Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: New Phishing Scam Uses LiveChat to Pose as Amazon and PayPal in Real Time
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 18:30:42 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Amazon #Cyber Attack #Cybersecurity #Fraud #LiveChat #MFA #Paypal #Phishing #Privacy #SaaS #Scam
Hackread
New Phishing Scam Uses LiveChat to Pose as Amazon and PayPal in Real Time
Cofense researchers warn of a phishing scam where attackers use LiveChat to impersonate Amazon and PayPal agents and steal credit card and MFA codes.
28 views
Daily Writeups
⤷ Title: CISA Flags Actively Exploited Wing FTP Server Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 18:59:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #Cookie Validation #CVE_2025_47813 #cybersecurity #Federal Mandate #infosec #Path Disclosure #threat intelligence #vulnerability management #Wing FTP Server
Daily CyberSecurity
CISA Flags Actively Exploited Wing FTP Server Flaw
CISA adds a Wing FTP Server flaw (CVE-2025-47813) to its KEV catalog. The actively exploited cookie vulnerability exposes internal server paths. Update now.
22 views
Daily Writeups
⤷ Title: Backdoored React Native Packages Target Developers with Crypto-Stealing Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 18:47:34 +0000
════════════════════════
⌗ Tags: #Malware #Aikido Security #AstrOOnauta #Crypto Stealer #cybersecurity #infosec #malware #npm Security #Preinstall Hook #React Native #supply chain attack
Daily CyberSecurity
Backdoored React Native Packages Target Developers with Crypto-Stealing Malware
Aikido uncovers a supply chain attack via AstrOOnauta, backdooring two popular React Native packages to steal crypto wallets and developer credentials.
23 views
Daily Writeups
⤷ Title: A Business Logic Bug That Let Me Remove Platform Fees During Checkout
════════════════════════
𐀪 Author: Ashutosh Anand
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 18:13:44 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #cybersecurity #security
Medium
A Business Logic Bug That Let Me Remove Platform Fees During Checkout
E-commerce platforms often implement small convenience fees to cover operational costs such as logistics processing, payment handling, or…
21 views
Daily Writeups
⤷ Title: Everyone Is Using AI for Bug Bounty in 2026. Almost Nobody Is Using It Correctly.
════════════════════════
𐀪 Author: R.H Rizvi
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 17:13:46 GMT
════════════════════════
⌗ Tags: #business #bug_bounty_writeup #earn_money_online #bug_bounty #bug_bounty_tips
Medium
Everyone Is Using AI for Bug Bounty in 2026. Almost Nobody Is Using It Correctly.
The myth-busting guide to AI-powered bug bounty, automated recon, and ethical hacking strategy that actually produces findings — not just…
15 views
Daily Writeups
⤷ Title: The Fresher’s Trap: Why the Most Prepared Beginners Are the Last Ones to Get Paid
════════════════════════
𐀪 Author: R.H Rizvi
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 17:13:34 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty_writeup #bug_bounty #business #earn_money_online
Medium
The Fresher’s Trap: Why the Most Prepared Beginners Are the Last Ones to Get Paid
The counter-intuitive beginner’s roadmap to bug bounty — from web hacking fundamentals and VDPs to your first real payout, without waiting…
15 views
Daily Writeups
⤷ Title: BlackPearl Walkthrough — Virtual Host Discovery & Navigate CMS RCE
════════════════════════
𐀪 Author: Mohamed Yasser
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 18:21:08 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #linux #ethical_hacking #cybersecurity
Medium
BlackPearl Walkthrough
A step-by-step walkthrough of the BlackPearl machine covering virtual host discovery, Navigate CMS RCE exploitat
18 views
Daily Writeups
⤷ Title: Understanding Browser Hardware Access: A Security Demonstration Using Web Technologies
════════════════════════
𐀪 Author: Hajrahaseeb
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 17:52:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #webcam #hacking #information_security #cameras
Medium
Understanding Browser Hardware Access: A Security Demonstration Using Web Technologies
Modern web browsers provide powerful APIs that allow websites to access device hardware such as cameras, microphones, and location…
18 views
Daily Writeups
⤷ Title: HTB Nibbles: File Upload to Root
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 18:33:12 GMT
════════════════════════
⌗ Tags: #ethical_hacking #offensive_security #hackthebox #cybersecurity #penetration_testing
Medium
HTB Nibbles: File Upload to Root
Add ip to /etc/hosts file ,so don't need to memorize every time.
