Daily Writeups
@Daily_Writeups
3.6K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.6K subscribers
Daily Writeups
⤷ Title: SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 23:48:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Breaking Logic with Timing: A Race Condition Case Study (with a Vibe )
════════════════════════
𐀪 Author: WarrenMu
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 20:54:19 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_writeup #bug_bounty #race_condition #bug_bounty_tips
Medium
Breaking Logic with Timing: A Race Condition Case Study (with a Vibe 🎧)
Before You Start
27 views
Daily Writeups
⤷ Title: Blind SSRF Leads to Internal Service and IP Discovery with Multiple Security Impacts
════════════════════════
𐀪 Author: Mohamed M Mourad
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 19:34:40 GMT
════════════════════════
⌗ Tags: #bug_bounty #pentesting
Medium
Blind SSRF Leads to Internal Service and IP Discovery with Multiple Security Impacts
While analyzing JavaScript files, I discovered an interesting endpoint that included a JSON field called signedUri. At first, directly…
24 views
Daily Writeups
⤷ Title: Enumerating Windows Process Creation Callbacks
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 20:47:44 GMT
════════════════════════
⌗ Tags: #hacking #malware #pentesting #cybersecurity #infosec
Medium
Enumerating Windows Process Creation Callbacks
Welcome to this new post. Today we’re going to look at how Windows tracks which drivers get notified every time a new process is created…
19 views
Daily Writeups
⤷ Title: The Vercel Hack of April 2026: A Wake-Up Call on Third-Party AI Integrations and “Plaintext”…
════════════════════════
𐀪 Author: Syed Talha Ahmed
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 20:06:35 GMT
════════════════════════
⌗ Tags: #hacking #vercel #artificial_intelligence #cybersecurity #software_development
Medium
The Vercel Hack of April 2026: A Wake-Up Call on Third-Party AI Integrations and “Plaintext”…
By someone spending over a decade in the trenches
21 views
Daily Writeups
⤷ Title: How to Triage a Phishing Alert Faster — Without Rebuilding the Process Every TimeMost phishing…
════════════════════════
𐀪 Author: Gaurav Kundu
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 20:15:28 GMT
════════════════════════
⌗ Tags: #blue_team #infosec #securityoperationscenter #security #cybersecurity
Medium
How to Triage a Phishing Alert Faster — Without Rebuilding the Process Every TimeMost phishing…
You get the alert.
24 views
Daily Writeups
⤷ Title: Heron Walkthought
════════════════════════
𐀪 Author: Xotourlif33
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 20:23:09 GMT
════════════════════════
⌗ Tags: #heron_walkthought #hackthebox #vulnlab #hackthebox_writeup
Medium
Heron Walkthought
Heron is a mini prolab by VulnLab involving ASREPRoasting, GPP password abuse, vhost discovery, RCE via web.config hijacking, lateral…
50 views
Daily Writeups
⤷ Title: Code Is Law Until It Isn’t: What Arbitrum’s Intervention Reveals About Crypto Governance
════════════════════════
𐀪 Author: Abraham
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 22:01:32 GMT
════════════════════════
⌗ Tags: #smart_contracts #blockchain #bug_bounty #cybersecurity #smart_contract_security
Medium
Code Is Law Until It Isn’t: What Arbitrum’s Intervention Reveals About Crypto Governance
The phrase “code is law” has long been a foundational belief in crypto. It suggests that once smart contracts are deployed, their outcomes…
29 views
Daily Writeups
⤷ Title: From Nmap to Neural Nets: Pentesting Just Leveled Up
════════════════════════
𐀪 Author: Achessa
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 21:29:51 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #information_technology
Medium
From Nmap to Neural Nets: Pentesting Just Leveled Up
Because apparently, even cybersecurity tools are tired of waiting for us to catch up.
35 views
Daily Writeups
⤷ Title: TryHackMe: Brains (Red Teaming)
════════════════════════
𐀪 Author: Evan Manson
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 22:34:02 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #red_team #cybersecurity
Medium
TryHackMe: Brains (Red Teaming)
Nmap scan shows open ports on 22, 90, and 50000. These are SSH and services for an Apache server.
35 views
Daily Writeups
⤷ Title: Microsoft Teams Exploited for Silent Enterprise Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 00:40:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Administrative Protocols #data exfiltration #infosec #lateral movement #Level RMM #Microsoft Defender #Microsoft Teams #Quick Assist #Rclone #social engineering #WinRM
Daily CyberSecurity
Microsoft Teams Exploited for Silent Enterprise Takeovers
Microsoft warns of a Teams campaign using fake IT support to hijack workstations via Quick Assist, move laterally with WinRM, and steal data using Rclone.
