Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: ASC Wargames Qualifications 2026 | MOBILE
════════════════════════
𐀪 Author: Mahmoud Fawzy
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 10:17:51 GMT
════════════════════════
⌗ Tags: #ctf #mobile_security #hacking #android #cybersecurity
Medium
ASC Wargames Qualifications 2026 | MOBILE
ASCWG CTF 2026 — Mobile Challenges Writeups
6 views
Daily Writeups
⤷ Title: ASC Wargames Qualifications 2026 | FORENSICS
════════════════════════
𐀪 Author: Mahmoud Fawzy
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 10:17:29 GMT
════════════════════════
⌗ Tags: #dfir #ctf #hacking #cybersecurity #digital_forensics
Medium
ASC Wargames Qualifications 2026 | FORENSICS
ASCWG CTF 2026 — Forensics Challenges Writeups
8 views
Daily Writeups
⤷ Title: SideWinder APT Faked Pakistan’s Government Websites for 12 Years and Replaced Detected Malware in…
════════════════════════
𐀪 Author: H3NRY B41T
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 10:13:15 GMT
════════════════════════
⌗ Tags: #threat_intelligence #pakistan #infosec #hacking #cybersecurity
Medium
SideWinder APT Faked Pakistan’s Government Websites for 12 Years and Replaced Detected Malware in Under Five Hours
How Week 3 Changed Everything
8 views
Daily Writeups
⤷ Title: Session Hijacking
════════════════════════
𐀪 Author: Michele Grimaldi
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 10:02:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #hacking #session_hijacking #life_hacking
Medium
Session Hijacking
If you work with systems that expose APIs — whether a classic web application or a backend serving an LLM agent — there’s a class of bugs…
10 views
Daily Writeups
⤷ Title: I Cleared My Cookies, Opened Incognito, and the Website Still Knew Who I Was
════════════════════════
𐀪 Author: Mohit
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 11:45:42 GMT
════════════════════════
⌗ Tags: #infosec #privacy #web_development #cybersecurity #technology
Medium
I Cleared My Cookies, Opened Incognito, and the Website Still Knew Who I Was
Why clearing your cache is completely useless against modern web tracking, how canvas scripts turn your graphics card into an ID card, and…
7 views
Daily Writeups
⤷ Title: Prompt Injection Is the New Phishing:
════════════════════════
𐀪 Author: Ashutosh Yadav
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 08:35:23 GMT
════════════════════════
⌗ Tags: #python #artificial_intelligence #cybersecurity #technology #infosec
Medium
Prompt Injection Is the New Phishing:
How Blue Teams Can Detect Attacks Against AI Agents
8 views
Daily Writeups
⤷ Title: Building a Safe Cybersecurity Lab for Penetration Testing: Virtualization, Kali Linux &…
════════════════════════
𐀪 Author: Rajgowthaman
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 11:25:01 GMT
════════════════════════
⌗ Tags: #virtualization #cybersecurity #penetration_testing #oracle_virtual_box #safe_labs
Medium
Building a Safe Cybersecurity Lab for Penetration Testing: Virtualization, Kali Linux & Metasploitable 2
1) What is virtualization? Compare Type 1 and Type 2 hypervisors, and VirtualBox vs VMware Workstation.
11 views
Daily Writeups
⤷ Title: Where Network Penetration Testing Strengthens Business Security
════════════════════════
𐀪 Author: cyber security
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 11:09:11 GMT
════════════════════════
⌗ Tags: #web_development #cybersecurity #penetration_testing #cyber_security_awareness #business
Medium
Where Network Penetration Testing Strengthens Business Security
Modern businesses face many online threats. Finding security gaps early can help protect important data, systems, and customers. Network…
15 views
Daily Writeups
⤷ Title: TryHackMe | Splunk: The Basics
════════════════════════
𐀪 Author: Mazen El-Mekawy
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 10:59:10 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #splunk #tryhackme #siem
Medium
TryHackMe | Splunk: The Basics
Getting to know Splunk and its capabilities.
23 views
Daily Writeups
⤷ Title: Wazuh Endpoint Security Monitoring | TryHackMe Walkthrough
════════════════════════
𐀪 Author: Yaratarek
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 10:45:16 GMT
════════════════════════
⌗ Tags: #tryhackme #soc #blue_team #wazuh
Medium
Wazuh Endpoint Security Monitoring | TryHackMe Walkthrough
Learning how Wazuh monitors endpoints, detects vulnerabilities, analyzes logs, and turns raw events into useful security alerts.
