Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: Authentication bypass via unauthenticated JWT generation on a telecom provider
════════════════════════
𐀪 Author: Amrgomaa
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 23:39:11 GMT
════════════════════════
⌗ Tags: #penetration_testing #shodan #bug_bounty_writeup #bug_bounty #jwt
Medium
Authentication bypass via unauthenticated JWT generation on a telecom provider
How a hardcoded Lambda URL in a JS bundle led to admin token generation with no credentials required — and a full chain to AWS credential…
17 views
Daily Writeups
⤷ Title: Day 9: How I Bypassed Double CSRF Token Validation Using Only an IMG Tag
════════════════════════
𐀪 Author: zero_day
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 23:21:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #bug_bounty_writeup #penetration_testing #bug_bounty_tips
Medium
Day 9: How I Bypassed Double CSRF Token Validation Using Only an IMG Tag
When the server checks if two tokens match but forgets to check if they’re valid.
15 views
Daily Writeups
⤷ Title: ARP poisoning and man-in-the-middle attacks
════════════════════════
𐀪 Author: Ilgar Alakbarov
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 23:45:15 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #networking
Medium
ARP poisoning and man-in-the-middle attacks
The Invisible Handshake
10 views
Daily Writeups
⤷ Title: Threat Actors: Who is Targeting Your Network?
════════════════════════
𐀪 Author: Mahdi
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 23:24:30 GMT
════════════════════════
⌗ Tags: #hacker #infosec #programming #hacking #cybersecurity
Medium
Threat Actors: Who is Targeting Your Network?
In the world of Blue teaming, knowing your enemy is very important. We can gain some information about the attacker by analyzing their…
14 views
Daily Writeups
⤷ Title: ServMon | HackTheBox | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 23:13:01 GMT
════════════════════════
⌗ Tags: #technology #hacking #ctf #tech #oscp
Medium
ServMon | HackTheBox | OSCP Preparation
Got halfway through this one and left it on the back burner for a while; definitely a fun box. Helps you understand how to chain LFI into…
15 views
Daily Writeups
⤷ Title: Advanced Nmap — SMB Enumeration, OS Detection & Suspicious PHP Files
════════════════════════
𐀪 Author: Juan Manuel Yepes
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 00:46:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #penetration_testing #nmap
Medium
Advanced Nmap — SMB Enumeration, OS Detection & Suspicious PHP Files
The first scan maps the surface. The second scan goes deeper: scripted SMB enumeration, OS fingerprinting, workgroup discovery, and hunting…
15 views
Daily Writeups
⤷ Title: Hacking Clankers Market b01lers CTF Writeup
════════════════════════
𐀪 Author: S0n1c_404
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 00:01:34 GMT
════════════════════════
⌗ Tags: #penetration_testing #capture_the_flag #ethical_hacking_python #cybersecurity_ctf_web
Medium
Hacking Clankers Market b01lers CTF Writeup
وَقُل رَّبِّ زِدْنِي عِلْمًا” — [طه: 114]
11 views
Daily Writeups
⤷ Title: What is a Shell?
════════════════════════
𐀪 Author: 7FINGER-KNIGHT-HACK
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 23:52:06 GMT
════════════════════════
⌗ Tags: #life_hacking #cyberattack #penetration_testing #reverse_shell #cybersecurity
Medium
What is a Shell?
The Silent Gateway Between You and the Machine
13 views
Daily Writeups
⤷ Title: AI Security Path- TryHackMe- Module 2(Part 1)
════════════════════════
𐀪 Author: Swarupa Jeedimetla
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 00:11:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #tryhackme #ai_security
Medium
AI Security Path- TryHackMe- Module 2(Part 1)
Think of traditional software like a calculator predictable, rule-bound, and easy to trace when something goes wrong. Now compare that to…
18 views
Daily Writeups
⤷ Title: Securing Cloud APIs in Azure: Detecting and Preventing Token Replay Using Identity and Context with…
════════════════════════
𐀪 Author: Prasoon Mathur
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 23:50:18 GMT
════════════════════════
⌗ Tags: #api_security #cloud_security #cybersecurity #azure #zero_trust
Medium
Securing Cloud APIs in Azure: Detecting and Preventing Token Replay Using Identity and Context with…
A practical lab demonstrating how valid tokens can be misused and how context-based controls enforce Zero Trust at the API gateway
24 views
Daily Writeups
⤷ Title: CVE-2026-33626: High-Severity SSRF Exploited in the Wild to Hijack AI Inference Engines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:37:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #Cloud Security #CVE_2026_33626 #Cyber Defense #IMDSv2 #InternVL2 #LLM Inference #LMDeploy #Qwen2_VL #Server_Side Request Forgery #ssrf #Sysdig TRT
Daily CyberSecurity
CVE-2026-33626: High-Severity SSRF Exploited in the Wild to Hijack AI Inference Engines
CVE-2026-33626: A critical SSRF in LMDeploy exploited in under 13 hours. Learn how attackers hijack AI nodes and how to secure your inference cloud now.
