Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Remote Code Execution via File Upload Vulnerabilities: Routed vs Non-Routed Applications
════════════════════════
𐀪 Author: Odiomonafe Jamal . A
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 06:25:49 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #file_upload_vulnerability
Medium
Remote Code Execution via File Upload Vulnerabilities: Routed vs Non-Routed Applications
Introduction
21 views
Daily Writeups
⤷ Title: Breaking Email Trust: How I Bypassed Email Verification in a Real-World Application.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 05:54:27 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #authentication_bypass #broken_authentication
Medium
🔓 Breaking Email Trust: How I Bypassed Email Verification in a Real-World Application.
Introduction
32 views
Daily Writeups
⤷ Title: Ubuntu 26.10 Set to Deliver Linux Kernel 7.2 and Rapid Innovation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:29:58 +0000
════════════════════════
⌗ Tags: #Linux #Canonical #GNOME 51 #Linux Kernel 7.2 #Linux Roadmap #open_source #Operating Systems #Stonking Stingray #Tech News 2026 #Ubuntu 26.10 #Ubuntu Release Schedule
Daily CyberSecurity
Ubuntu 26.10 Set to Deliver Linux Kernel 7.2 and Rapid Innovation
Canonical unveils the "Stonking Stingray." Ubuntu 26.10 arrives Oct 15, 2026, featuring Linux Kernel 7.2 and GNOME 51. See the full development roadmap here.
❤1
26 views
Daily Writeups
⤷ Title: The NTFS Resurrection: Linux Kernel 7.1 Delivers a Native Driver with 110% Faster Write Speeds
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:21:12 +0000
════════════════════════
⌗ Tags: #Linux #Cross_Platform #File Systems #Kernel Development #Linux Kernel 7.1 #Linux Performance #Namjae Jeon #NTFS #NTFS_3G #open_source #Storage
Daily CyberSecurity
The NTFS Resurrection: Linux Kernel 7.1 Delivers a Native Driver with 110% Faster Write Speeds
Linux Kernel 7.1 introduces a ground-up NTFS driver rewrite. Experience up to 110% faster multi-threaded writes and 4x faster drive mounting in 2026.
17 views
Daily Writeups
⤷ Title: SEO Poisoning & NativeAOT: Unmasking the “Kong RAT” Campaign Targeting IT Professionals
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:13:58 +0000
════════════════════════
⌗ Tags: #Malware #.NET 10.0 NativeAOT #Alibaba Cloud OSS #cyber_espionage #eSentire TRU #FinalShell #infosec #IT security #Kong RAT #malware #SEO Poisoning #Trojanized Installers #Xshell
Daily CyberSecurity
SEO Poisoning & NativeAOT: Unmasking the "Kong RAT" Campaign Targeting IT Professionals
Kong RAT: A year-long SEO poisoning campaign targeting developers with trojanized SSH/VPN tools and .NET NativeAOT stealth. Learn how to stay protected.
9 views
Daily Writeups
⤷ Title: Meta Unveils a New Premium Tier to Personalize Your WhatsApp Experience
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:10:03 +0000
════════════════════════
⌗ Tags: #Technology #App Personalization #Instagram Plus #Meta #monetization #Social Media Trends #Subscription Service #Tech News 2026 #WhatsApp Plus #WhatsApp Premium
Daily CyberSecurity
Meta Unveils a New Premium Tier to Personalize Your WhatsApp Experience
Meta is testing "WhatsApp Plus," a new subscription tier offering exclusive themes, 20 pinned chats, and animated stickers. See what’s changing in 2026.
10 views
Daily Writeups
⤷ Title: The 100-Billion-Dollar Power Play: Anthropic and Amazon Forge an 8.5GW AI Empire
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:07:12 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Amazon #Anthropic #AWS #Claude AI #Cloud Computing #Google Cloud #Project Rainier #supercomputing #Tech News 2026 #Trainium
Daily CyberSecurity
The 100-Billion-Dollar Power Play: Anthropic and Amazon Forge an 8.5GW AI Empire
Anthropic and Amazon ink a historic $100B deal for 5GW of power. See how "Project Rainier" and Trainium chips are set to challenge the OpenAI-Microsoft throne.
9 views
Daily Writeups
⤷ Title: Beyond Gatekeeper: How Sapphire Sleet’s AppleScript Trap Hijacks macOS and Crypto Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:05:22 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript #crypto security #infosec #Lazarus Group #macOS #malware #Microsoft Threat Intelligence #North Korea #Sapphire Sleet #TCC Bypass #Telegram Theft
Daily CyberSecurity
Beyond Gatekeeper: How Sapphire Sleet’s AppleScript Trap Hijacks macOS and Crypto Wallets
Microsoft uncovers Sapphire Sleet's macOS campaign. Using fake recruiters and AppleScript, they bypass TCC to steal crypto wallets, Telegram, and SSH keys.
10 views
Daily Writeups
⤷ Title: The Negotiator Turned Traitor: Insider Betrayal in the BlackCat Ransomware Ring
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:01:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ALPHV #Angelo Martino #Bitcoin Extortion #BlackCat #Cybercrime #Department of Justice #fbi #Incident Response #Insider Threat #ransomware #Ransomware Negotiator
Daily CyberSecurity
The Negotiator Turned Traitor: Insider Betrayal in the BlackCat Ransomware Ring
Former ransomware negotiator Angelo Martino pleaded guilty to working with BlackCat to extort his own clients. $10M in luxury assets seized. Facing 20 years.
