Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: DirBuster: Uncovering Hidden Web Directories
════════════════════════
𐀪 Author: Sarthak
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 20:10:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #penetration_testing #kali_linux #dirbuster
Medium
DirBuster: Uncovering Hidden Web Directories
In the world of web penetration testing, what you can’t see can definitely hurt you — or provide the breakthrough you need. DirBuster is a…
27 views
Daily Writeups
⤷ Title: Excessive Agency: When AI Gets Too Much Power
════════════════════════
𐀪 Author: Will Giles | Cybersecurity
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 20:10:03 GMT
════════════════════════
⌗ Tags: #ai_security #llm #ai #cybersecurity #penetration_testing
Medium
Excessive Agency: When AI Gets Too Much Power
A hands-on look at how over-permissioned LLM integrations lead to arbitrary file read, privilege escalation, and prompt injection.
16 views
Daily Writeups
⤷ Title: Hacker Fest : 2019
════════════════════════
𐀪 Author: Prathamkusanal
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 19:52:03 GMT
════════════════════════
⌗ Tags: #vulnhub #walkthrough #hacker_fest
Medium
Hacker Fest : 2019
Introduction
18 views
Daily Writeups
⤷ Title: Hacker Fest 2019 :-
════════════════════════
𐀪 Author: Sanmitmane
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 19:38:52 GMT
════════════════════════
⌗ Tags: #walkthrough #hacker_fest #vulnhub
Medium
Hacker Fest 2019 :-
Introduction
16 views
Daily Writeups
⤷ Title: My Week 4 Takeaways from “Begin Ethical Hacking with Python” by Sanjib Sinha(Part IV)
════════════════════════
𐀪 Author: Kalkidan
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 20:20:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #bookreview_blog #ethical_hacking #weeklytakeaways #python
Medium
My Week 4 Takeaways from “Begin Ethical Hacking with Python” by Sanjib Sinha(Part IV)
While learning ethical hacking, understanding how Python handles text, errors, and reusable code becomes extremely important… In these…
14 views
Daily Writeups
⤷ Title: Vulnix Machine Walkthrough.
════════════════════════
𐀪 Author: Akhilkulkarni
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 20:11:55 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
Vulnix Machine Walkthrough.
Introduction
15 views
Daily Writeups
⤷ Title: Adventures and Lessons from Kiosk Hacking on ChromeOS
════════════════════════
𐀪 Author: Mike Manrod
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 19:54:17 GMT
════════════════════════
⌗ Tags: #kioskhacking #ethical_hacking #cybersecurity #kiosk #kiosk_software
Medium
Adventures and Lessons from Kiosk Hacking on ChromeOS
How do ChromeOS kiosks hold up, when compared to Windows or MacOS kiosks? Based on our observations so far, they hold up quite well…
19 views
Daily Writeups
⤷ Title: Authentication & Brute‑Force Exposure Assessment on DVWA
════════════════════════
𐀪 Author: Mylescorey
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 19:24:22 GMT
════════════════════════
⌗ Tags: #dvwa #ethical_hacking
Medium
Authentication & Brute‑Force Exposure Assessment on DVWA
In this project, I am demonstrating my ability to assess authentication security using Metasploit’s built‑in brute‑force modules without…
31 views
Daily Writeups
⤷ Title: Gh0sts: A BOLA Challenge from t3rmin4t0rs CTF 2026.
════════════════════════
𐀪 Author: Vanessa krystal
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 20:09:00 GMT
════════════════════════
⌗ Tags: #api_security #ctf_writeup
Medium
Gh0sts: A BOLA Challenge from t3rmin4t0rs CTF 2026.
