Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: Getting a Process Handle Without Calling OpenProcess
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 21:01:34 GMT
════════════════════════
⌗ Tags: #infosec #hacking #pentesting #malware #cybersecurity
Medium
Getting a Process Handle Without Calling OpenProcess
Welcome to this new Medium post, in this one we will see how to obtain a valid process handle without ever calling OpenProcess. We will use…
16 views
Daily Writeups
⤷ Title: Hands-On Lab: Hardening Kali Linux Operating System & Managing Network Services
════════════════════════
𐀪 Author: Praisejah
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 21:14:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #technology #system_hardening #linux
Medium
Hands-On Lab: Hardening Kali Linux Operating System & Managing Network Services
A practical walkthrough on configuring UFW firewall rules, auditing sockets, restricting privileges, and disabling unneeded daemons to…
16 views
Daily Writeups
⤷ Title: SSRF & Git ext:: [HTB Editorial Walkthrough]
════════════════════════
𐀪 Author: Pawut Jingjit
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 21:43:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ctf #hackthebox #ssrf
Medium
SSRF & Git ext:: [HTB Editorial Walkthrough]
Editorial is an easy difficulty Linux machine that features a publishing web application vulnerable to Server-Side Request Forgery (SSRF)…
25 views
Daily Writeups
⤷ Title: TryHackMe ADCS: NTLM Relay Walkthrough
════════════════════════
𐀪 Author: Rich
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 21:34:52 GMT
════════════════════════
⌗ Tags: #active_directory #tryhackme #tryhackme_walkthrough #active_directory_security #tryhackme_writeup
Medium
TryHackMe ADCS: NTLM Relay Walkthrough
TL;DR Walkthrough of the TryHackMe ADCS: NTLM Relay Walkthrough network room.
24 views
Daily Writeups
⤷ Title: TryHackMe: Library Room — Step-by-Step Walkthrough
════════════════════════
𐀪 Author: betty yazar
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 20:56:51 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #ctf #tryhackme_walkthrough #tryhackme
Medium
TryHackMe: Library Room — Step-by-Step Walkthrough
Overview
26 views
Daily Writeups
⤷ Title: Hack The Box ‘Layover’: Write up
════════════════════════
𐀪 Author: Jaisurya Badathala
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 20:15:17 GMT
════════════════════════
⌗ Tags: #jaisuryabadathala #hackthebox_writeup #layover
Medium
Hack The Box ‘Layover’: Write up
Badathala Jaisurya
40 views
Daily Writeups
⤷ Title: What a Cyber Security intern Learns in the first Month
════════════════════════
𐀪 Author: Alimuntazir
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 21:52:07 GMT
════════════════════════
⌗ Tags: #information_security #career_advice #cybersecurity #internships #ethical_hacking
Medium
What a Cyber Security intern Learns in the first Month
Not the tools but The habits that matter , from BS Cyber Security student’s first month on the job.
31 views
Daily Writeups
⤷ Title: Hack Smarter Labs : Ascension
════════════════════════
𐀪 Author: Andypoon
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 21:35:40 GMT
════════════════════════
⌗ Tags: #oscp #hack_smarter #ascension #ethical_hacking
Medium
Hack Smarter Labs : Ascension
Ascension is a fairly easy Linux based CTF hosted on hacksmarter.org, its author is Ryan Yager. Unlike other ctf’s this one has 6 flags…
39 views
Daily Writeups
⤷ Title: Dutch ShinyHunters Suspect Investigated for Trying to Arrange 2 Murders
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 22:08:50 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Security #Cybersecurity #Dutch Police #Neo Security #Netherlands #Odido #Pepijn van der Stap #ShinyHunters
Hackread
Dutch ShinyHunters Suspect Investigated for Trying to Arrange 2 Murders
Dutch police say a ShinyHunters suspect is also suspected of trying to arrange two murders abroad, a case separate from the cybercrime investigation.
36 views
Daily Writeups
⤷ Title: Podman Flaw CVE-2026-94603 Lets Container Images Disable Sandboxing
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 01:53:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #CVE_2026_94603 #Linux #OCI images #Podman #Podman vulnerability #Sandbox Bypass
Daily CyberSecurity
Podman Flaw CVE-2026-94603 Lets Container Images Disable Sandboxing
TL;DR A Podman vulnerability, CVE-2026-94603, rated CVSS 10.0, lets a container image switch off nearly all sandboxing when started with podman run. It even overrides restrictions the user asked f…
28 views
Daily Writeups
⤷ Title: JupyterLab Desktop Flaw CVE-2026-102530 Turns a Malicious Server URL Into Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 01:46:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_102530 #Electron #JupyterLab #JupyterLab Desktop #JupyterLab Desktop vulnerability #Remote Code Execution
Daily CyberSecurity
JupyterLab Desktop Flaw CVE-2026-102530 Turns a Malicious Server URL Into Code Execution
TL;DR A JupyterLab Desktop vulnerability, CVE-2026-102530, rated CVSS 9.4, lets a malicious server URL run code on a user’s computer. The app displayed remote server URLs without sanitizing …
21 views
Daily Writeups
⤷ Title: When a Production Backend Has No Authentication: Internal Disclosure and Unauthenticated State…
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 01:45:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #web_hacking #bug_bounty #ethical_hacking
Medium
When a Production Backend Has No Authentication: Internal Disclosure and Unauthenticated State Changes
Sometimes the most interesting API vulnerabilities aren’t hidden behind complicated authorization logic.
