: Hack The Box:MODULE 08 — SQL INJECTION FUNDAMENTALS
════════════════════════
𐀪 Author: Hassan
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:46:00 GMT
════════════════════════
⌗ Tags: #sql_injection_writeup #sql_injection #sql_fundamentals #hackthebox
Medium
Hack The Box:MODULE 08 — SQL INJECTION FUNDAMENTALS
From here you can access this room: https://academy.hackthebox.com/app/module/33
51 views
Daily Writeups
⤷ Title: Berlin Government Suffers Massive Ransomware Data Breach
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 07:07:32 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber Security #data breach #Germany #ransomware #Rhysida
Information Security News
Berlin Government Suffers Massive Ransomware Data Breach
Berlin’s steadfast refusal to capitulate to extortionists has culminated in the exposure of one of the most substantial German government data breaches in recent history. The Rhysida ransomw…
43 views
Daily Writeups
⤷ Title: September 2026 SAP Security Patch Day Fixes Critical Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 07:51:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_44756 #CVE_2026_58240 #CVE_2026_76969 #cybersecurity #SAP Security Patch Day
Daily CyberSecurity
September 2026 SAP Security Patch Day Fixes Critical Flaws
TL;DR On September 8, 2026, the software vendor released 19 new security notes and one update during its monthly release cycle. The September 2026 SAP Security Patch Day addresses severe vulnerabi…
31 views
Daily Writeups
⤷ Title: Microsoft Teams IT Support Impersonation Leads to Domain Takeover
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 07:12:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #IT support impersonation #Microsoft Teams #Microsoft Threat Intelligence #Node.js implant #Quick Assist #social engineering #WinRM lateral movement
Daily CyberSecurity
Microsoft Teams IT Support Impersonation Leads to Domain Takeover
At a glance Actor or group Unattributed; Microsoft tracks it as a campaign, no named actor Activity type Social engineering, remote-access abuse, hands-on-keyboard intrusion Targets Enterprise use…
26 views
Daily Writeups
⤷ Title: Chinese Actor Gambling Goblin Hijacks Brazilian Gov Sites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 06:21:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #Earth Berberoka #Gambling Goblin #Linux Malware #SEO Poisoning
Daily CyberSecurity
Chinese Actor Gambling Goblin Hijacks Brazilian Gov Sites
At a Glance Actor or group Suspected Gambling Goblin (linked to Earth Berberoka) Activity type SEO poisoning, reverse-proxy manipulation, credential theft Targets or victims Brazilian federal, sta…
20 views
Daily Writeups
⤷ Title: ASUS Patches Control Center Express and Armoury Crate Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:47:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Armoury Crate #ASUS #ASUS Control Center Express #CVE_2026_12962 #CVE_2026_19397 #Missing Authentication #NTLM hash theft
Daily CyberSecurity
ASUS Patches Control Center Express and Armoury Crate Flaws
ASUS released software updates for Control Center Express and Armoury Crate on September 8, 2026. The updates fix several security flaws. The most serious ASUS vulnerability, CVE-2026-19397, could…
21 views
Daily Writeups
⤷ Title: Public PoC Disclosed for ZcopyReaper Linux Vulnerability (CVE-2026-43502)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 08 Sep 2026 04:43:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_43502 #Linux Kernel #privilege escalation #Vulnerability #ZcopyReaper
Daily CyberSecurity
Public PoC Disclosed for ZcopyReaper Linux Vulnerability (CVE-2026-43502)
TL;DR Security researchers at NebuSec identified a high-severity local privilege escalation flaw in the Linux kernel. The details of the vulnerability and the proof-of-concept exploit code have be…
21 views