Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: mKingdom An Easy [Try Hack Me] Lab :
════════════════════════
𐀪 Author: Amrou bekhedda
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 22:30:49 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #cybersecurity #hacking #tryhackme
Medium
mKingdom An Easy [Try Hack Me] Lab :
Let’s have some fun with this easy try hack me lab :
23 views
Daily Writeups
⤷ Title: Finding a P1 in NASA: The Power of Google Dorking
════════════════════════
𐀪 Author: Khandaniyal
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 21:41:26 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty #nasa #google_dork
Medium
Finding a P1 in NASA: The Power of Google Dorking
The Discovery
15 views
Daily Writeups
⤷ Title: Why Every Scanner Missed This RCE: Reviving CVE-2020–7961 On A 7 Year old Instance of Liferay
════════════════════════
𐀪 Author: Phil
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 21:06:36 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #bug_bounty #hacking
Medium
Why Every Scanner Missed This RCE: Reviving CVE-2020–7961 On A 7 Year old Instance of Liferay
By yppip (HackerOne) & zer0_sec (HackerOne, bugcrowd)
13 views
Daily Writeups
⤷ Title: Cheese CTF (THM) Tryhackme WriteUp Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 22:38:28 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #ctf #ctf_writeup #tryhackme
Medium
Cheese CTF (THM) Tryhackme WriteUp Answer
Description : Inspired by the great cheese talk of THM!
14 views
Daily Writeups
⤷ Title: Hutch (Proving Grounds) Walkthrough: An Active Directory Attack Path
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 22:22:24 GMT
════════════════════════
⌗ Tags: #oscp #pentesting #hacking #cybersecurity
Medium
Hutch (Proving Grounds) Walkthrough: An Active Directory Attack Path
A deep dive into LDAP enumeration, GPO exploration, and LAPS exploitation for OSCP aspirants.
14 views
Daily Writeups
⤷ Title: Getting Started with the Stardust Shellcode Generator Template
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 21:24:26 GMT
════════════════════════
⌗ Tags: #hacking #hackthebox #penetration_testing #tryhackme #malware
Medium
Getting Started with the Stardust Shellcode Generator Template
Welcome to this new Medium post. In this article, I will introduce an amazing tool that allows you to generate shellcode directly from C++…
17 views
Daily Writeups
⤷ Title: Slack Bug Bounty — $1,750 Easy Bug
════════════════════════
𐀪 Author: Sirat Sami (analyz3r)
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 22:10:45 GMT
════════════════════════
⌗ Tags: #hackerone #infosec #bugbounty_writeup
Medium
Slack Bug Bounty — $1,750 Easy Bug
Hi Everyone.
My name is Sirat, I’m 25 years old, from Kurdistan. I do bug bounty hunting on the HackerOne platform, and today I want to…
11 views
Daily Writeups
⤷ Title: Clocky | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 22:48:49 GMT
════════════════════════
⌗ Tags: #tryhackme #mysql #linux #tryhackme_walkthrough #tryhackme_writeup
Medium
Clocky | TryHackMe | Walkthrough
Flag 1
12 views
Daily Writeups
⤷ Title: Day 17 : SOC L1 Alert Triage THM
════════════════════════
𐀪 Author: Cybersecurity with Jojo
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 22:43:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #tryhackme #security_operation_center #tryhackme_writeup
Medium
Day 17 : SOC L1 Alert Triage THM
Today I’m diving into something new! As I already finished the Jr. Pentester on TryHackMe, I actually asked myself why not diving into a…
25 views
Daily Writeups
⤷ Title: Exploitation of Grotesque 3
════════════════════════
𐀪 Author: Morontowumi Akinbogun
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 21:17:59 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #vulnhub_walkthrough #vulnhub
Medium
Exploitation of Grotesque 3
I started with host discovery using nmap and I I found the ip address at 192.168.1.106
26 views
Daily Writeups
⤷ Title: Exploitation of Hacksudo 1
════════════════════════
𐀪 Author: Morontowumi Akinbogun
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 21:17:22 GMT
════════════════════════
⌗ Tags: #walthrough #vulnhub_walkthrough #vulnhub
Medium
Exploitation of Hacksudo 1
I started with host discovery using nmap and I I found the ip address at 192.168.1.200
28 views
Daily Writeups
⤷ Title: Eyes on the Front: Iranian Threat Actors Weaponize IP Cameras in Middle East Conflict
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 00:29:52 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #Battle Damage Assessment #Check Point Research #Cyber Reconnaissance #cybersecurity #Dahua Security #Hikvision Vulnerabilities #IP cameras #Iranian Cyber Threat #Kinetic Warfare #Middle East Security
Daily CyberSecurity
Eyes on the Front: Iranian Threat Actors Weaponize IP Cameras in Middle East Conflict
A new Check Point Research report reveals how Iranian-nexus threat actors compromise IP cameras in the Middle East for real-time missile reconnaissance.
