Daily Writeups
@Daily_Writeups
3.61K subscribers
4 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.61K subscribers
Daily Writeups
⤷ Title: BIOHAZARD WALKTHROUGH | TRYHACKME
════════════════════════
𐀪 Author: ANWAR1
════════════════════════
ⴵ Time: Thu, 21 May 2026 04:43:05 GMT
════════════════════════
⌗ Tags: #tryhackme #biohazard #ethical_hacking #cybersecurity #ctf
Medium
BIOHAZARD WALKTHROUGH | TRYHACKME
TASK 1 — INTRODUCTION
16 views
Daily Writeups
⤷ Title: SlingShot Tryhackme Investigation Walkthrough
════════════════════════
𐀪 Author: Dhruv Bhatia
════════════════════════
ⴵ Time: Thu, 21 May 2026 04:00:44 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #ctf_writeup #elasticsearch #tryhackme
Medium
SlingShot Tryhackme Investigation Walkthrough
Slingshot room is a must practice CTF for an Aspiring SOC Analyst who perform log investigations and investigate the security incidents…
21 views
Daily Writeups
⤷ Title: ChromaToast Exploit: Unpatched CVSS 10.0 Flaw Grants Pre-Auth RCE in ChromaDB Python Server
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:59:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #ChromaDB CVE_2026_45829 #HiddenLayer ChromaToast Research #Hugging Face Model Hijacking #Pre_Authentication Code Injection #Python FastAPI Server Vulnerability #Rust Implementation Mitigation #Shodan Internet Exposure #trust_remote_code Parameter #Unpatched Remote Code Execution #Vector Database Exploit
Penetration Testing Tools
ChromaToast Exploit: Unpatched CVSS 10.0 Flaw Grants Pre-Auth RCE in ChromaDB Python Server
A critical authentication bypass vulnerability facilitating unauthenticated remote code execution (RCE) has been isolated within the ChromaDB architecture.
24 views
Daily Writeups
⤷ Title: The Silent Blackout: Unpatched Huawei Router Zero-Day Crushed Luxembourg’s Telecom Grid
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:54:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #Carrier Grade Networking #Core Switching Fabric #Denial of Service Exploit #European CERT IoCs #Firmware Reboot Loop #Huawei Enterprise Routing Hardware #POST Luxembourg Telecom Collapse #Recorded Future News Threat Intel #Restricted Advisory Portal #zero_day vulnerability
Penetration Testing Tools
The Silent Blackout: Unpatched Huawei Router Zero-Day Crushed Luxembourg’s Telecom Grid
During the previous summer season, the sovereign nation of Luxembourg suffered a catastrophic, near-total collapse of its domestic
11 views
Daily Writeups
⤷ Title: Beyond Email: Attackers Hijack Microsoft Teams External Access to Launch Deep Network Compromise
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:18:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CVE_2023_36036 #Cyber Security #Dumpit #External Access Configuration #Incident Response #infosec #Kerberoasting #LSASS Memory Dump #Microsoft Teams phishing #Rapid7 Labs #social engineering
Daily CyberSecurity
Beyond Email: Attackers Hijack Microsoft Teams External Access to Launch Deep Network Compromise
Rapid7 Labs exposes how attackers are abusing Microsoft Teams external access and Dumpit memory scrapers to breach corporate networks. Protect your team!
10 views
Daily Writeups
⤷ Title: How an Android App’s Misconfigured Firebase Database Exposed Sensitive Data
════════════════════════
𐀪 Author: Athultpme
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:41:43 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #bug_bounty #mobile #web_security
Medium
How an Android App’s Misconfigured Firebase Database Exposed Sensitive Data
Mobile Security | Android | Firebase | Cybsersecurity
17 views
Daily Writeups
⤷ Title: How a College Website’s REST API Exposed Its Entire Attack Surface — User Enumeration…
════════════════════════
𐀪 Author: Padmesh
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:23:10 GMT
════════════════════════
⌗ Tags: #offensive_security #hunting #wordpress #bug_bounty #cybersecurity
Medium
How a College Website’s REST API Exposed Its Entire Attack Surface — User Enumeration…
By Padmesh P S | Cybersecurity Researcher | 6 min read | Severity: High/Critical
14 views
Daily Writeups
⤷ Title: Cryptographic Failures — The #4 Vulnerability on the Web
════════════════════════
𐀪 Author: loopXvedant
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:31:00 GMT
════════════════════════
⌗ Tags: #ctf #bug_bounty #owasp_top_10 #hacking #cybersecurity
Medium
Cryptographic Failures — The #4 Vulnerability on the Web 🔐
When encryption is missing, weak, or just plain wrong — your data is already exposed.
11 views
Daily Writeups
⤷ Title: REASONING vs RULES : Part 2 — The Feedback Engine: How the Colosseum Learns Faster Than Threats…
════════════════════════
𐀪 Author: Vishnu Priya Vangipuram
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:53:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #artificial_intelligence #ai_agent #application_security #distributed_systems
Medium
REASONING vs RULES : Part 2 — The Feedback Engine: How the Colosseum Learns Faster Than Threats Evolve
In Part 1 of the blog series, The arena was set. Now we start building the engine that wins.
13 views
Daily Writeups
⤷ Title: ZPHISHER HANDS ON LAB
════════════════════════
𐀪 Author: BlueTeamMal
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:56:45 GMT
════════════════════════
⌗ Tags: #social_engineering #hacking #cybersecurity
Medium
ZPHISHER HANDS ON LAB
1.I used Zphisher as it’s the one of the simplest tool for social engineering.
