Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: MCP Security: Strengthening Trust in the Model Context Protocol
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Fri, 03 Oct 2025 02:59:15 GMT
════════════════════════
⌗ Tags: #ai #information_technology #model_context_protocol #mcp_security #cybersecurity
Medium
MCP Security: Strengthening Trust in the Model Context Protocol
The rapid rise of large language models (LLMs) has unlocked new possibilities for automation, reasoning, and decision support. However, to…
11 views
Daily Writeups
⤷ Title: The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:29:13 +0000
════════════════════════
⌗ Tags: #Weekly Recap #AI Infrastructure #Apache ActiveMQ #CISA KEV #CVE_2026_21643 #cybersecurity #Fortinet #Legacy Software Security #MCP Security #Model Context Protocol #vulnerability management
Daily CyberSecurity
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 13 – April 19, 2026)
This week's digest: 1,214 new bugs, including active exploits on 2009 Excel fossils and critical 10.0 flaws in new AI/MCP infrastructure. Priority: Patch now.
15 views
Daily Writeups
⤷ Title: Abused an MCP Server to Perform Lateral Movement | Critical Finding | MCP Testing Methodology
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:04:36 GMT
════════════════════════
⌗ Tags: #mcp_security #penetration_testing #bug_bounty #ai_security #hackerone
Medium
SQL Injection on MCP Server to Information Disclosure| Critical Finding | MCP Testing Methodology
Hi everyone, in this article, I’ll talk about one of my recent assessments which invoked an MCP component.
17 views
Daily Writeups
⤷ Title: Abused an MCP Server to Perform Lateral Movement | Critical Finding | MCP Testing Methodology
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:04:37 GMT
════════════════════════
⌗ Tags: #mcp_security #penetration_testing #bug_bounty #ai_security #hackerone
Medium
SQL Injection on MCP Server to Information Disclosure| Critical Finding | MCP Testing Methodology
Hi everyone, in this article, I’ll talk about one of my recent assessments which invoked an MCP component.
17 views
Daily Writeups
⤷ Title: SQL Injection on MCP Server to Information Disclosure| Critical Finding | MCP Testing Methodology
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 07:04:37 GMT
════════════════════════
⌗ Tags: #mcp_security #penetration_testing #bug_bounty #ai_security #hackerone
Medium
SQL Injection on MCP Server to Information Disclosure| Critical Finding | MCP Testing Methodology
Hi everyone, in this article, I’ll talk about one of my recent assessments which invoked an MCP component.
26 views
Daily Writeups
⤷ Title: pentest-ai: The Open Source Pentest Tool That Proves Every Finding Before It Reports It
════════════════════════
𐀪 Author: Dr. Fadi Shaar
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 18:23:59 GMT
════════════════════════
⌗ Tags: #ai_security #mcp_security #application_security #ai #penetration_testing
Medium
pentest-ai: The Open Source Pentest Tool That Proves Every Finding Before It Reports It
pentest-ai: The Open Source Pentest Tool That Proves Every Finding Before It Reports It Security scanning tools have a trust problem. Not the tools themselves, but the relationship between security …
16 views
Daily Writeups
⤷ Title: Prompt Injection Is Just SSRF for Text. MCP Security → Part 3
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 14:30:16 GMT
════════════════════════
⌗ Tags: #ssrf #mcp_security #bug_bounty_tips #bug_bounty #prompt_injection_attack
Medium
Prompt Injection Is Just SSRF for Text | MCP Security → Part 3
The MCP Bug Bounty Guide · Part 3 of 5 — the mental model that makes MCP prompt injection click for a bug bounty hunter, with two real…
15 views
Daily Writeups
⤷ Title: Prompt Injection Is Just SSRF for Text | MCP Security → Part 3
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 14:30:16 GMT
════════════════════════
⌗ Tags: #ssrf #mcp_security #bug_bounty_tips #bug_bounty #prompt_injection_attack
Medium
Prompt Injection Is Just SSRF for Text | MCP Security → Part 3
The MCP Bug Bounty Guide · Part 3 of 5 — the mental model that makes MCP prompt injection click for a bug bounty hunter, with two real…
19 views
Daily Writeups
⤷ Title: MCP Security Testing Is a Launch Gate, Not a Prompt Test
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 06:17:17 GMT
════════════════════════
⌗ Tags: #llm_security #mcp_security #ai_security #penetration_testing #cybersecurity
Medium
MCP Security Testing Is a Launch Gate, Not a Prompt Test
Before an AI agent reaches customer records, cloud resources, ticketing, or internal workflows, leadership needs evidence that identity…
7 views
Daily Writeups
⤷ Title: 3 Hops to RCE. | MCP Security Part 4
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 17:14:55 GMT
════════════════════════
⌗ Tags: #ai_security #mcp_security #prompt_injection_attack #bug_bounty #rce
Medium
3 Hops to RCE. | MCP Security Part 4
The MCP Bug Bounty Field Guide · Part 4 of 5 — the full takeover chain, hop by hop, grounded in a real CVE’d exploit. And the single hop a…
9 views
Daily Writeups
⤷ Title: Terraform MCP Server Flaw CVE-2026-16498 Scores CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 14:11:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_14869 #CVE_2026_16496 #CVE_2026_16498 #HashiCorp #MCP Security #Terraform MCP Server
Daily CyberSecurity
Terraform MCP Server Flaw CVE-2026-16498 Scores CVSS 10.0
TL;DR HashiCorp patched three bugs in its Terraform MCP Server. The worst Terraform MCP Server flaw, CVE-2026-16498, earns a maximum 10.0 CVSS. All three can expose Terraform tokens in multi-user …
12 views
Daily Writeups
⤷ Title: OWASP MCP Top 10 Testing: What Buyers Should Require Before Production
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 06:31:57 GMT
════════════════════════
⌗ Tags: #owasp #cybersecurity #penetration_testing #mcp_security #ai_security
Medium
OWASP MCP Top 10 Testing: What Buyers Should Require Before Production
The framework is useful, but a defensible MCP assessment must test the real trust path across identities, tools, context, authorization…
22 views
Daily Writeups
⤷ Title: MCP Security Assessment Suite
════════════════════════
𐀪 Author: Saumya Kasthuri
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 14:04:58 GMT
════════════════════════
⌗ Tags: #mcp_security #mcp_server #ai #application_security #mcp_client
Medium
MCP Security Assessment Suite
How I Would Actually Test the MCP Layer in a Real AI Application
20 views