31 views
Daily Writeups
⤷ Title: Stream Hijacked: Critical Zero-Click Command Injection Flaw Exposed in AVideo-Encoder
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 00:22:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AVideo_Encoder #Command Injection #CVE_2026_29058 #cybersecurity #infosec #Open Source Security #Patch Alert #unauthenticated RCE #Vulnerability #YouPHPTube
Daily CyberSecurity
Stream Hijacked: Critical Zero-Click Command Injection Flaw Exposed in AVideo-Encoder
A critical 9.8 CVSS flaw (CVE-2026-29058) in AVideo-Encoder allows unauthenticated remote attackers to execute arbitrary system commands. Patch now.
24 views
Daily Writeups
⤷ Title: Cracking the Cloud’s Crypto: Unauthenticated Bypass Flaws Found in Amazon’s AWS-LC Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 00:18:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon Web Services #AWS_LC #Cloud Security #cryptography #CVE_2026_3336 #CVE_2026_3337 #CVE_2026_3338 #infosec #Patch Alert #Vulnerability
Daily CyberSecurity
Cracking the Cloud's Crypto: Unauthenticated Bypass Flaws Found in Amazon's AWS-LC Library
Researchers discovered three major flaws in Amazon’s AWS-LC cryptographic library, allowing hackers to bypass digital signature validation. Update now.
12 views
Daily Writeups
⤷ Title: Signed Malware Masquerading as Workplace Apps Deploys Persistent Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 00:13:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #EV Certificate Phishing #infosec #malware #MeshAgent #Microsoft Defender #RMM Backdoors #ScreenConnect #Tactical RMM #threat intelligence
Daily CyberSecurity
Signed Malware Masquerading as Workplace Apps Deploys Persistent Backdoors
Microsoft Defender exposes a new phishing campaign using EV certificates and fake Teams invites to silently deploy RMM backdoors on corporate networks.
16 views
Daily Writeups
⤷ Title: Unmasking OCRFix: The New Russian Botnet Hiding its C2 Infrastructure in the Blockchain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 00:07:58 +0000
════════════════════════
⌗ Tags: #Malware #Blockchain security #ClickFix #cybersecurity #EtherHiding #infosec #OCRFix Botnet #Russian Malware #smart contracts #threat intelligence #VBScript Malware
Daily CyberSecurity
Unmasking OCRFix: The New Russian Botnet Hiding its C2 Infrastructure in the Blockchain
Cybersecurity researchers uncover OCRFix, a Russian-linked botnet using EtherHiding and fake CAPTCHAs to mask its C2 servers in blockchain smart contracts.
14 views
Daily Writeups
⤷ Title: Malicious PHP Packages Found Hidden in Laravel Ecosystem
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 00:01:20 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #infosec #lara_helper #Laravel Security #Packagist #PHP Development #rat #Remote Access Trojan #Socket Threat Research #supply chain attack
Daily CyberSecurity
Malicious PHP Packages Found Hidden in Laravel Ecosystem
Socket researchers uncover a Packagist supply chain attack where fake Laravel utility packages secretly install a persistent Remote Access Trojan (RAT).
21 views
Daily Writeups
⤷ Title: Guía de XSS Fundamentals: Vulnerabilidades, Payloads y Bypass de WAF/CSP
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #xss_attack #hacking #technology
Medium
Guía de XSS Fundamentals: Vulnerabilidades, Payloads y Bypass de WAF/CSP
Domina el Cross-site scripting: estrategias de inyección, vectores de ataque, evasión de WAF y técnicas avanzadas de bypass CSP.
25 views
Daily Writeups
⤷ Title: SSO Misconfiguration Leading to Privilege Escalation Lead to Full Organization Takeover + SSO Email…
════════════════════════
𐀪 Author: ali alhassoun
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 23:41:29 GMT
════════════════════════
⌗ Tags: #sso #privilege_escalation #bug_bounty #cybersecurity #account_takeover
Medium
SSO Misconfiguration Leading to Privilege Escalation Lead to Full Organization Takeover + SSO Email…
24 views
Daily Writeups
⤷ Title: Malware Development with NIM — InfoStealers 101
════════════════════════
𐀪 Author: Edgar Huemac Sanchez Hernandez
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 00:49:46 GMT
════════════════════════
⌗ Tags: #coding #hacking #cybersecurity #malware #software_development
Medium
Malware Development with NIM — InfoStealers 101
Hi there! Nice to see you again. Let’s get to it; we’ve been dancing around fun maldev things & concepts for a few blogs now, mostly theory…
23 views