Daily Writeups
@Daily_Writeups
3.6K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.6K subscribers
Daily Writeups
⤷ Title: I Found a Major SaaS Platform’s Internal Credentials by Calling an Endpoint They Forgot to Lock…
════════════════════════
𐀪 Author: CypherNova1337
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 23:12:01 GMT
════════════════════════
⌗ Tags: #information_security #hacking #information_disclosure #bug_bounty #cybersecurity
Medium
I Found a Major SaaS Platform’s Internal Credentials by Calling an Endpoint They Forgot to Lock Down
There’s a class of vulnerability that doesn’t get enough attention in the bug bounty community. It’s not a SQL injection. It’s not a…
16 views
Daily Writeups
⤷ Title: Why Bug Hunters Skip Role-Based API Testing And How I Turned a Writer Token Into an SSRF
════════════════════════
𐀪 Author: CypherNova1337
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 19:25:32 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #cybersecurity #api_security #penetration_testing
Medium
Why Bug Hunters Skip Role-Based API Testing And How I Turned a Writer Token Into an SSRF
Most hunters test authentication. Almost nobody tests authorization at the role level.
9 views
Daily Writeups
⤷ Title: Cuando la memoria de un agente de IA se convierte en una puerta trasera
════════════════════════
𐀪 Author: TU INSIGNIA
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 23:52:39 GMT
════════════════════════
⌗ Tags: #hacking #ai_agent #ai #artificial_intelligence #growth_hacking
Medium
Cuando la memoria de un agente de IA se convierte en una puerta trasera
GhostWriter demuestra que un asistente con memoria persistente puede conservar algo más que contexto útil: también puede recordar…
7 views
Daily Writeups
⤷ Title: Exploiting Remote Code Execution in D-Tale Through Unsafe Filter Evaluation
════════════════════════
𐀪 Author: Ayobami olaniyi
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 22:31:55 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #python
Medium
Exploiting Remote Code Execution in D-Tale Through Unsafe Filter Evaluation
Introduction
8 views
Daily Writeups
⤷ Title: THM: Room 404 Walkthrough | Hacker Holidays: Day 2 | Github Repository
════════════════════════
𐀪 Author: N3NU
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 23:35:34 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #cybersecurity #technology #tryhackme #software_development
Medium
THM: Room 404 Walkthrough | Hacker Holidays: Day 2 | Github Repository
TryHackMe Room Link
6 views
Daily Writeups
⤷ Title: Internal: TryHackMe Writeup [PT-BR]
════════════════════════
𐀪 Author: sbimoxa
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 23:21:31 GMT
════════════════════════
⌗ Tags: #ctf_writeup #tryhackme #cibersegurança #tryhackme_writeup #medium_brasil
Medium
Internal: TryHackMe Writeup [PT-BR]
Este writeup documenta o processo passo a passo para comprometer um servidor alvo. Além de mostrar quais comandos foram executados, o…
8 views
Daily Writeups
⤷ Title: TryHackMe Hacker Holidays 2026 | Day 2 | Room 404
════════════════════════
𐀪 Author: MistressOfTheDarkweb
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 23:08:39 GMT
════════════════════════
⌗ Tags: #tryhackme #web_hacking #cybersecurity
Medium
TryHackMe Hacker Holidays 2026 | Day 2 | Room 404
Concierge Briefing
8 views
Daily Writeups
⤷ Title: SQL Injection Lab | TryHackMe (THM)
════════════════════════
𐀪 Author: Nuray Xudadatova
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 23:02:43 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #sql_injection_attack #sql_injection #tryhackme #sql_database
Medium
SQL Injection Lab | TryHackMe (THM)
Understand how SQL injection attacks work and how to exploit this vulnerability.
