Daily Writeups
@Daily_Writeups
3.65K subscribers
4 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.65K subscribers
Daily Writeups
⤷ Title: Active Directory for Pentesters — Part 2: Active Directory Enumeration
════════════════════════
𐀪 Author: Azzam Mohammed (WHHacker)
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 22:01:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #windows #ethical_hacking #penetration_testing #active_directory
Medium
Active Directory for Pentesters — Part 2: Active Directory Enumeration
In the previous article, we explored the fundamental concepts of Active Directory, including domains, domain controllers, forests, trees…
19 views
Daily Writeups
⤷ Title: I Spent 15 Years in Cybersecurity. Here’s Why AI Is Finally Changing Penetration Testing for Real.
════════════════════════
𐀪 Author: Viktor
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 21:24:15 GMT
════════════════════════
⌗ Tags: #ai #vibe_coding #security #ai_agent #penetration_testing
Medium
I Spent 15 Years in Cybersecurity. Here’s Why AI Is Finally Changing Penetration Testing for Real.
Let me start with an honest confession: I was skeptical about AI in security for a long time.
18 views
Daily Writeups
⤷ Title: I Was Told to Try to Break a “Proprietary AI.” It Took Five Minutes.
════════════════════════
𐀪 Author: Leah Manoni
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 21:02:40 GMT
════════════════════════
⌗ Tags: #ai_in_business #llm_applications #artificial_intelligence #ai_agent #penetration_testing
Medium
I Was Told to Try to Break a “Proprietary AI.” It Took Five Minutes.
What a real-world penetration test taught me about what businesses misunderstand about AI and why
32 views
Daily Writeups
⤷ Title: The Ultimate Guide to HTTPS Decryption in Wireshark: Master Secrets, Key Logs & SNI Explained (With…
════════════════════════
𐀪 Author: Mohamed Mostafa Sayed Saber Ali
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 22:59:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #networking #cryptography #encryption #ethical_hacking
Medium
The Ultimate Guide to HTTPS Decryption in Wireshark: Master Secrets, Key Logs & SNI Explained (With Real Examples)
Everything you need to know about decrypting HTTPS traffic: from theory to hands-on with real key log files and PCAP analysis
33 views
Daily Writeups
⤷ Title: Hacking the “Republic of Valdoria”: Chaining IDOR, Cryptography Cracking, and JWT Bypass in a…
════════════════════════
𐀪 Author: 0xPedrop
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 00:43:42 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_security #ethical_hacking #penetration_testing #cybersecurity
Medium
Hacking the “Republic of Valdoria”: Chaining IDOR, Cryptography Cracking, and JWT Bypass in a Technical Assessment
The offensive security ecosystem teaches us a golden rule: the weakest link is almost never a complex zero-day vulnerability, but rather…
34 views
Daily Writeups
⤷ Title: SANS 542 and GWAPT..Worth?
════════════════════════
𐀪 Author: 0ber1n
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 00:47:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #web_application_security #gwapt #san
Medium
SANS 542 and GWAPT..Worth?
The GIAC Worth Scale (Thanks Gemini)
30 views
Daily Writeups
⤷ Title: The War Did Not Create This Problem. It Just Turned On the Lights.
════════════════════════
𐀪 Author: Michael Reichstein
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 00:09:22 GMT
════════════════════════
⌗ Tags: #critical_infrastructure #information_technology #operational_technology #cybersecurity #hacking
Medium
The War Did Not Create This Problem. It Just Turned On the Lights.
OT security in 2026; why your physical world is running on cybersecurity assumptions from a decade ago, and why that matters right now.
24 views
Daily Writeups
⤷ Title: CrimeWare + IA
════════════════════════
𐀪 Author: Adrian Romanov
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #ai #hacking #true_crime #agentic_ai #inteligencia_artificial
Medium
CrimeWare + IA
Cuando la inteligencia artificial se convierte en el mejor socio del crimen digital.
23 views
Daily Writeups
⤷ Title: Industrial Control System (ICS) Honeypot Lab: Simulating and Analyzing Attacker Reconnaissance with…
════════════════════════
𐀪 Author: Mohamed Mostafa Sayed Saber Ali
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 23:02:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #ethical_hacking #industrial_control_system #honeypot
Medium
Industrial Control System (ICS) Honeypot Lab: Simulating and Analyzing Attacker Reconnaissance with Conpot
A hands-on guide to deploying Conpot, exposing ICS protocols, and analyzing attacker reconnaissance with Nmap and Wireshark
34 views
Daily Writeups
⤷ Title: The Typosquatting Trap: Fake Telegram Portal Delivers Stealthy Memory-Resident Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:03:28 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #infosec #Malware Analysis #Memory_Resident Payload #reflective loading #social engineering #Telegram malware #threat intelligence #Typosquatting #Windows Defender Bypass
Daily CyberSecurity
The Typosquatting Trap: Fake Telegram Portal Delivers Stealthy Memory-Resident Malware
Researchers uncover a fake Telegram site distributing stealthy, memory-resident malware that bypasses Windows Defender. Always verify your download URLs.