31 views
Daily Writeups
⤷ Title: Guide to SSTI (Server-Side Template Injection): Detection, Exploitation, and WAF Evasion
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #technology #bug_bounty #hacking
Medium
Guide to SSTI (Server-Side Template Injection): Detection, Exploitation, and WAF Evasion
Master SSTI, reconnaissance methodology, advanced fingerprinting, WAF evasion payloads, and impact escalation.
28 views
Daily Writeups
⤷ Title: When the Wiretap Becomes the Backdoor: Salt Typhoon and the Security Paradox at America’s Telecom…
════════════════════════
𐀪 Author: Kush Patel
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 23:39:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_kill_chain #cyberattack #salt_typhoon #hacking
Medium
When the Wiretap Becomes the Backdoor: Salt Typhoon and the Security Paradox at America’s Telecom Core
A deep-dive analysis of the most consequential nation-state intrusion in recent memory and what it reveals about the structural risks…
21 views
Daily Writeups
⤷ Title: HTTP Security Headers
════════════════════════
𐀪 Author: Khaled Anter
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 23:14:33 GMT
════════════════════════
⌗ Tags: #coding #penetration_testing #web_development #cybersecurity #software_development
Medium
HTTP Security Headers
Hello everyone!! In this article i will talk about some security headers. I wrote this for people like me who get confused when they see…
19 views
Daily Writeups
⤷ Title: LLM Security (THM) Tryhackme Walkthrough and Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 23:37:08 GMT
════════════════════════
⌗ Tags: #llm #tryhackme #cybersecurity #artificial_intelligence #llm_security
Medium
LLM Security (THM) Tryhackme Walkthrough and Answer
Description : Understand LLMs as an attack surface and get an overview of LLM security threats.
17 views
Daily Writeups
⤷ Title: Ethical Hacking Skills That Matter: What Modern Security Certifications Really Test
════════════════════════
𐀪 Author: IPSpecialist
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 23:15:30 GMT
════════════════════════
⌗ Tags: #it_certification #cybersecurity #network_security #cloud_security #ethical_hacking
Medium
Ethical Hacking Skills That Matter: What Modern Security Certifications Really Test
Introduction
20 views
Daily Writeups
⤷ Title: Blind SQL injection with conditional errors
════════════════════════
𐀪 Author: Bea Dela Cruz
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 00:02:19 GMT
════════════════════════
⌗ Tags: #blind_sql_injection #conditional_error #sql_injection
Medium
Blind SQL injection with conditional errors
The website application does not return query results but instead reveals information through an error response
18 views
Daily Writeups
⤷ Title: Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 02:51:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Atlassian #Bamboo #CI/CD security #CVE_2026_21571 #DevOps #infosec #os command injection #Patch Alert #rce #Supply Chain
Daily CyberSecurity
Critical RCE Alert: Bamboo Data Center Vulnerable to OS Command Injection
Atlassian Bamboo Data Center hit by critical 9.4 RCE (CVE-2026-21571). Attackers can hijack your build pipeline. Secure your supply chain—patch now!
22 views
Daily Writeups
⤷ Title: Emergency .NET Update: Critical Data Protection Flaw Allows Authentication Forgery
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 02:21:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #.NET 10 #ASP.NET Core #Authentication Bypass #CVE_2026_40372 #Data Protection #infosec #Key Rotation #Linux Security #macOS #Microsoft #privilege escalation
Daily CyberSecurity
Emergency .NET Update: Critical Data Protection Flaw Allows Authentication Forgery
Microsoft's OOB update for .NET 10 (CVE-2026-40372) hits Linux/macOS users. Authentication is at risk. Stop the bypass and rotate your keys today.
12 views
Daily Writeups
⤷ Title: 7 Critical Vulnerabilities Threaten Spring Security 7.0
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:54:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authorization Bypass #CVE_2026_22752 #infosec #Java security #JWT Security #Patch Alert #Spring Security #Spring Security 7.0 #ssrf #TOCTOU #X.509 Impersonation
Daily CyberSecurity
7 Critical Vulnerabilities Threaten Spring Security 7.0
The Spring Security team has issued a series of security advisories detailing seven distinct vulnerabilities impacting the widely used authentication and authorization framework. While several fla…
15 views
Daily Writeups
⤷ Title: The Intel “AppDomain” Hijack: Unmasking a Sophisticated Post-Exploitation Framework
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:26:54 +0000
════════════════════════
⌗ Tags: #Malware #AppDomain Manager Hijacking #Cobalt Strike #Cyfirma #DLL hijacking #Domain Fronting #Financial Sector Security #IAStorHelp.exe #infosec #intel #JIT Trampolining #Memory Forensics #post_exploitation framework
Daily CyberSecurity
The Intel "AppDomain" Hijack: Unmasking a Sophisticated Post-Exploitation Framework
CYFIRMA uncovers an elite stealth framework hijacking signed Intel utilities via AppDomain Manager. It targets EMEA finance with undetectable memory-only code.
14 views