13 views
Daily Writeups
⤷ Title: What is 51% Attack in Blockchain? How does it works?
════════════════════════
𐀪 Author: Om Ratnaparkhe
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:27:35 GMT
════════════════════════
⌗ Tags: #web3 #hacking #bitcoin #blockchain #security
Medium
What is 51% Attack in Blockchain? How does it works?
The 51% attack is a famous blockchain technology’s loophole or often regarded as a vulnerability. Its a way to tamper with the blockchain’s…
17 views
Daily Writeups
⤷ Title: Investigating Scam Infrastructure Using OSINT — Inside The Scam Industry (Part 2)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:57:20 GMT
════════════════════════
⌗ Tags: #osint #true_crime #cybersecurity #hacking #cybercrime
Medium
🌐 Investigating Scam Infrastructure Using OSINT — Inside The Scam Industry (Part 2)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
18 views
Daily Writeups
⤷ Title: Command Line — part 1
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:53:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_development #cybersecurity #infosec #cyber_security_awareness
Medium
Command Line — part 1
Windows Command Line
17 views
Daily Writeups
⤷ Title: GitHub Was Breached Through a Single VS Code Extension.
════════════════════════
𐀪 Author: Sai kiran
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:21:13 GMT
════════════════════════
⌗ Tags: #supply_chain_security #github #infosec #developer_security #cybersecurity
Medium
GitHub Was Breached Through a Single VS Code Extension.
One employee. One poisoned extension. One click on the VS Code Marketplace. And TeamPCP walked out with 3,800 of GitHub’s internal…
19 views
Daily Writeups
⤷ Title: Getting Into a College’s AWS Account Without a Password — How Two Public AWS API Calls Exposed…
════════════════════════
𐀪 Author: Padmesh
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:06:33 GMT
════════════════════════
⌗ Tags: #aws #web_security #cloud_security #cybersecurity #ethical_hacking
Medium
Getting Into a College’s AWS Account Without a Password — How Two Public AWS API Calls Exposed…
By Padmesh P S | Cybersecurity Researcher | 4 min read | Severity: Critical
18 views
Daily Writeups
⤷ Title: The Bug That Shouldn’t Exist…But Still Does Everywhere
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:29:40 GMT
════════════════════════
⌗ Tags: #ethical_hacking #programming #technology #cybersecurity #coding
Medium
The Bug That Shouldn’t Exist…But Still Does Everywhere
Some mistakes never die in real-world apps.
31 views
Daily Writeups
⤷ Title: Linux Privilege Escalation: Automation | TryHackMe |practical challenge
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:16:51 GMT
════════════════════════
⌗ Tags: #privilege_escalation #tryhackme_walkthrough #ethical_hacking #cybersecurity
Medium
Linux Privilege Escalation: Automation | TryHackMe |practical challenge
Build on Linux privilege escalation skills: automate enumeration and use public exploits.
40 views
Daily Writeups
⤷ Title: 9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 21 May 2026 13:05:53 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Anonymity Stripped: Unsecured Kibana and Dozzle Dashboards Leak 22 Million FTF Live Video Chat Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:05 +0000
════════════════════════
⌗ Tags: #Data Leak #Burhan LTD #Cooy Ads Ltd #Data Leak Cybernews #De_anonymization Risk #Dozzle Docker Logs #FTF Live Video Chat #Real_time Token Leak #Regional CERT Escalation #Session Metadata Exposure #Unsecured Kibana Dashboard
Penetration Testing Tools
Anonymity Stripped: Unsecured Kibana and Dozzle Dashboards Leak 22 Million FTF Live Video Chat Records
The FTF Live video-chat ecosystem, which explicitly guaranteed its consumer base absolute anonymity during randomized social interactions, has
28 views
Daily Writeups
⤷ Title: The Egress Hijack: How the Kimwolf Botnet Weaponized Commercial Residential Proxies for Mass Cyber Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:21:11 +0000
════════════════════════
⌗ Tags: #Malware #Application Layer Exhaustion #Badbox 2.0 Malware Framework #Byteconnect SDK Monetization #Gray Market Proxy Suppliers #IPIDEA Android Supply Chain #Kimwolf Botnet Residential Proxies #Qurium Forensic Investigation #Triada Trojan persistence #Turnkey Cybercrime Economy #Unauthenticated ADB Exploitation
Penetration Testing Tools
The Egress Hijack: How the Kimwolf Botnet Weaponized Commercial Residential Proxies for Mass Cyber Attacks
Residential proxy networks, which convincingly mirror standard domestic internet connections, have emerged as one of the most agonizing
17 views
Daily Writeups
⤷ Title: Microsoft Smashes “Fox Tempest” Cyber Syndicate Selling Cryptographic Cover for Ransomware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:17:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Code Validation Bypass #Fox Tempest Malware Signing #Malvertising SEO Poisoning #Microsoft Artifact Signing Abuse #OpFauxSign Takedown #Phantom Azure Developer Tenancies #Rhysida Ransomware Deployment #Short_Lived 72_Hour Certificates #SignSpace Cloud Seizure #Vanilla Tempest Co_Conspirator
Penetration Testing Tools
Microsoft Smashes "Fox Tempest" Cyber Syndicate Selling Cryptographic Cover for Ransomware
Microsoft has initiated formal civil litigation against the fraudulent syndicate operating the Fox Tempest enterprise, an illicit infrastructure
18 views