Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Beyond Scanning: QKS Group Names the 2025 Leaders in Exposure Management
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:20:49 +0000
════════════════════════
⌗ Tags: #Information Security #AI security #attack surface #CrowdStrike #Exposure Management #Pentera #QKS Group #Qualys #Security Vision #SPARK Matrix #Tenable #vulnerability management
Penetration Testing Tools
Beyond Scanning: QKS Group Names the 2025 Leaders in Exposure Management
The analytical firm QKS Group has published its Exposure Management market study for the fourth quarter of 2025.
20 views
Daily Writeups
⤷ Title: GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 02:29:13 GMT
════════════════════════
⌗ Tags: #attack_surface_management #ssrf #cve_2021_39935 #gitlab #threat_intelligence
Medium
GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
In early February 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2021–39935, a Server-Side Request…
27 views
Daily Writeups
⤷ Title: What Is A Subdomain And How To Perform Subdomain Enumaration?
════════════════════════
𐀪 Author: Kutay Söker
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 20:22:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_penetration_testing #attack_surface_management #subdomains_enumeration #penetration_testing
Medium
What Is A Subdomain And How To Perform Subdomain Enumaration?
Hi! Today we will talk about domains, subdomains and subdomain enumaration. If want to understand what the subdmains are we have to get to…
30 views
Daily Writeups
⤷ Title: Massive SonicWall Reconnaissance Campaign Signals Imminent Ransomware Strikes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Feb 2026 01:23:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Akira ransomware #Attack surface mapping #CVE_2024_53704 #Fog Ransomware #GreyNoise #infosec #reconnaissance #SonicOS #SonicWall #SSL VPN #threat intelligence
Daily CyberSecurity
Massive SonicWall Reconnaissance Campaign Signals Imminent Ransomware Strikes
GreyNoise detects a coordinated surge in SonicWall reconnaissance. With over 84,000 scans, attackers are mapping VPNs for Akira and Fog ransomware strikes.
31 views
Daily Writeups
⤷ Title: 9 Powerful Attack Surface Management Checks Before a Pentest
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Sun, 08 Mar 2026 10:18:16 GMT
════════════════════════
⌗ Tags: #penetration_testing #appsec #cloud_security #attack_surface_management #cybersecurity
Medium
9 Powerful Attack Surface Management Checks Before a Pentest
Modern attackers don’t “start hacking” when they find a vulnerability. They start earlier — by building a map of everything you expose to…
42 views
Daily Writeups
⤷ Title: Attack Surface Drift Between Pentests
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 09:10:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #cloud_security #attack_surface_management #cybersecurity #api_security
Medium
Attack Surface Drift Between Pentests
Attack Surface Drift: Why Your Security Posture Changes Faster Than Your Last Pentest
11 views
Daily Writeups
⤷ Title: Attack Surface Management (ASM): Kendi Varlıklarını Bir Hacker Gibi İzle
════════════════════════
𐀪 Author: Fatih UYSAL
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 14:12:11 GMT
════════════════════════
⌗ Tags: #web_app_security #pentesting #bug_bounty #cybersecurity #attack_surface_management
Medium
Attack Surface Management (ASM): Kendi Varlıklarını Bir Hacker Gibi İzle
Gölge BT’den Subdomain Takeover’a: Görünmeyeni Yönetmek ve Korumak
18 views
Daily Writeups
⤷ Title: VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:20:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Attack Surface Management #Cisco Catalyst Zero Day #CVE_2026_20182 #NGINX CVE_2026_42945 #Probllama CVE_2024_37032 #ProFTPD SQL Injection #threat intelligence 2026 #UAT_8616 #VulnCheck Report #WordPress Security
Penetration Testing Tools
VulnCheck Warns of Active Cisco Zero-Day and Massive Server Exploitation Wave
A constellation of severe vulnerabilities sweeping across ubiquitous server frameworks and third-party extensions has emerged as the focal
17 views
Daily Writeups
⤷ Title: Attackers Already Have a Map of Your Network. Do You?
════════════════════════
𐀪 Author: Himanshu Dhiman
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 15:46:36 GMT
════════════════════════
⌗ Tags: #infosec #attack_surface_management #cloud_security #cybersecurity #vulnerability_management
Medium
Attackers Already Have a Map of Your Network. Do You?