20 views
Daily Writeups
⤷ Title: TeamPCP Hijacks Checkmarx in Sprawling Supply Chain Strike
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:19:36 +0000
════════════════════════
⌗ Tags: #Malware #Checkmarx #Credential Theft #cybersecurity #docker #GitHub Actions #infosec #Malware Analysis #npm #supply chain attack #TeamPCP #VS Code
Daily CyberSecurity
TeamPCP Hijacks Checkmarx in Sprawling Supply Chain Strike
Checkmarx Docker images and VS Code extensions hijacked by TeamPCP to siphon cloud secrets and spread via npm. Audit your "Dune" repositories today.
27 views
Daily Writeups
⤷ Title: Supply Chain Alert: TeamPCP Strikes Popular AI Framework Xinference
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:13:16 +0000
════════════════════════
⌗ Tags: #Malware #AWS #Azure #Cloud Security #Credential Theft #GCP #Kubernetes #MLOps Security #PyPI #Python Security #supply chain attack #TeamPCP #Xinference
Daily CyberSecurity
Supply Chain Alert: TeamPCP Strikes Popular AI Framework Xinference
Critical supply chain attack hits Xinference (v2.6.0-2.6.2). TeamPCP’s malware siphons cloud credentials and MLOps secrets. Audit your MLOps pipeline today.
23 views
Daily Writeups
⤷ Title: PureRAT Unmasked: The Stealthy, Multi-Stage “Dynamic Loader” Targeting Windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:00:16 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Fileless Malware #infosec #Malware Analysis #Process Hollowing #PureRAT #rat #Remote Access Trojan #steganography #Trellix #UAC bypass
Daily CyberSecurity
PureRAT Unmasked: The Stealthy, Multi-Stage "Dynamic Loader" Targeting Windows
Trellix uncovers PureRAT, a modular Trojan hiding malware in PNG images. Learn how it uses steganography and fileless delivery to bypass Windows security.
19 views
Daily Writeups
⤷ Title: Microsoft Defender Zero-Day “BlueHammer” Hits KEV Catalog Following Researcher’s Protest
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 01:53:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BlueHammer #CISA KEV #CVE_2026_33825 #Huntress Labs #infosec #Local Privilege Escalation #LPE #Microsoft Defender #Microsoft Security #RedSun #SAM Database #TOCTOU #UnDefend
Daily CyberSecurity
Microsoft Defender Zero-Day "BlueHammer" Hits KEV Catalog Following Researcher's Protest
CISA adds BlueHammer (CVE-2026-33825) to the KEV catalog. This Microsoft Defender LPE exploit uses TOCTOU to hijack SAM databases. Patch by May 6, 2026.
16 views
Daily Writeups
⤷ Title: ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 01:11:34 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript #ClickFix #Crypto theft #cybersecurity #Infostealer #macOS #macOS Tahoe #malware #Netskope #phishing #Session Hijacking #social engineering
Daily CyberSecurity
ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords
Netskope uncovers a ClickFix macOS campaign that holds the UI hostage to steal system passwords, Keychains, and 200+ browser extensions.
11 views
Daily Writeups
⤷ Title: Fuzzing 101: How Security Researchers Find Bugs Before Hackers Do
════════════════════════
𐀪 Author: Parth Patel
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:31:01 GMT
════════════════════════
⌗ Tags: #software_engineering #hacking #vulnerability_research #cybersecurity #programming
Medium
🔬 Fuzzing 101: How Security Researchers Find Bugs Before Hackers Do
Some of the most critical vulnerabilities ever found — in browsers, operating systems, and cryptographic libraries — were discovered…
11 views
Daily Writeups
⤷ Title: Agent T Challenge — Fixed Python code| TryHackMe
════════════════════════
𐀪 Author: Tengku M Zulfadli
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:49:50 GMT
════════════════════════
⌗ Tags: #tryhackme #nmap #python_programming #gobuster
Medium
Agent T Challenge — Fixed Python code| TryHackMe
Agent T discovered a website that looks fairly normal at first, but after a bit of interaction, something doesn’t quite feel right with the…
27 views
Daily Writeups
⤷ Title: OWASP API Security Top 10–1 | MayankNingania | TryHackMe
════════════════════════
𐀪 Author: Mayank Ningania
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:25:28 GMT
════════════════════════
⌗ Tags: #mayankningania #owasp_api_security_top_10 #tryhackme_walkthrough #tryhackme_writeup #tryhackme
Medium
OWASP API Security Top 10–1 | MayankNingania | TryHackMe
Task 1 : Introduction
19 views
Daily Writeups
⤷ Title: CSP bypass and Dangling Markup Xss
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 00:58:15 GMT
════════════════════════
⌗ Tags: #xss_attack #css #xs #content_security_policy #cross_site_scripting
Medium
CSP bypass and Dangling Markup Xss
🧠 What is CSP?
20 views
Daily Writeups
⤷ Title: DOM Xss
════════════════════════
𐀪 Author: 13v! ⚔️
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 00:57:54 GMT
════════════════════════
⌗ Tags: #xs #jquery #css #xss_attack #dom_xss
Medium
DOM Xss
What is the DOM?
37 views