16 views
Daily Writeups
⤷ Title: Try Hack Me- Baron Samedit Walkthrough
════════════════════════
𐀪 Author: PulseEinher
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 18:25:43 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #tryhackme_writeup #penetration_testing #tryhackme
Medium
Try Hack Me- Baron Samedit Walkthrough
Hello, stranger — let’s begin.
14 views
Daily Writeups
⤷ Title: Kali Linux
════════════════════════
𐀪 Author: Hamid Aslanov
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 17:48:24 GMT
════════════════════════
⌗ Tags: #kali_linux #cybersecurity #linux #penetration_testing #kernel
Medium
Kali Linux
Giriş
18 views
Daily Writeups
⤷ Title: Is Your Webcam Spying on You? A Simple Webcam Demonstration
════════════════════════
𐀪 Author: Hafsa Shahid
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 17:26:19 GMT
════════════════════════
⌗ Tags: #ethical_hacking #demoproject #webcam #information_security #xss_attack
Medium
Is Your Webcam Spying on You? A Simple Webcam Demonstration
Introduction
18 views
Daily Writeups
⤷ Title: xss0r V6 is Finally Released!
════════════════════════
𐀪 Author: xss0r
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 18:05:08 GMT
════════════════════════
⌗ Tags: #xss_bypass #xss_vulnerability #xss_attack #xss0r
Medium
🚀 xss0r V6 is Finally Released!
The new xss0r V6 version is now officially available.
32 views
Daily Writeups
⤷ Title: Never trust user input.
════════════════════════
𐀪 Author: Azama.
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 17:31:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #appsec #security_testing #qa_engineering #xss_vulnerability
Medium
Never trust user input.
When an input field (like an email box) isn’t strictly validated, it opens the door for several types of attacks. It’s not just about messy…
45 views
Daily Writeups
⤷ Title: Exploiting Union-Based SQL Injection: PostgreSQL Database Reconnaissance and Data Extraction
════════════════════════
𐀪 Author: Esraa
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 18:56:54 GMT
════════════════════════
⌗ Tags: #dump_database #sqlmap #sql_injection #python_scripting
Medium
Exploiting Union-Based SQL Injection: PostgreSQL Database Reconnaissance and Data Extraction
https://portswigger.net/web-security/sql-injection/union-attacks/lab-determine-number-of-columns
54 views
Daily Writeups
⤷ Title: GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 01:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: How I Compromised an Entire Active Directory Domain in 3 Steps
════════════════════════
𐀪 Author: JunoonBro
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 20:23:13 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #hacking #cybersecurity #information_security
Medium
How I Compromised an Entire Active Directory Domain in 3 Steps
Hello, I’d like to share a recent experience with the community. If you have followed my blogs on penetration testing and privilege…
36 views
Daily Writeups
⤷ Title: CRTP vs OSCP Tooling on GOAD-Light
════════════════════════
𐀪 Author: Joshua Goossen
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 19:25:04 GMT
════════════════════════
⌗ Tags: #crtp_exam #hacking #adversarial_architect #purple_team #oscp
Medium
CRTP vs OSCP Tooling on GOAD-Light
The Experiment
30 views
Daily Writeups
⤷ Title: HackableII: A Purple Team Breakdown from Anonymous FTP to Root and Everything Security Onion Saw.
════════════════════════
𐀪 Author: jrm360sec
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 20:46:45 GMT
════════════════════════
⌗ Tags: #infosec_write_ups #information_technology #infosec #infosecurity
Medium
HackableII: A Purple Team Breakdown — From Anonymous FTP to Root, and Everything Security Onion Caught Along the Way
HackableII: A Purple Team Breakdown — From Anonymous FTP to Root, and Everything Security Onion Caught Along the Way Most CTF write-ups are just lists of commands. This one is different. I run a …
18 views
Daily Writeups
⤷ Title: broker — TryHackMe CTF Walkthrough
════════════════════════
𐀪 Author: Karim Hesham
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 19:40:38 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #penetration_testing #broker_tryhackme #tryhackme #broker_tryhackme_writeup
Medium
broker — TryHackMe CTF Walkthrough
Paul and Max use a rather unconventional way to chat. They do not seem to know that eavesdropping is possible though…
17 views