Attack Surface Management is the discipline of seeing your company the way the internet already sees it — and closing the gap before…
14 views
Daily Writeups
⤷ Title: Reconnaissance: The Attack You Don’t See Coming — and the Defence You’re Not Building
════════════════════════
𐀪 Author: Rubakrishnawork
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 11:47:34 GMT
════════════════════════
⌗ Tags: #osint #penetration_testing #cybersecurity #reconnaissance #attack_surface_management
Medium
Reconnaissance: The Attack You Don’t See Coming — and the Defence You’re Not Building
How adversaries map your organization before you know they’re watching — and how defenders can flip the script
13 views
Daily Writeups
⤷ Title: Uncovering the Favicon Attack Surface
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 13:51:54 +0000
════════════════════════
⌗ Tags: #Vulnerability #attack surface #cybersecurity #Favicon #Shodan #threat intelligence
Information Security News
Uncovering the Favicon Attack Surface
The tiny image beside a browser tab reveals surprisingly profound server details. A resourceful security expert engineered a brilliant artificial intelligence framework. This system scrutinized mi…
10 views
Daily Writeups
⤷ Title: How to Inventory and Lock Down the API Surfaces on Your Network Appliances
════════════════════════
𐀪 Author: Anthony Bahn
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:59:46 GMT
════════════════════════
⌗ Tags: #attack_surface_management #api_security #network_appliance #cybersecurity #access_control_list
Medium
How to Inventory and Lock Down the API Surfaces on Your Network Appliances
Infrastructure ACLs only work if you know every listener an appliance exposes. Six steps to enumerate API surfaces, map their…
46 views
Daily Writeups
⤷ Title: Shadow IT: The Forgotten Assets Attackers Find First
════════════════════════
𐀪 Author: NullFortis
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 13:01:44 GMT
════════════════════════
⌗ Tags: #attack_surface_management #penetration_testing #cloud_security #information_security #cybersecurity
Medium
Shadow IT: The Forgotten Assets Attackers Find First
In cybersecurity, you can’t protect what you don’t know exists. In many organizations, there is a gap between the assets the security team…
28 views
Daily Writeups
⤷ Title: Surface Reduction: Push Down Negative Search Results — Smatchoicehackers.com
════════════════════════
𐀪 Author: SmatchoiceHackers Update
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 21:56:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #reputation_management #infosec #attack_surface_management #vulnerability_management
Medium
Surface Reduction: Push Down Negative Search Results — Smatchoicehackers.com
Surface Reduction
31 views
Daily Writeups
⤷ Title: What is API discovery and how do you find shadow APIs?
════════════════════════
𐀪 Author: Apiunderattack
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 17:54:26 GMT
════════════════════════
⌗ Tags: #api_security #appsec #devsecops #attack_surface_management #cybersecurity
Medium
What is API discovery and how do you find shadow APIs?
API discovery is the practice of finding every endpoint that answers requests in your estate, whether or not anyone documented it…
50 views
Daily Writeups
⤷ Title: Your Attack Surface Is Bigger Than Your IP Address
════════════════════════
𐀪 Author: Daniel Isaac E
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 17:55:19 GMT
════════════════════════
⌗ Tags: #reconnaissance #penetration_testing #cybersecurity #offensive_security #attack_surface_management
Medium
Your Attack Surface Is Bigger Than Your IP Address
What modern penetration testing actually starts with
24 views
Daily Writeups
⤷ Title: Defending Like Attackers Think: Lessons from the ASOS Breach
════════════════════════
𐀪 Author: Ciaran D
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 13:01:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #attack_surface_management
Medium
Defending Like Attackers Think: Lessons from the ASOS Breach
The recent cyber attack on ASOS has dominated headlines, and for good reason. With the BBC reporting a customer base of roughly 17 million…
15 views
Daily Writeups
⤷ Title: Your Attack Surface Is Telling a Story. Are You Paying Attention?
════════════════════════
𐀪 Author: Atanu Barua
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 04:55:05 GMT
════════════════════════
⌗ Tags: #mitre_attack #osint #recon #attack_surface_management
Medium
Your Attack Surface Is Telling a Story. Are You Paying Attention?
What a reconnaissance session taught me about OSINT, active recon, and the defender’s responsibility to control exposure.
40 views
Daily Writeups
⤷ Title: When a Cyberattack Reaches the Freezer
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 01:02:13 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #cybersecurity #attack_surface_management #cyberattack
Medium
When a Cyberattack Reaches the Freezer
A supermarket can keep its payment systems running, its website online, and its customer records intact while suffering a serious…
25 views
Daily Writeups
⤷ Title: Continuous Discovery and Reconciliation: Rethinking How We Understand the Modern Attack Surface
════════════════════════
𐀪 Author: Mohammad Koochaki
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:22:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #devsecops #application_security #security_culture #attack_surface_management
Medium
Continuous Discovery and Reconciliation: Rethinking How We Understand the Modern Attack Surface
Why understanding exposure requires more than periodic scans — and why discovery without reconciliation is only half the story.
9 views