Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Dev Diaries | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 06:27:31 GMT
════════════════════════
⌗ Tags: #github #tryhackme_walkthrough #tryhackme_writeup #git #tryhackme
Medium
Dev Diaries | TryHackMe | Walkthrough
What is the subdomain where the development version of the website is hosted?
11 views
Daily Writeups
⤷ Title: The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 01:00:22 +0000
════════════════════════
⌗ Tags: #Malware #DPRK #Git History #github #infosec #Lazarus Group #malware #North Korea #PolinRider #supply chain attack #TasksJacker #VS Code Extensions
Daily CyberSecurity
The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware
Security researchers from the OpenSourceMalware (OSM) team have uncovered a massive and rapidly expanding threat campaign targeting the heart of the developer ecosystem. The actor, dubbed PolinRid…
15 views
Daily Writeups
⤷ Title: Committed Sensitive Code Writeup
════════════════════════
𐀪 Author: Dreaith
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 04:46:35 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme #git_commit #thm #committed
Medium
Committed Sensitive Code Writeup
“Wait, did I just push the flag to GitHub?” In this TryHackMe CTF challenge, a developer accidentally committed sensitive code ,but forgot…
14 views
Daily Writeups
⤷ Title: Git Push to Root: AI-Augmented Research Uncovers Critical GitHub RCE (CVE-2026-3854)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 23:57:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Reverse Engineering #Backend Security #CVE_2026_3854 #GHES #git #github #infosec #rce #Remote Code Execution #Vulnerability #Wiz Research #X_Stat Header
Daily CyberSecurity
Git Push to Root: AI-Augmented Research Uncovers Critical GitHub RCE (CVE-2026-3854)
Wiz Research reveals CVE-2026-3854, a critical GitHub RCE. One git push could expose millions of repos. GHES users must patch to v3.19.3 immediately.
11 views
Daily Writeups
⤷ Title: The Poisoned Push: How a Hidden Flaw in Git Metadata Exposed GitHub to Remote Code Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 07:12:15 +0000
════════════════════════
⌗ Tags: #Vulnerability #bug bounty #CVE_2026_3854 #Cybersecurity 2026 #Git Push #Github #GitHub Enterprise Server #Infrastructure Security #RCE #remote code execution #Wiz Research
Penetration Testing Tools
The Poisoned Push: How a Hidden Flaw in Git Metadata Exposed GitHub to Remote Code Execution
The seemingly mundane git push command has emerged as a significantly more treacherous vector than conventionally presumed. A
12 views
Daily Writeups
⤷ Title: Local Code Execution via Git Workspace Poisoning (FSMonitor)
════════════════════════
𐀪 Author: X3r0Day
════════════════════════
ⴵ Time: Tue, 05 May 2026 20:50:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #git #github #programming
Medium
Local Code Execution via Git Workspace Poisoning (FSMonitor)
Why blindly unzipping code into your IDE might be more dangerous than you think.
26 views
Daily Writeups
⤷ Title: Git Version Control in Bug Bounty Hunting + Note Tracking with Obsidian: The Organization Framework…
════════════════════════
𐀪 Author: MD Mehedi Hasan
════════════════════════
ⴵ Time: Sat, 09 May 2026 07:32:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #git #bug_bounty #obsidian
Medium
Git Version Control in Bug Bounty Hunting + Note Tracking with Obsidian: The Organization Framework Every Hacker Needs
If you’ve been bug hunting for more than a few weeks, you’ve been there. You find a promising endpoint, chain it with a parameter you…
38 views
Daily Writeups
⤷ Title: Digging Up the Dead: Disk Forensics & Git Object Archaeology (PicoCTF Walkthrough)
════════════════════════
𐀪 Author: SAFAL GAUTAM
════════════════════════
ⴵ Time: Sat, 16 May 2026 16:47:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #digital_forensics #git #hacking
Medium
Digging Up the Dead: Disk Forensics & Git Object Archaeology (PicoCTF Walkthrough)
Most people think of Git as a version control tool. CTF players think of it as a crime scene.
22 views
Daily Writeups
⤷ Title: Proactive Vulnerability Mitigation: Anthropic Integrates Security Guardrails into Claude Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:19:11 +0000
════════════════════════
⌗ Tags: #Technology #Anthropic security_guidance extension #automated SAST developer tool #background threat pattern analysis #Claude Agent SDK integration #Claude Code security plugin #custom security policy YAML #git diff vulnerability scanning #real_time AI code auditing #secure coding practices #terminal vulnerability annotations
Information Security News
Claude Code Security Plugin: Real-Time AI Code Auditing
Anthropic launches a native Claude Code security plugin. Learn how this real-time AI security-guidance tool checks your code for bugs before you commit.
14 views
Daily Writeups
⤷ Title: Zero-Day Exploitation: Rapid7 Exposes Remote Code Execution Vulnerability in Gogs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:36:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #branch name command injection payload #git rebase exec flag exploit #Gogs alternative to GitLab GitHub #Gogs argument injection vulnerability #Jonah Burgess Rapid7 Labs discovery #open registration app.ini security risk #Rapid7 vulnerability disclosure policy timeline #self_hosted source code management exploit #software supply chain repository compromise #unpatched self_hosted Git RCE
Information Security News
Gogs Argument Injection Vulnerability Grants Server RCE
Rapid7 discloses an unpatched Gogs argument injection vulnerability. Learn how a malicious branch name in a git rebase pull request grants full server RCE.
