Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: Bug Bounty Bootcamp #37: SSRF in PDFs, Screenshots, and Bypassing Localhost Filters
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Tue, 19 May 2026 17:02:26 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #technology #hacking #learning
Medium
Bug Bounty Bootcamp #37: SSRF in PDFs, Screenshots, and Bypassing Localhost Filters
You found a PDF generator that fetches URLs. The developer blocked localhost and 127.0.0.1. Game over? Not even close. Learn the art of…
23 views
Daily Writeups
⤷ Title: Breaking WPA3: When “Impossible” Meets “Impractical”
════════════════════════
𐀪 Author: Tanmay Bhattacharjee
════════════════════════
ⴵ Time: Tue, 19 May 2026 17:14:31 GMT
════════════════════════
⌗ Tags: #infosec #wifi #ethical_hacking #cybersecurity #penetration_testing
Medium
Breaking WPA3: When “Impossible” Meets “Impractical”
A practical walkthrough of two real attacks against WPA3 networks online brute force and the transition-mode downgrade.
22 views
Daily Writeups
⤷ Title: PicoCTF Writeup: Undo (Easy)
════════════════════════
𐀪 Author: vulnhunter
════════════════════════
ⴵ Time: Tue, 19 May 2026 17:45:40 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #ethical_hacking #linux #cybersecurity
Medium
PicoCTF Writeup: Undo (Easy)
Understanding Linux Text Transformations
22 views
Daily Writeups
⤷ Title: Day 5: Footprinting & Reconnaissance -How Attackers Know Everything Before They Touch Anything
════════════════════════
𐀪 Author: Adarshraj
════════════════════════
ⴵ Time: Tue, 19 May 2026 17:44:55 GMT
════════════════════════
⌗ Tags: #google_dorking #footprinting #osint #ethical_hacking #reconnaissance
Medium
Day 5: Footprinting & Reconnaissance -How Attackers Know Everything Before They Touch Anything
30 days. Public. Still going.
36 views
Daily Writeups
⤷ Title: How to Set Up a High-Performance Web Server on a 4GB or 8GB VPS with cPanel and LiteSpeed…
════════════════════════
𐀪 Author: hackthacker
════════════════════════
ⴵ Time: Tue, 19 May 2026 17:27:48 GMT
════════════════════════
⌗ Tags: #linux #web_development #ethical_hacking #software_development #cybersecurity
Medium
How to Set Up a High-Performance Web Server on a 4GB or 8GB VPS with cPanel and LiteSpeed (Step-by-Step)
A complete, production-ready guide for developers who want a blazing-fast hosting environment using cPanel/WHM and LiteSpeed Web Server.
53 views
Daily Writeups
⤷ Title: 20 JavaScript Recon Tricks to Find Hidden APIs, Secrets, Admin Routes, and Bug Bounty Targets
════════════════════════
𐀪 Author: BugHunter’s Journal
════════════════════════
ⴵ Time: Tue, 19 May 2026 19:01:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cybersecurity #javascript #programming
Medium
20 JavaScript Recon Tricks to Find Hidden APIs, Secrets, Admin Routes, and Bug Bounty Targets 🔍💰
While everyone else is running subfinder and calling it recon — the top hunters are reading JavaScript files and finding bugs that nobody…
43 views
Daily Writeups
⤷ Title: Remote Process Read Primitive via NtCreateThreadEx Exit Code
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 19 May 2026 20:17:53 GMT
════════════════════════
⌗ Tags: #hacking #infosec #cybersecurity #malware #pentesting
Medium
Remote Process Read Primitive via NtCreateThreadEx Exit Code
Welcome to this new Medium post, today we’ll explore a clever technique to read arbitrary memory from a remote process without ever calling…
32 views
Daily Writeups
⤷ Title: Linux Capture The Flag Bandit Level 14
════════════════════════
𐀪 Author: Red
════════════════════════
ⴵ Time: Tue, 19 May 2026 19:46:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #hacking #infosec #linux
Medium
Linux Capture The Flag Bandit Level 14
Bandit Level 14 introduces one of the most fundamental concepts in networking — localhost and ports — and pairs it with a practical tool…
27 views
Daily Writeups
⤷ Title: Week 8: How to Stay Anonymous on the Internet Using Linux
════════════════════════
𐀪 Author: Nishant kumar
════════════════════════
ⴵ Time: Tue, 19 May 2026 19:22:47 GMT
════════════════════════
⌗ Tags: #kali_linux #penetration_testing #ethical_hacking #cybersecurity #linux
Medium
Week 8: How to Stay Anonymous on the Internet Using Linux
Welcome back to the Linux for Hackers series! If you’ve been following along, you’ve learned the command line, file permissions, networking…
22 views
Daily Writeups
⤷ Title: AI Models & Data
════════════════════════
𐀪 Author: Rormsbee
════════════════════════
ⴵ Time: Tue, 19 May 2026 19:19:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #ai_security #llm
Medium
AI Models & Data
TryHackMe walkthrough
28 views
Daily Writeups
⤷ Title: Deauthentication + Evil Twin + Captive Portal Attack: Wi-Fi Hücum Zəncirinin Təhlili və Müdafiə…
════════════════════════
𐀪 Author: Kanan Kazimov
════════════════════════
ⴵ Time: Tue, 19 May 2026 20:54:34 GMT
════════════════════════
⌗ Tags: #network_security #wifi_security #ethical_hacking #cybersecurity #information_security
Medium
Deauthentication + Evil Twin + Captive Portal Attack: Wi-Fi Hücum Zəncirinin Təhlili və Müdafiə Yolları
Public Wi-Fi istifadə edərkən çoxumuz eyni davranışı edirik: şəbəkənin adına baxırıq, tanış görünürsə qoşuluruq.
