Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: Before You Hack the Firmware, Listen to the Bootloader
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 16:32:03 GMT
════════════════════════
⌗ Tags: #hacking #software_engineering #cybersecurity #firmware #reverse_engineering
Medium
Before You Hack the Firmware, Listen to the Bootloader
Your UART adapter is not a hacking tool. It is a stethoscope
56 views
Daily Writeups
⤷ Title: From Learning Web Pentesting to Receiving a Letter of Recognition from NASA
════════════════════════
𐀪 Author: Nafeeeak
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 19:18:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #nasa #ethical_hacking #pentesting #bug_bounty
Medium
From Learning Web Pentesting to Receiving a Letter of Recognition from NASA
When I first started learning cybersecurity, I never imagined that one day I would have an official letter from NASA recognizing me as an…
44 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: The Complete Guide
════════════════════════
𐀪 Author: cyber security
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 18:28:16 GMT
════════════════════════
⌗ Tags: #bug_bounty #technology #tech #tutorial #cybersecurity
Medium
HTTP Request Smuggling: The Complete Guide
Every Method, Technique, Bypass, and Defense You Need to Know
39 views
Daily Writeups
⤷ Title: CVE-2026–78159: Unauthenticated RCE via Widget Class Map Abuse
════════════════════════
𐀪 Author: Hamza Mahmoud Ahmed
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 19:22:28 GMT
════════════════════════
⌗ Tags: #software_engineering #programming #cybersecurity #technology #hacking
Medium
CVE-2026–78159: Unauthenticated RCE via Widget Class Map Abuse
A critical vulnerability assigned CVE-2026–78159 (CVSS 9.8 Critical) was disclosed in The Events Calendar — one of the most widely deployed…
24 views
Daily Writeups
⤷ Title: BadUSB Lies About Identity. DMA Attacks the Assumption Underneath.
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 18:30:08 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #coding #reverse_engineering #data_security
Medium
BadUSB Lies About Identity. DMA Attacks the Assumption Underneath.
One lies about identity. The other inherits privilege.
29 views
Daily Writeups
⤷ Title: Capture Returns — Bypassing a Stateless CAPTCHA Wall with OCR and OpenCV (TryHackMe)
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 19:29:13 GMT
════════════════════════
⌗ Tags: #tryhackme #penetration_testing #cybersecurity #pentesting #ethical_hacking
32 views
Daily Writeups
⤷ Title: The Crown Jewel — TryHackMe Write-Up: Tracing a Reverse Shell Back to Its Source
════════════════════════
𐀪 Author: Ghostbhoot
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 19:29:07 GMT
════════════════════════
⌗ Tags: #tryhackme #incident_response #splunk #tryhackme_walkthrough #blue_team
Medium
The Crown Jewel — TryHackMe Write-Up: Tracing a Reverse Shell Back to Its Source
A DFIR walkthrough combining PCAP analysis and Splunk log correlation to reconstruct a full network intrusion — from ARP spoofing to…
35 views
Daily Writeups
⤷ Title: Phishing in 2026 Is No Longer Just an Email Problem
════════════════════════
𐀪 Author: Tahamirehman
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 18:36:34 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #internet #ethical_hacking #technology #social_media_marketing
Medium
Phishing in 2026 Is No Longer Just an Email Problem
For years, phishing was easy to imagine.