18 views
Daily Writeups
⤷ Title: Explain This: Dependabot’s Cooldown Is a Supply Chain Control, Not a Delay
════════════════════════
𐀪 Author: Karla Ortiz-Flores
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 01:02:02 GMT
════════════════════════
⌗ Tags: #application_security #explain_this #supply_chain
Medium
Explain This: Dependabot’s Cooldown Is a Supply Chain Control, Not a Delay
Dependabot’s three-day pause shows why dependency automation now needs timing controls, evidence, and exception paths. Explain This: Dependabot’s Cooldown Is a Supply Chain Control, Not a …
20 views
Daily Writeups
⤷ Title: How to Choose the Right Penetration Testing Services for Your Business
════════════════════════
𐀪 Author: Accorianglobal
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 00:40:43 GMT
════════════════════════
⌗ Tags: #penetration_testing #pen_testing_service
Medium
How to Choose the Right Penetration Testing Services for Your Business
Cyberattacks are becoming more sophisticated, and organizations can no longer rely solely on firewalls, endpoint protection, or…
25 views
Daily Writeups
⤷ Title: The Rise and Fall of Twitter (X)
════════════════════════
𐀪 Author: Penji
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 01:21:27 GMT
════════════════════════
⌗ Tags: #twitter #branding #xs #graphic_design_services
Medium
The Rise and Fall of Twitter (X)
The late ’00s to early ’10s witnessed the birth of social media platforms. YouTube, Facebook, and Instagram are some of the most notable…
32 views
Daily Writeups
⤷ Title: HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 03:36:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access point security #CVE_2026_76721 #CVE_2026_76722 #HPE #HPE Instant ON vulnerabilities #HPE Networking #Instant On #Remote Code Execution
Daily CyberSecurity
HPE Patches 18 Instant ON Access Point Vulnerabilities, Five Rated Critical
TL;DR HPE Networking disclosed 18 HPE Instant ON vulnerabilities on September 29, 2026, in its Instant ON access points. Five are rated Critical, and the two worst score CVSS 9.8 with unauthentica…
24 views
Daily Writeups
⤷ Title: WatchGuard Patches 14 Fireware OS Vulnerabilities, Including CVSS 9.2 RCE
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 02:38:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_86131 #Firebox #Fireware OS #Fireware OS vulnerabilities #Remote Code Execution #VPN security #WatchGuard
Daily CyberSecurity
WatchGuard Patches 14 Fireware OS Vulnerabilities, Including CVSS 9.2 RCE
TL;DR WatchGuard disclosed 14 Fireware OS vulnerabilities on September 29, 2026, affecting its Firebox firewalls. The worst, CVE-2026-86131, scores CVSS 9.2 and allows remote code execution in cer…
20 views
Daily Writeups
⤷ Title: Branch Target Reuse Spectre-v2 Attack: Full Details and PoC Code Released
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 02:10:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Branch Target Reuse #CVE_2026_64507 #CVE_2026_64508 #Linux Kernel #side_channel attack #Spectre_v2 #VUSec
Daily CyberSecurity
Branch Target Reuse Spectre-v2 Attack: Full Details and PoC Code Released
TL;DR Researchers at VUSec have published full details and proof-of-concept code for Branch Target Reuse (BTR), a new Spectre-v2 attack on just-in-time (JIT) compilers. Their end-to-end exploit le…
21 views
Daily Writeups
⤷ Title: GeoServer Cloud Fixes CVSS 10 GitHub Actions Flaw That Exposed Repository Secrets
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 02:02:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD security #GeoServer #GeoServer Cloud #GeoServer Cloud vulnerability #GitHub Actions #pull_request_target #Supply Chain Security
Daily CyberSecurity
GeoServer Cloud Fixes CVSS 10 GitHub Actions Flaw That Exposed Repository Secrets
TL;DR GeoServer maintainers disclosed a CVSS 10 GeoServer Cloud vulnerability in a GitHub Actions workflow. It could have let an outside contributor run code on the build runner and steal reposito…
24 views
Daily Writeups
⤷ Title: nmap 心得筆記
════════════════════════
𐀪 Author: Ken Yu
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 03:14:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #scanning #hacking #networking #nmap
Medium
nmap 心得筆記
什麼是 nmap？
23 views