During t3rmin4t0rs ctf 2026, I created a web challenge themed around a logistics company called Ghost Courier. The idea behind the…
39 views
Daily Writeups
⤷ Title: Build Your Own Cybersecurity Game — Learn Security by Playing
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 22:24:37 GMT
════════════════════════
⌗ Tags: #gaming #cybersecurity #infosec #bug_bounty #hacking
Medium
🎮 Build Your Own Cybersecurity Game — Learn Security by Playing
🎮 Build Your Own Cybersecurity Game (Play While Learning Security)
28 views
Daily Writeups
⤷ Title: Detect. Download. Extract. Automating Source Code Recovery with DotGit-Enhanced
════════════════════════
𐀪 Author: Maor Dayan - מאור דיין
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 21:01:02 GMT
════════════════════════
⌗ Tags: #automating #threat_hunting #bug_bounty #git #security
Medium
Detect. Download. Extract. Automating Source Code Recovery with DotGit-Enhanced
If you spend any time in web application security, bug bounty hunting, or threat intelligence, you already know the goldmine that is an…
27 views
Daily Writeups
⤷ Title: Building a Reverse Shell Shellcode with Stardust
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 22:22:46 GMT
════════════════════════
⌗ Tags: #pentesting #hacking #malware #cybercrime #cybersecurity
Medium
Building a Reverse Shell Shellcode with Stardust
In the previous post, we introduced the Stardust shellcode generator template and explored some of its key features, such as compile-time…
25 views
Daily Writeups
⤷ Title: OTP / Verification Code Brute Force Vulnerability
════════════════════════
𐀪 Author: Youssefelbakrey
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 22:49:48 GMT
════════════════════════
⌗ Tags: #web_security #privacy #penetration_testing
Medium
OTP / Verification Code Brute Force Vulnerability
Target: https://example.com/signups
27 views
Daily Writeups
⤷ Title: HackPark: Brute Forcing BlogEngine.NET and Escalating to SYSTEM via Scheduled Task
════════════════════════
𐀪 Author: Robert Perez
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 21:39:19 GMT
════════════════════════
⌗ Tags: #privilege_escalation #cybersecurity #windows #ethical_hacking #penetration_testing
Medium
HackPark: Brute Forcing BlogEngine.NET and Escalating to SYSTEM via Scheduled Task
TryHackMe’s HackPark is a Windows lab that chains together three distinct techniques: web login brute forcing against an ASP.NET…
31 views
Daily Writeups
⤷ Title: Torrent of Threats: China-Nexus APT UAT-9244 Hijacks South American Telecoms with PeerTime Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 00:55:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #BruteEntry #China_nexus #Cisco Talos #cyber_espionage #Malware Analysis #PeerTime #Telecommunications #TernDoor #UAT_9244
Daily CyberSecurity
Torrent of Threats: China-Nexus APT UAT-9244 Hijacks South American Telecoms with PeerTime Backdoor
Cisco Talos exposes UAT-9244, a China-linked APT targeting South American telecoms with stealthy malware like the BitTorrent-based PeerTime and TernDoor.
25 views
Daily Writeups
⤷ Title: Escalation in the Shadows: Iranian APT Seedworm Deploys ‘Dindoor’ Backdoor in New Cyberoffensive
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 00:50:13 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Critical Infrastructure #Cyberespionage #cybersecurity #Dindoor Backdoor #Hacktivism #infosec #Iranian APT #MuddyWater #Seedworm #threat intelligence
Daily CyberSecurity
Escalation in the Shadows: Iranian APT Seedworm Deploys 'Dindoor' Backdoor in New Cyberoffensive
Iranian APT Seedworm intensifies cyberespionage against US and Israeli networks using a new stealth backdoor called Dindoor. Read the full threat report.
13 views
Daily Writeups
⤷ Title: Fake GitHub Repositories Unleash BoryptGrab Stealer and TunnesshClient Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 00:46:08 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #BoryptGrab #cybersecurity #GitHub Malware #infosec #Infostealer #Reverse SSH Tunnel #threat intelligence #Trend Micro #TunnesshClient
Daily CyberSecurity
Fake GitHub Repositories Unleash BoryptGrab Stealer and TunnesshClient Backdoor
Trend Micro reveals the BoryptGrab info stealer campaign using SEO-optimized fake GitHub repos to deploy the TunnesshClient reverse SSH backdoor.
12 views
Daily Writeups
⤷ Title: Critical 9.4 CVSS Zephyr RTOS Flaw Exposes Millions of IoT Devices to RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 00:41:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_1678 #cybersecurity #DNS Spoofing #infosec #IoT security #Patch Alert #Remote Code Execution #Vulnerability #Zephyr RTOS
Daily CyberSecurity
Critical 9.4 CVSS Zephyr RTOS Flaw Exposes Millions of IoT Devices to RCE
A critical 9.4 CVSS buffer overflow flaw (CVE-2026-1678) in Zephyr RTOS's DNS parser allows unauthenticated RCE on IoT devices. Patch immediately.
18 views
Daily Writeups
⤷ Title: Vault Unlocked: High-Severity Flaws in Vaultwarden Expose Encrypted Secrets and Allow Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 00:33:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_27803 #CVE_2026_27898 #cybersecurity #data leak #IDOR #infosec #password manager #Patch Alert #privilege escalation #Vaultwarden
Daily CyberSecurity
Vault Unlocked: High-Severity Flaws in Vaultwarden Expose Encrypted Secrets and Allow Privilege Escalation
Critical vulnerabilities in Vaultwarden (like CVE-2026-27898) allow privilege escalation and unauthorized access to secrets. Update to version 1.35.4 now.
12 views
Daily Writeups
⤷ Title: Critical 9.3 CVSS Flaw in SiYuan Lets Hackers Steal Private Notes via SVG Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 00:28:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cross_Site Scripting #CVE_2026_29183 #cybersecurity #infosec #Patch Alert #Personal Knowledge Management #SiYuan #SVG Injection #Vulnerability #XSS
Daily CyberSecurity
Critical 9.3 CVSS Flaw in SiYuan Lets Hackers Steal Private Notes via SVG Injection
A critical 9.3 CVSS reflected XSS flaw (CVE-2026-29183) in SiYuan's dynamic icon API lets attackers steal private notes via SVG injection. Update now.
14 views