37 views
Daily Writeups
⤷ Title: HTB: Silentium
════════════════════════
𐀪 Author: Danieltruong
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 19:01:01 GMT
════════════════════════
⌗ Tags: #hackthebox #rce
Medium
HTB: Silentium
Overview
48 views
Daily Writeups
⤷ Title: Droid ASC: A High-Performance Tool for Android Reverse Engineering and Vulnerability Discovery
════════════════════════
𐀪 Author: Excalibra
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 21:52:35 GMT
════════════════════════
⌗ Tags: #vulnerability #pentesting #android #cybersecurity #bug_bounty
41 views
Daily Writeups
⤷ Title: One Symlink to Root — A Full Walkthrough: From Chat Messages to a Root Shell Inside ChatGPT’s Code…
════════════════════════
𐀪 Author: Adrian Dacka
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 20:51:22 GMT
════════════════════════
⌗ Tags: #bugcrowd #bug_bounty #pentesting #openai #cybersecurity
Medium
One Symlink to Root — A Full Walkthrough: From Chat Messages to a Root Shell Inside ChatGPT’s Code Interpreter
A documented, account-scoped assessment of ChatGPT’s code-interpreter sandbox: the protocol flaw that enabled tool execution, the…
31 views
Daily Writeups
⤷ Title: Application Security — Risks in AI-Generated (“Vibe Coded”) Applications
════════════════════════
𐀪 Author: Christina Hurley
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 21:36:01 GMT
════════════════════════
⌗ Tags: #application_security #secure_development #vibe_coding #ai_generated_code
Medium
Application Security — Risks in AI-Generated (“Vibe Coded”) Applications
Mamí Christina is stirring the arroz with one hand and holding her nephew Reinaldo’s laptop with the other, and mija, the screen is doing…
20 views
Daily Writeups
⤷ Title: Active Directory skanowanie,enumeracja i hacking Part 3
════════════════════════
𐀪 Author: Jwegrzyn
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 20:06:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #windows #hacking #azure_active_directory #linux
Medium
Active Directory skanowanie,enumeracja i hacking Part 3
Dziś zajmiemy się rekonesansem oraz enumeracją active directory w sytuacji gdy ataki podane w part 2 sie powiodły (chodz wiele enumeracji…
28 views
Daily Writeups
⤷ Title: Just a VPN Login — TryHackMe Write Up
════════════════════════
𐀪 Author: Emirkilicer
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 21:40:12 GMT
════════════════════════
⌗ Tags: #tryhackme #soc #malware_analysis #cybersecurity #threat_intelligence
Medium
Just a VPN Login — TryHackMe Write Up
A spoiler-free SOC investigation walkthrough
36 views
Daily Writeups
⤷ Title: Certificate Hackers For Hire > Smatchoicehackers.com
════════════════════════
𐀪 Author: Donley Mark
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 21:34:48 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cyber_security_services #ethical_hacking #cybersecurity #cyber_security_solutions
Medium
Certificate Hackers For Hire > Smatchoicehackers.com
Hire professional ethical hackers for solving made easy.
38 views
Daily Writeups
⤷ Title: Reactor (HTB) Walkthrough
════════════════════════
𐀪 Author: L4ZZ3RJ0D
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 20:31:01 GMT
════════════════════════
⌗ Tags: #ctf_writeup #hackthebox #ctf #tryhackme_walkthrough #ethical_hacking
Medium
Reactor (HTB) Walkthrough
A nuclear reactor monitoring dashboard running on Next.js, which is already a slightly unsettling combination of words before you’ve even…
37 views
Daily Writeups
⤷ Title: CTF Writeup — head-dump | picoCTF 2025 (Web Exploitation, Easy)
════════════════════════
𐀪 Author: Khushbu
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 20:05:54 GMT
════════════════════════
⌗ Tags: #api_security #ctf #picoctf #web_exploitation #swagger
Medium
CTF Writeup — head-dump | picoCTF 2025 (Web Exploitation, Easy)
The flag wasn’t hidden behind a login or an injection point this time — it was sitting in the server’s own memory, and the application…
38 views
Daily Writeups
⤷ Title: When Authorization Runs Too Late: RCE via Insecure Deserialization in Feast (CVE-2026–56121)
════════════════════════
𐀪 Author: Guidancewhite
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 00:50:28 GMT
════════════════════════
⌗ Tags: #linux #vulnerability #ai_agent #hacking #security
Medium
When Authorization Runs Too Late: RCE via Insecure Deserialization in Feast (CVE-2026–56121)
Feast is an open-source feature store used in ML pipelines to define, store, and serve features. Users can register FeatureView specs —…
41 views
Daily Writeups
⤷ Title: CAPA: The Basics: Static Malware Analysis and MITRE ATT&CK Mapping
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 00:56:50 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #malware_analysis #infosec #cybersecurity #tryhackme
Medium
CAPA: The Basics: Static Malware Analysis and MITRE ATT&CK Mapping
Introduction
37 views
Daily Writeups
⤷ Title: TryHackMe Metasploit Post Exploitation Walkthrough
════════════════════════
𐀪 Author: Rich
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 01:49:19 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #metasploit #tryhackme_walkthrough #psexec
Medium
TryHackMe Metasploit Post Exploitation Walkthrough
TL;DR Walkthrough of the TryHackMe Metasploit Post Exploitation room and a note RE PsExec.
42 views