29 views
Daily Writeups
⤷ Title: Critical Quest KACE Flaw Exploited for Total Network Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:02:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arctic Wolf #Authentication Bypass #CVE_2025_32975 #cybersecurity #Endpoint Management #infosec #network_security #Patch Alert #Quest KACE #Vulnerability
Daily CyberSecurity
Critical Quest KACE Flaw Exploited for Total Network Takeover
Arctic Wolf warns that hackers are actively exploiting a critical Quest KACE vulnerability (CVE-2025-32975) to completely take over enterprise networks.
15 views
Daily Writeups
⤷ Title: Hijacked Accounts and AI Code: The Deadly New Playbook of Iranian APT ‘Boggy Serpens’
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 01:00:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI_Generated Code #Boggy Serpens #Cyberespionage #cybersecurity #Hijacked Accounts #Iranian APT #phishing #Rust malware #threat intelligence #Unit 42
Daily CyberSecurity
Hijacked Accounts and AI Code: The Deadly New Playbook of Iranian APT 'Boggy Serpens'
Unit 42 reveals Iranian APT Boggy Serpens is weaponizing hijacked accounts, AI-generated code, and Rust malware to infiltrate critical infrastructure.
16 views
Daily Writeups
⤷ Title: Day 64 of Reading Cybersecurity — Keygenning & Reverse Engineering (CyberDucky )
════════════════════════
𐀪 Author: CyberDucky
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:27:56 GMT
════════════════════════
⌗ Tags: #reverse_engineering #reading #cybersecurity #hacking
Medium
Day 64 of Reading Cybersecurity — Keygenning & Reverse Engineering (CyberDucky )
Today marks Day 64 of my cybersecurity reading challenge — committing to 15 minutes a day focused on offensive security, reverse…
20 views
Daily Writeups
⤷ Title: Kyubi — VulnNyx Writeup |Written by Atrox
════════════════════════
𐀪 Author: _ATROX_
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:32:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #vulnyx #cybersecurity
Medium
Kyubi — VulnNyx Writeup |Written by Atrox
Gitea · Git Hook RCE · Grafana LFI · Redis · GameOver(lay)
21 views
Daily Writeups
⤷ Title: How I Started Learning Performance Testing with JMeter (From Zero Experience)
════════════════════════
𐀪 Author: Yorn Rothy
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:07:51 GMT
════════════════════════
⌗ Tags: #software_development #qa #software_engineering #penetration_testing #software_testing
Medium
🚀 How I Started Learning Performance Testing with JMeter (From Zero Experience)
I want to share my journey learning performance testing using JMeter.
28 views
Daily Writeups
⤷ Title: THM: Expose
════════════════════════
𐀪 Author: Murad Salem
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:06:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #privilege_escalation #tryhackme #linux #cybersecurity
Medium
THM: Expose
1. Room Information
31 views
Daily Writeups
⤷ Title: Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:13:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_22735 #CVE_2026_22737 #cybersecurity #infosec #Java security #patch management #Spring Framework #Spring MVC #Spring WebFlux #Vulnerability
Daily CyberSecurity
Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
Researchers found two flaws in Spring Framework (CVE-2026-22737 & CVE-2026-22735) allowing path bypasses and stream corruption. Patch your apps today.
30 views
Daily Writeups
⤷ Title: Urgent Patch: Massive Google Chrome Update Patches 26 Flaws, Including 3 Critical Bugs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:03:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Critical Vulnerabilities #CVE_2026_4439 #cybersecurity #google chrome #infosec #Patch Alert #security update #V8 Engine #WebGL
Daily CyberSecurity
Urgent Patch: Massive Google Chrome Update Patches 26 Flaws, Including 3 Critical Bugs
Google releases an urgent Chrome update patching 26 security flaws, including 3 critical WebGL and Base vulnerabilities. Update to version 146 today.
19 views
Daily Writeups
⤷ Title: IDOR in a JWT-Protected Card Viewer API | CodeReviewLab Writeup
════════════════════════
𐀪 Author: Zaid Arif
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 03:59:48 GMT
════════════════════════
⌗ Tags: #idor #source_code_review #code_review #bug_bounty
Medium
IDOR in a JWT-Protected Card Viewer API | CodeReviewLab Writeup
Secure code review, for AppSec engineers, is in many ways our version of LeetCode. It’s not about solving well-defined problems, but about…
22 views
Daily Writeups
⤷ Title: How to do DCSync Attack
════════════════════════
𐀪 Author: Zoroya
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 03:51:45 GMT
════════════════════════
⌗ Tags: #active_directory #ethical_hacking #technology #cybersecurity #hacking
Medium
How to do DCSync Attack
The DCSync Attack is one of the powerful attack technique in Active Directory that allow an attacker to impersonate as a Domain Controller…
31 views
Daily Writeups
⤷ Title: What is a Man-in-the-middle(MITM) Attack? Networking — Day 12
════════════════════════
𐀪 Author: 0xSmit
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:34:26 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #technology #web_development #information_security
Medium
What is a Man-in-the-middle(MITM) Attack? Networking — Day 12
A Man-in-the-Middle Attack happens when an attacker secretly intercepts communication between two parties. The attacker can read, steal, or…
24 views