Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: HTB: Imagery
════════════════════════
𐀪 Author: bluesnow
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 08:44:55 GMT
════════════════════════
⌗ Tags: #aes_file #xs #cronjob #directory_traversal #command_injection
Medium
HTB: Imagery
| XSS | Session Cookie Hijacking | Directory Traversal | DB.JSON | Command Injection | AES File | AES Decrytion | SUDO | Charcol | Cron Job…
65 views
Daily Writeups
⤷ Title: Trend Micro Issues Critical Patch for Apex One: Severe RCE Flaws Addressed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 07:16:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #critical patch #CVE_2025_71210 #CVE_2025_71211 #Directory Traversal #endpoint security #infosec #Patch Alert #rce #Remote Code Execution #Trend Micro Apex One
Daily CyberSecurity
Trend Micro Issues Critical Patch for Apex One: Severe RCE Flaws Addressed
Trend Micro issues a critical patch for Apex One to fix 9.8 severity vulnerabilities (CVE-2025-71210) that allow remote code execution. Update your console now!
13 views
Daily Writeups
⤷ Title: Walkthrough: Web Application Attacks - XSS, SQL Injections, Directory Traversals, and File…
════════════════════════
𐀪 Author: Daryl Brooks
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 00:44:16 GMT
════════════════════════
⌗ Tags: #stored_xss #local_file_inclusion #sql_injection #directory_traversal #reflected_xss
Medium
Walkthrough: Web Application Attacks - XSS, SQL Injections, Directory Traversals, and File…
In this project, I discuss and demonstrate a variety of web‑based cyberattacks. To do so, I take on the role of a malicious actor and…
37 views
Daily Writeups
⤷ Title: [Kubernetes for Everyone] — Exploiting Grafana (CVE-2021-43798) To Gain SSH Access and Extract…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 05:01:15 GMT
════════════════════════
⌗ Tags: #kubernetes #directory_traversal #grafana #cve_2021_43798 #bug_bounty
Medium
[Kubernetes for Everyone] — Exploiting Grafana (CVE-2021-43798) To Gain SSH Access and Extract Secrets From a Kubernetes Cluster
Grafana CVE-2021-43798 to Kubernetes Secrets — Full Exploitation Chain with Pod Enumeration.
19 views
Daily Writeups
⤷ Title: Discover Hidden Attack Surfaces with FFUF Fuzzing
════════════════════════
𐀪 Author: Cyb3rV0lt
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 07:17:18 GMT
════════════════════════
⌗ Tags: #ffuf #directory_brute_force #bug_bounty_tips #fuzzing #cybersecurity
Medium
🔍 Discover Hidden Attack Surfaces with FFUF Fuzzing
In the world of web application security, attackers don’t just look at what’s visible — they dig deeper to uncover hidden endpoints…
52 views
Daily Writeups
⤷ Title: Hydra: TryHackMe Walkthrough
════════════════════════
𐀪 Author: Shree
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 16:08:16 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #hydra #tryhackme #cybersecurity #directory_brute_force
Medium
Hydra: TryHackMe Walkthrough
Let’s try and find out a password using bruteforce attack using Hydra!
15 views
Daily Writeups
⤷ Title: Critical Spring Cloud Config Flaws Expose Arbitrary Files and GCP Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 02:10:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_40981 #CVE_2026_40982 #cybersecurity #Directory Traversal #GCP Security #Google Secrets Manager #infosec #Patch Alert #Spring Boot #Spring Cloud Config
Daily CyberSecurity
Critical Spring Cloud Config Flaws Expose Arbitrary Files and GCP Secrets
Spring Cloud Config fixes a 9.1 CVSS directory traversal (CVE-2026-40982) and a GCP secret leak. Secure your distributed system—upgrade to the latest patches!
14 views
Daily Writeups
⤷ Title: Your Server Is Showing Everything It Shouldn’t -The Apache Directory Listing Deep Dive
════════════════════════
𐀪 Author: Blue_eye
════════════════════════
ⴵ Time: Sat, 09 May 2026 01:31:00 GMT
════════════════════════
⌗ Tags: #software_development #directory_listing #web_development #ai #bug_bounty
Medium
Your Server Is Showing Everything It Shouldn’t -The Apache Directory Listing Deep Dive
A misconfigured Apache directive just one line can turn your private server filesystem into an open catalogue for anyone with a browser…
19 views
Daily Writeups
⤷ Title: CISA Sound the Alarm: Langflow AI Platform and Trend Micro Added to KEV Catalog Due to Active Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 23:29:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Binding Operational Directive #CISA KEV #Cross_Origin Resource Sharing #CVE_2025_34291 #CVE_2026_34926 #Cyber Security #Directory Traversal #infosec #Langflow #Remote Code Execution #SameSite Cookie #Trend Micro Apex One
Daily CyberSecurity
CISA Sound the Alarm: Langflow AI Platform and Trend Micro Added to KEV Catalog Due to Active Exploitation
CISA updates its KEV Catalog with critical flaws in Langflow (CVE-2025-34291) and Trend Micro Apex One. Federal agencies ordered to patch by June 4, 2026.