9 views
Daily Writeups
⤷ Title: TryHackMe Hacker Holidays 2026 | Day 1 | AI
════════════════════════
𐀪 Author: MistressOfTheDarkweb
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 22:56:37 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #tryhackme
Medium
TryHackMe Hacker Holidays 2026 | Day 1 | AI
Concierge Briefing
11 views
Daily Writeups
⤷ Title: Day 1/10: The Attacker’s Recon Phase — Cyber Kill Chain
════════════════════════
𐀪 Author: Kay
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 22:29:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #information_security #reconnaissance #soc_analyst
Medium
Day 1/10: The Attacker’s Recon Phase — Cyber Kill Chain
Every cyberattack starts long before any exploit is executed. Today marks Day 1 of documenting my walkthrough of the Cyber Kill Chain on…
16 views
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
22 views
Daily Writeups
⤷ Title: Everything Is Input: SQL Injection Through Parameter Names
════════════════════════
𐀪 Author: Clark Voss
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:50:43 GMT
════════════════════════
⌗ Tags: #security #ethical_hacking #cybersecurity #bug_bounty #hacking
Medium
Everything Is Input: SQL Injection Through Parameter Names
How a 500 error, a hunch, and a lot of manual testing led me to a SQL injection I had never seen before and why I had to write my own…
17 views
Daily Writeups
⤷ Title: Guía Definitiva de Seguridad en APIs: OWASP Top 10, Bypasses y Mitigación
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #technology #api #bug_bounty #hacking #cybersecurity
11 views
Daily Writeups
⤷ Title: Muhsin Ali Shah — Cybersecurity Researcher, Cloud Security Engineering Student & AI Enthusiast
════════════════════════
𐀪 Author: Muhsin Ali Shah
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 00:14:12 GMT
════════════════════════
⌗ Tags: #pakistan #cybersecurity #careers #hacking #ethical_hacking
Medium
Muhsin Ali Shah — Cybersecurity Researcher, Cloud Security Engineering Student & AI Enthusiast
Cybersecurity Researcher, Cloud Security Engineering Student & AI Enthusiast
13 views
Daily Writeups
⤷ Title: Walkthrough: TryHackMe Room ValenFind
════════════════════════
𐀪 Author: LZR_404
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:36:45 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ethical_hacking #tryhackme #cybersecurity
Medium
Walkthrough: TryHackMe Room ValenFind
When building modern web applications, the phrase “your secrets are safe with us” is usually a comforting promise. In the case of…
21 views
Daily Writeups
⤷ Title: Telnet vs SSH: por qué una sesión puede verse completa en una captura de red
════════════════════════
𐀪 Author: Andrespistone
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:41:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #linux #ethical_hacking
22 views
Daily Writeups
⤷ Title: HTTP sin TLS: así quedan expuestas las credenciales en una captura de red
════════════════════════
𐀪 Author: Andrespistone
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:20:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #ethical_hacking #kali_linux
20 views
Daily Writeups
⤷ Title: Acoustic Keystroke Attack Decodes Typing Using Language Models
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:36:27 +0000
════════════════════════
⌗ Tags: #Information Security #Acoustic Attack #AI security #cybersecurity #Keystroke Eavesdropping #language models
Information Security News
Acoustic Keystroke Attack Decodes Typing Using Language Models
The acoustic reverberations of keyboard strokes can betray far more information than previously imagined. Recently, a novel side-channel attack demonstrated that a brief audio recording suffices t…
15 views
Daily Writeups
⤷ Title: MCP Protocol Embraces Stateless Architecture in Major Overhaul
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 03:55:50 +0000
════════════════════════
⌗ Tags: #Technology #API Updates #MCP Protocol #Software Engineering #Stateless Architecture #web development
Daily CyberSecurity
MCP Protocol Embraces Stateless Architecture in Major Overhaul
The Model Context Protocol (MCP), spearheaded by Anthropic, recently launched its highly anticipated 2026-07-28 specification. The defining transformation of this update is the complete migration …
8 views
Daily Writeups
⤷ Title: Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:48:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #backdoor #CVE_2026_18072 #cybersecurity #wordpress
Daily CyberSecurity
Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites
TL;DR Threat actors injected a critical backdoor into the Advanced Responsive Video Embedder plugin. This flaw tracks as CVE-2026-18072 (CVSS 9.8). Attackers can bypass authentication entirely. Th…
11 views
Daily Writeups
⤷ Title: Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 02:26:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Check Point #CVE_2026_16232 #Rapid7 #Security Management Server #SmartConsole #zero_day
Daily CyberSecurity
Check Point SmartConsole Authentication Bypass CVE-2026-16232 Exploited as Zero-Day, PoC and Details Public
TL;DR Attackers are exploiting a SmartConsole authentication bypass in Check Point management servers. The flaw, CVE-2026-16232, lets an unauthenticated attacker gain full administrator access. Ch…
10 views