24 views
Daily Writeups
⤷ Title: EnterPrize — TryHackMe Writeup
════════════════════════
𐀪 Author: Hibullahi AbdulAzeez
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 10:34:55 GMT
════════════════════════
⌗ Tags: #enterprize #tryhackme #boot2root #tryhackme_writeup #ctf_writeup
Medium
EnterPrize — TryHackMe Writeup
Difficulty: Hard Room Link : https://tryhackme.com/room/enterprize
32 views
Daily Writeups
⤷ Title: AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 18:08:36 +0530
════════════════════════
⌗ Tags: No_Tags
24 views
Daily Writeups
⤷ Title: TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 18:08:20 +0530
════════════════════════
⌗ Tags: No_Tags
27 views
Daily Writeups
⤷ Title: 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 16:50:00 +0530
════════════════════════
⌗ Tags: No_Tags
25 views
Daily Writeups
⤷ Title: Attackers Probe Critical SAP Commerce Cloud Flaw CVE-2026-58231 Within Days
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 13:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #Critical Vulnerability #CVE_2026_58231 #Data Hub Adapter #DefusedCyber #SAP Commerce Cloud #SAP Security #Unauthenticated RCE
Information Security News
Attackers Probe Critical SAP Commerce Cloud Flaw CVE-2026-58231 Within Days
Threat actors began probing SAP Commerce Cloud systems for a critical vulnerability just three days after a patch became available. DefusedCyber reported detecting the first exploitation attempts …
15 views
Daily Writeups
⤷ Title: Download More RAM Attack Defeats Windows VBS
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 12:51:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #Download More RAM #Hardware Security #VBS #Windows 11
Information Security News
Download More RAM Attack Defeats Windows VBS
Security researchers recently discovered an extraordinarily novel method to circumvent some of the most heavily fortified components within Windows 11. They execute this bypass directly through st…
11 views
Daily Writeups
⤷ Title: CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 13:43:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_68138 #Linux Kernel #privilege escalation #proof_of_concept #qdisc #use after free
Daily CyberSecurity
CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation
TL;DR A researcher released proof-of-concept exploit code for CVE-2026-68138, a race condition in the Linux kernel traffic-control code. The flaw lets a local user escalate to root on affected sys…
14 views
Daily Writeups
⤷ Title: MongoDB Patches 32 Vulnerabilities, Including CVE-2026-19001 Arbitrary Code Execution Flaw (CVSS 9.5)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 13:30:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #BI Connector ODBC Driver #buffer overflow #CVE_2026_19001 #mongodb #MongoDB Server
Daily CyberSecurity
MongoDB Patches 32 Vulnerabilities, Including CVE-2026-19001 Arbitrary Code Execution Flaw (CVSS 9.5)
TL;DR: MongoDB security vulnerabilities now total 32 disclosed flaws across MongoDB Server, the BI Connector ODBC Driver, Atlas SQL ODBC Driver, and Schema Builder CLI. The most severe, CVE-2026-1…
10 views
Daily Writeups
⤷ Title: Kimi Work Silently Uploads Five Recent Agent Sessions With Feedback Reports
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 13:08:49 +0000
════════════════════════
⌗ Tags: #Data Leak #AI agent #AI Privacy #Data Collection #Data Privacy #Desktop Application #Kimi Work #Moonshot AI
Daily CyberSecurity
Kimi Work Silently Uploads Five Recent Agent Sessions With Feedback Reports
A developer at RuntimeWire recently identified a privacy issue within Moonshot AI’s Kimi Work desktop client. When a user submits a feedback report inside the application, the client uploads…
24 views
Daily Writeups
⤷ Title: CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 13:01:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache HttpClient #CVE_2026_64607 #CVE_2026_71290 #Denial of Service #Man in the Middle #TLS Vulnerability
Daily CyberSecurity
CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)
TL;DR: Apache disclosed two Apache HttpClient TLS vulnerabilities in its HttpComponents Client library this month. The more severe, CVE-2026-71290, carries a CVSS score of 9.1 and lets an attacker…
13 views
Daily Writeups
⤷ Title: PoC Discloses for CVE-2026-64849: watchTowr Sees Attacks on MLflow SSRF
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 12:32:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2026_64849 #MLflow #MLflow vulnerability #proof_of_concept exploit #ssrf #watchTowr
Daily CyberSecurity
PoC Discloses for CVE-2026-64849: watchTowr Sees Attacks on MLflow SSRF
TL;DR A default MLflow tracking server can be turned into a proxy for reading internal services. Tracked as CVE-2026-64849, the flaw is an unauthenticated full-read SSRF in MLflow’s webhook …
11 views