34 views
Daily Writeups
⤷ Title: SQL Injection: O que é, como funciona, tipos, riscos e como se proteger de verdade
════════════════════════
𐀪 Author: Carolina Utsch
════════════════════════
ⴵ Time: Tue, 19 May 2026 19:20:02 GMT
════════════════════════
⌗ Tags: #sql_injection
Medium
SQL Injection: O que é, como funciona, tipos, riscos e como se proteger de verdade
Quando começamos a estudar backend e banco de dados, normalmente aprendemos rapidamente a fazer queries SQL. O problema é que muita gente…
30 views
Daily Writeups
⤷ Title: AI Agent Security: Automating Workflow Without Creating Prompt Injection or Data Leak Risks
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 19 May 2026 21:13:08 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Agentic AI #AI #AI Agents #Automation #Cybersecurity #Data leak #Prompt Injection
Hackread
AI Agent Security: Automating Workflow Without Creating Prompt Injection or Data Leak Risks
AI agent security starts with a simple fact: the more authority an agent has, the tighter its access controls need to be. An AI agent that summarizes
27 views
Daily Writeups
⤷ Title: Vibe Coding is Over! Here’s What Comes Next.
════════════════════════
𐀪 Author: Priyanshu Sahu
════════════════════════
ⴵ Time: Tue, 19 May 2026 21:15:05 GMT
════════════════════════
⌗ Tags: #programming #bug_bounty #coding #vscode #vibe_coding
Medium
Vibe Coding is Over! Here’s What Comes Next.
“I Was a Vibe Coder. Here Is What Broke Me Out of It.”
18 views
Daily Writeups
⤷ Title: Information disclosure in error messages
════════════════════════
𐀪 Author: Songül Kızılay Özügürler
════════════════════════
ⴵ Time: Tue, 19 May 2026 21:31:43 GMT
════════════════════════
⌗ Tags: #ctf #pentesting #portswigger #hacking #medium
Medium
Information disclosure in error messages
Bu lab’da amaç verbose error message üzerinden framework version’ını yakalamaktı.
20 views
Daily Writeups
⤷ Title: Nmap Series: Nmap Advanced Port Scans — Part 3.
════════════════════════
𐀪 Author: Oluwakamiye Adeyemo
════════════════════════
ⴵ Time: Tue, 19 May 2026 22:29:21 GMT
════════════════════════
⌗ Tags: #networking #cybersecurity #tryhackme #nmap #penetration_testing
Medium
Nmap Series: Nmap Advanced Port Scans — Part 3.
In this write-up, I walk you through the Nmap Advanced Port Scans room on TryHackMe. I explore advanced scanning and spoofing techniques…
25 views
Daily Writeups
⤷ Title: TryHackMe SOC Level 1 — Alert Reporting, Escalation & Communication Walkthrough
════════════════════════
𐀪 Author: Kareeb Sadab
════════════════════════
ⴵ Time: Tue, 19 May 2026 22:00:44 GMT
════════════════════════
⌗ Tags: #soc_analyst #incident_response #tryhackme #cybersecurity #alert_reporting
Medium
TryHackMe SOC Level 1 — Alert Reporting, Escalation & Communication Walkthrough
A step-by-step guide through the SOC L1 Alert Reporting room, covering triage, phishing analysis, and escalation workflows.
27 views
Daily Writeups
⤷ Title: OWASP crAPI Walkthrough Series
════════════════════════
𐀪 Author: Boluwatife Dada
════════════════════════
ⴵ Time: Tue, 19 May 2026 22:22:40 GMT
════════════════════════
⌗ Tags: #api_security #crapi #owasp_api_security_top_10 #crapi_walkthrough
Medium
OWASP crAPI Walkthrough Series
Broken Object Level Authorization (BOLA) — API 1:2023
36 views
Daily Writeups
⤷ Title: VoIP Backbone Exposed: Critical FreePBX Flaw (CVE-2026-46376) Allows Unauthenticated Access to User Portals
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:53:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_46376 #Cyber Security #FreePBX #Hard_coded Credentials #infosec #Patch Alert #Telecom Security #User Control Panel #User Management #VoIP Security
Daily CyberSecurity
VoIP Backbone Exposed: Critical FreePBX Flaw (CVE-2026-46376) Allows Unauthenticated Access to User Portals
FreePBX fixes critical 9.1 CVSS flaw (CVE-2026-46376) where hardcoded credentials grant unauthenticated portal access. Update your modules now!
28 views
Daily Writeups
⤷ Title: Critical 9.9 CVSS Flaw in Arcane Exposes GitOps Secrets to Basic Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:37:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Arcane #Credential Theft #CVE_2026_45625 #Cyber Security #Docker Management #GitOps #infosec #Patch Alert #privilege escalation #Supply Chain Security
Daily CyberSecurity
Critical 9.9 CVSS Flaw in Arcane Exposes GitOps Secrets to Basic Users
Arcane fixes a critical 9.9 CVSS vulnerability (CVE-2026-45625) that allows basic users to steal GitOps credentials in plaintext. Update to 1.19.0!
19 views