13 views
Daily Writeups
⤷ Title: Public Exploits Released for Three Gogs RCE Flaws, CVSS Up to 10
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 02:00:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_52813 #Git hooks #Gogs #Gogs RCE vulnerability #Path Traversal #proof_of_concept exploit #rce #self_hosted Git
Daily CyberSecurity
Public Exploits Released for Three Gogs RCE Flaws, CVSS Up to 10
Public proof-of-concept code targets three Gogs RCE vulnerabilities scoring up to CVSS 10. Update self-hosted Gogs to version 0.14.3 right now.
12 views
Daily Writeups
⤷ Title: AdaptixC2 Explained: Understanding Modern Command-and-Control Frameworks from a Defender’s…
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 01:17:16 GMT
════════════════════════
⌗ Tags: #hacking #web_development #cybersecurity #bug_bounty #git
Medium
AdaptixC2 Explained: Understanding Modern Command-and-Control Frameworks from a Defender’s…
Why Security Professionals Should Understand Modern C2 Frameworks
113 views
Daily Writeups
⤷ Title: I Built a Git Repository Without Using Git (or GitHub): A Hacker’s POV
════════════════════════
𐀪 Author: Indigo Shadow
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 04:45:12 GMT
════════════════════════
⌗ Tags: #ethical_hacking #git_objects #git_inner_workings #git_behind_the_scenes #build_git_repo_python
Medium
I Built a Git Repository Without Using Git (or GitHub): A Hacker’s POV
Anyone who has done anything IT-related would have heard of GitHub, especially software developers. It is a version control system, that…
38 views
Daily Writeups
⤷ Title: HackTheBox Walkthrough — Nexus
════════════════════════
𐀪 Author: Indigo Shadow
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 05:51:01 GMT
════════════════════════
⌗ Tags: #git_repo_escape #ethical_hacking #htb_walkthrough_nexus #file_upload_vulnerability #git_objects
Medium
HackTheBox Walkthrough — Nexus
#Linux #HTBWalkthrough #HTBNexus #FileUpload #Gitea #Gobuster #fuff #subdomainEnumeration #GitPathTraversal #GitObjects
38 views
Daily Writeups
⤷ Title: Hacker Holidays — Day 2: What I Learned from “Room 404”
════════════════════════
𐀪 Author: Jitu Sah
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 17:34:32 GMT
════════════════════════
⌗ Tags: #web_security #tryhackme #ethical_hacking #git #cybersecurity
Medium
Hacker Holidays — Day 2: What I Learned from “Room 404”
Today, I completed Day 2 of the Hacker Holidays event on TryHackMe. The room, Room 404, taught me an important web security concept called…
4 views
Daily Writeups
⤷ Title: Room 404 — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 17:22:07 GMT
════════════════════════
⌗ Tags: #web_security #directory_enumeration #web_design #tryhackme #git
Medium
Room 404 — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
12 views
Daily Writeups
⤷ Title: Room 404 | TryHackMe Write-up
════════════════════════
𐀪 Author: Abdelrahman Ahmed Saad
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 18:54:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #git #tryhackme #web_security #penetration_testing
Medium
Room 404 | TryHackMe Write-up
Platform: TryHackMe Event: Hacker Holidays 2026 Category: Web Difficulty: Easy Severity: Medium Target: Byte Lotus Guest Experience…
4 views
Daily Writeups
⤷ Title: Room 404 TryHackMe walkthrough
════════════════════════
𐀪 Author: Crystalcascade14
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 21:20:12 GMT
════════════════════════
⌗ Tags: #hacker_holidays_2026 #room_404 #tryhackme #git_repositories #tryhackme_walkthrough
Medium
Room 404 TryHackMe walkthrough
The Room 404 is the Day 2 challenge of TryHackMe’s Hacker Holidays, where we were presented with a web application running on port 8080.
5 views
Daily Writeups
⤷ Title: Gitea RCE Flaw CVE-2026-60004 (CVSS 9.8): Details and PoC Exploit Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 07:59:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60004 #diffpatch #Git Hook #Gitea #go #rce #Remote Code Execution
Daily CyberSecurity
Gitea RCE Flaw CVE-2026-60004 (CVSS 9.8): Details and PoC Exploit Publicly Disclosed
TL;DR A critical Gitea RCE flaw now has public details and a proof-of-concept exploit. Tracked as CVE-2026-60004, it scores a CVSS of 9.8. A user with repository write access can run shell command…
7 views
Daily Writeups
⤷ Title: TryHackMe Room 404 Writeup: Complete Walkthrough of the Byte Lotus Hotel Challenge
════════════════════════
𐀪 Author: A. AntorCSE404
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 18:09:52 GMT
════════════════════════
⌗ Tags: #git #hacking #tryhackme #cybersecurity #programming
Medium
TryHackMe Room 404 Writeup: Complete Walkthrough of the Byte Lotus Hotel Challenge
Hey everyone! 👋
Welcome back to another TryHackMe write-up. In this write-up, we’ll explore Room 404, a mystery-themed challenge from the…
10 views