10 views
Daily Writeups
⤷ Title: Critical ArcGIS Server Security Patch Fixes Severe Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 00:30:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ArcGIS Server #CVE_2026_9181 #Directory Traversal #Esri Security #Software Patch
Daily CyberSecurity
Critical ArcGIS Server Security Patch Fixes Severe Flaws
Esri recently launched an urgent ArcGIS Server security patch to address critical vulnerabilities within its core application framework. Specifically, the newly issued software update resolves mul…
24 views
Daily Writeups
⤷ Title: The Biggest Path Traversal Mistake I Didn’t Know I Was Making — Here’s The Path Traversal Checklist…
════════════════════════
𐀪 Author: Swati Choudhary
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 17:53:34 GMT
════════════════════════
⌗ Tags: #directory_traversal #web_security #application_security #cybersecurity #bug_bounty
Medium
The Biggest Path Traversal Mistake I Didn’t Know I Was Making — Here’s The Path Traversal Checklist…
A few weeks ago, I was testing a web application when I noticed something that looked interesting — a “.jpeg” file being loaded by the…
33 views
Daily Writeups
⤷ Title: Exim Directory Traversal Flaw Enables Privilege Escalation, Fixed in 4.99.5
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 17:10:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Directory Traversal #Exim #Exim 4.99.5 #Linux Security #Mail Transfer Agent #privilege escalation
Daily CyberSecurity
Exim Directory Traversal Flaw Enables Privilege Escalation, Fixed in 4.99.5
TL;DR The Exim team published advisory EXIM-Security-2026-06-22.1 on July 22, 2026. It describes an Exim vulnerability that lets a local attacker read files outside the mail spool. The bug can lea…
13 views
Daily Writeups
⤷ Title: Room 404 — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 17:22:07 GMT
════════════════════════
⌗ Tags: #web_security #directory_enumeration #web_design #tryhackme #git
Medium
Room 404 — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
13 views
Daily Writeups
⤷ Title: TryHackMe Hacker Holidays: Room 404 Walkthrough
════════════════════════
𐀪 Author: iamdonu
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 19:34:34 GMT
════════════════════════
⌗ Tags: #directory_enumeration #hacker_holidays_2026 #tryhackme #web #hacker_holidays
Medium
TryHackMe Hacker Holidays: Room 404 Walkthrough
A quiet hotel room, one open port, and a web misconfiguration that proved to be a goldmine.
4 views
Daily Writeups
⤷ Title: From Exposed .git to Full Compromise: A Byte Lotus CTF Walkthrough (Day 2: Room 404)
════════════════════════
𐀪 Author: Ali Burhan
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 19:21:18 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf_walkthrough #bytelotus #ctf #directory_enumeration
Medium
From Exposed .git to Full Compromise: A Byte Lotus CTF Walkthrough (Day 2: Room 404)
Web application security challenges often hide their most critical secrets in plain sight. In this walkthrough, we explore The Byte Lotus…
9 views
Daily Writeups
⤷ Title: TryHackMe Hackers Holiday Day 2 Room 404 Write-Up
════════════════════════
𐀪 Author: Kubera Krishna
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 20:03:19 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #ctf #cybersecurity #tryhackme #directory_enumeration
Medium
TryHackMe Hackers Holiday Day 2 Room 404 Write-Up
You can play this room for free: “https://tryhackme.com/room/hh-room404-804573bf”
12 views
Daily Writeups
⤷ Title: Broadcom Patches CVE-2026-59309 & CVE-2026-59310 (CVSS 9.8) in VMware
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 10:27:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_59309 #CVE_2026_59310 #Directory Traversal #VMware authentication bypass
Daily CyberSecurity
Broadcom Patches CVE-2026-59309 & CVE-2026-59310 (CVSS 9.8) in VMware
TL;DR Broadcom released patches for multiple critical flaws in VMware products. The most severe issue is a VMware authentication bypass in vCenter Server. Attackers can exploit this flaw to gain u…
28 views
Daily Writeups
⤷ Title: Room 404 | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sun, 02 Aug 2026 04:44:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #web #directory_enumeration
Medium
Room 404 | TryHackMe
He booked the quiet room. It’s not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and the rooms it…
35 views
Daily Writeups
⤷ Title: Server-2: Vulnerable OnlyPhone— VulnerabilityWeb Walkthrough (4 Flags)
════════════════════════
𐀪 Author: Enric-xX
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 09:22:06 GMT
════════════════════════
⌗ Tags: #user_agent #bug_bounty #ctf #web_security #directory_listing
Medium
Server-2: Vulnerable OnlyPhone— VulnerabilityWeb Walkthrough (4 Flags)
Server-2 is a deliberately vulnerable web application designed for practicing User-Agent bypass, directory listing enumeration, CVE…
11 views
Daily Writeups
⤷ Title: How I Found a Hidden .git Repository and Leaked an Entire Website — TryHackMe Room 404
════════════════════════
𐀪 Author: Souhardya
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 18:05:16 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #git_security #directory_enumeration #web_security
Medium
How I Found a Hidden .git Repository and Leaked an Entire Website — TryHackMe Room 404
A beginner-friendly walkthrough of how directory enumeration exposed source code, Git history, and a secret left behind in an old commit.
34 views