10 views
Daily Writeups
⤷ Title: How I Found an Exposed Google Maps API Key in a Production Config File
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:25:04 GMT
════════════════════════
⌗ Tags: #android_security #infosec #bug_bounty #cybersecurity #ethical_hacking
Medium
How I Found an Exposed Google Maps API Key in a Production Config File
How I Found an Exposed Google Maps API Key in a Production Config File Bug Bounty Write-Up One unauthenticated endpoint. One unrestricted API key. $331,000/month in potential financial …
15 views
Daily Writeups
⤷ Title: SSRF Server-Side Request Forgery: Server Ko Apna Agent Banao, Internal Network Explore Karo!
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:14:02 GMT
════════════════════════
⌗ Tags: #cloud_security #aws #ssrf #ethical_hacking #bug_bounty
Medium
SSRF Server-Side Request Forgery: Server Ko Apna Agent Banao, Internal Network Explore Karo! (Hinglish Mein)
Series: Bug Bounty Zero se Hero 🦸 | Article #17 By HackerMD | 19 min read
18 views
Daily Writeups
⤷ Title: I Used AI to Cut My Red Team Report Writing Time by 70% — Here’s How
════════════════════════
𐀪 Author: Cyberaiprompts
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:44:34 GMT
════════════════════════
⌗ Tags: #red_team #bug_bounty #offensive_security #penetration_testing #ocsp
Medium
I Used AI to Cut My Red Team Report Writing Time by 70% — Here’s How
You’ve just wrapped a 4-week red team engagement.
12 views
Daily Writeups
⤷ Title: Vercel and Lovable Got Breached in the Same Week. Your API Keys Might Be in Both.
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:51:20 GMT
════════════════════════
⌗ Tags: #vercel #lovable #ai_tools #hacking #ai
Medium
Vercel and Lovable Got Breached in the Same Week. Your API Keys Might Be in Both.
Lovable exposed your AI chat history and database credentials. Vercel leaked your environment variables. Here’s exactly what happened…
13 views
Daily Writeups
⤷ Title: Vercel Hack Explained: How a Roblox Cheat Brought Down a $9.3 Billion Company
════════════════════════
𐀪 Author: VR
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:47:50 GMT
════════════════════════
⌗ Tags: #ai_news #ai #hacking #nextjs #vercel
Medium
Vercel Hack Explained: How a Roblox Cheat Brought Down a $9.3 Billion Company
A step-by-step breakdown of the 2026 Vercel security breach — how it started, how it spread, and what every developer and company needs to…
12 views
Daily Writeups
⤷ Title: Blueprint | THM
════════════════════════
𐀪 Author: #UNKNOWN
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:43:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #hacking #tryhackme
Medium
Blueprint | THM
STEP I: Start the machine and scan all ports and running services
12 views
Daily Writeups
⤷ Title: Why “I’ve Got Nothing to Hide” Is the Most Dangerous Lie You Tell Yourself
════════════════════════
𐀪 Author: Viral Parmar
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:05:40 GMT
════════════════════════
⌗ Tags: #mindset #privacy #infosec #data_analysis #cybersecurity
Medium
Why “I’ve Got Nothing to Hide” Is the Most Dangerous Lie You Tell Yourself
Just imagine you’re sitting on sofa with a checking account balance of €10, a digital gallery full of dogs & random what not photos, and an…
7 views
Daily Writeups
⤷ Title: Top 8 Talks from [un]prompted 2026 Every Security Practitioner Should Know
════════════════════════
𐀪 Author: The Cyber Archive
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:39:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai_conference #infosec #ai_security
Medium
Top 8 Talks from [un]prompted 2026 Every Security Practitioner Should Know
The first major conference dedicated to securing AI delivered a concentrated body of research. Here are the talks practitioners should read…
9 views
Daily Writeups
⤷ Title: Membongkar Isi Database Non-Oracle Menggunakan SQL Injection (UNION Attack)
════════════════════════
𐀪 Author: Hasbi Anakguru
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:47:51 GMT
════════════════════════
⌗ Tags: #web_security #sql_injection #ethical_hacking #cybersecurity #penetration_testing
Medium
Membongkar Isi Database Non-Oracle Menggunakan SQL Injection (UNION Attack)
SQL Injection (SQLi) masih menjadi salah satu kerentanan yang paling sering ditemui dan memiliki dampak yang sangat fatal. Pada artikel…
12 views
Daily Writeups
⤷ Title: Click, Install, Compromise: Abusing ClickOnce in Modern Enterprises
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 06:55:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #red_teaming #enterprise_security #clickonce #penetration_testing
Medium
Click, Install, Compromise: Abusing ClickOnce in Modern Enterprises
Modern enterprises deploy a wide range of security tools to detect malicious attachments, macro-enabled documents, and suspicious…
12 views
Daily Writeups
⤷ Title: Investigating a Multi-Stage Attack: TryHackMe First Shift CTF — Task 6: Zero Tolerance
════════════════════════
𐀪 Author: Citadel Cybersec
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:40:17 GMT
════════════════════════
⌗ Tags: #threat_hunting #cybersecurity #soc_analyst #tryhackme #splunk
Medium
Investigating a Multi-Stage Attack: TryHackMe First Shift CTF — Task 6: Zero Tolerance
Hands-on Splunk analysis covering initial access, persistence, credential dumping, and lateral movement
20 views