Daily Writeups
@Daily_Writeups
4.17K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.17K subscribers
Daily Writeups
⤷ Title: Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:52:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #firewall security #Palo Alto Networks #PAN_OS #Panorama #PHP2Shell
Daily CyberSecurity
Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama
TL;DR Palo Alto Networks confirmed that the PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, affect PAN-OS, Panorama and WildFire WF-500 appliances. The PAN-OS PHP2Shell risk sits in the mana…
17 views
Daily Writeups
⤷ Title: PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 12:21:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109619 #CVE_2026_115560 #php #PHP2Shell #Remote Code Execution #Web Security
Daily CyberSecurity
PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
TL;DR On October 23, 2026, the PHP team disclosed CVE-2026-115560, a new PHP session vulnerability tied to session upload progress. It can lead to remote code execution, but only in a rare setup. …
15 views
Daily Writeups
⤷ Title: How can a zero width character leads to privilege escalation
════════════════════════
𐀪 Author: Tomahawk
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:23:44 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #information_security #security #bug_bounty
Medium
How can a zero width character leads to privilege escalation
Whoami??
12 views
Daily Writeups
⤷ Title: Web Cache Deception: How a Harmless .css Becomes Full Account Takeover
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:09:45 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #application_security #bug_bounty #penetration_testing
Medium
🧊🎯🔓💥 Web Cache Deception: How a Harmless .css Becomes Full Account Takeover
A CDN and your app can read the exact same URL two different ways. That tiny disagreement is enough to hand one user’s session token to a…
18 views
Daily Writeups
⤷ Title: The Complete Bug Bounty Recon Methodology: From Subdomain Enumeration to Vulnerability Discovery |…
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:01:03 GMT
════════════════════════
⌗ Tags: #reconnaissance #penetration_testing #bug_bounty #cybersecurity #vulnerability
Medium
The Complete Bug Bounty Recon Methodology: From Subdomain Enumeration to Vulnerability Discovery | by Samadhan Shimple
When I start testing a web application, I don’t immediately jump into vulnerability scanning. I think good reconnaissance is one of the…
19 views
Daily Writeups
⤷ Title: How I found BAC leads to De-escalate the Administrator privilege
════════════════════════
𐀪 Author: Raccoon
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:13:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #cybersecurity #bug_bounty_tips
Medium
How I found BAC leads to De-escalate the Administrator privilege
Summary
18 views
Daily Writeups
⤷ Title: I Just Found Out What Happens to the Bugs I Report. It Changed How I Hunt.
════════════════════════
𐀪 Author: Riya Limba
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:12:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint #bug_bounty_tips #ethical_hacking #bug_bounty
Medium
I Just Found Out What Happens to the Bugs I Report. It Changed How I Hunt.
HackerOne says fix times improved 54%. The backlog still grew 131%. Here’s the math nobody explains to beginners.
18 views
Daily Writeups
⤷ Title: Patch Node.js, Not Just Your npm Dependencies
════════════════════════
𐀪 Author: Rahul
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:14:56 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity #software_engineering #devops #nodejs
Medium
Patch Node.js, Not Just Your npm Dependencies
The October 2026 security release is a reminder that runtime upgrades must be rebuilt, redeployed, and verified across every production…
20 views
Daily Writeups
⤷ Title: CYBER BRIEFING | October 23, 2026
════════════════════════
𐀪 Author: CyberMaterial
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:01:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #substack_writer #hacking #substack
Medium
CYBER BRIEFING | October 23, 2026
Pillow RCE fix, M365 token spraying, Capcom 11.77M breach
15 views
Daily Writeups
⤷ Title: CREST CTF 2.0 — My Write-ups (5 Challenges, Rank 239)
════════════════════════
𐀪 Author: Ayushiaggarwal
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:10:50 GMT
════════════════════════
⌗ Tags: #hacking #ctf #cybersecurity #information_technology
Medium
CREST CTF 2.0 — My Write-ups (5 Challenges, Rank 239)
# Author: Ayushi Aggarwal · CTF7: EdgeCrow50 · NullClass: ayushiaggarwal531514
9 views
Daily Writeups
⤷ Title: MudaleTunnel: A Control Plane for Network Pivoting
════════════════════════
𐀪 Author: Ori Ashkenazi
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:26:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #python #infosec
Medium
MudaleTunnel: A Control Plane for Network Pivoting
Manage SSH tunnels, network discovery, and pivoting across a penetration-testing engagement — from a standalone CLI, an msfconsole-style…
17 views
Daily Writeups
⤷ Title: Simple CTF — THM
════════════════════════
𐀪 Author: ZODiAK
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:58:23 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #ctf_writeup #cybersecurity #ctf
Medium
Simple CTF — THM
CTF Name : SimpleCTF PlateForm : TryHackMe Author : ZODiAK Day : 2
28 views
Daily Writeups
⤷ Title: Try Hack Me: Metasploit: Payload Generation Write Up
════════════════════════
𐀪 Author: Jozepjoestar
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:28:26 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme
Medium
Try Hack Me: Metasploit: Payload Generation Write Up
Basik Syntax and Listing Options
28 views
Daily Writeups
⤷ Title: How to Learn Cybersecurity From Zero: Beginner Roadmap (2026)
════════════════════════
𐀪 Author: Satyam Kumar
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:06:53 GMT
════════════════════════
⌗ Tags: #linux #cybersecurity #ethical_hacking #technology #programming
Medium
How to Learn Cybersecurity From Zero: Beginner Roadmap (2026)
You don’t need to be a hacker, a coding expert, or a computer science genius to begin learning cybersecurity. You need curiosity…
26 views
Daily Writeups
⤷ Title: OWASP Top 10 Explained with Lab Examples
════════════════════════
𐀪 Author: Nitesh pachar
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:00:08 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #xss_vulnerability #web_security #owasp_top_10
Medium
OWASP Top 10 Explained with Lab Examples
OWASP Top 10 Explained with Lab Examples
41 views
Daily Writeups
⤷ Title: PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 16:55:43 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: PHPShell: The rise of branded vulnerabilities
════════════════════════
𐀪 Author: Geva Solomonovich
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 16:37:09 GMT
════════════════════════
⌗ Tags: #application_security #artificial_intelligence #php2shell #cybersecurity #vulnerability
Medium
PHPShell: The rise of branded vulnerabilities
PHP2Shell, and why taking the internet offline is not an acceptable mitigation
31 views
Daily Writeups
⤷ Title: Active Information Gathering: DNS Enumeration and Nmap Port Scanning
════════════════════════
𐀪 Author: Awais Ahmed
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 16:27:36 GMT
════════════════════════
⌗ Tags: #port_scanning #cybersecurity #dns_enumeration #hacking #nmap
Medium
Active Information Gathering: DNS Enumeration and Nmap Port Scanning
This is the first entry in a series where I document hands on offensive security work, real commands, real targets, real screenshots. This…
17 views
Daily Writeups
⤷ Title: 6 Ways AI Changes OSINT (For People Who Already Do It Manually)
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:58:37 GMT
════════════════════════
⌗ Tags: #ai #osint #cybersecurity #hacking #ai_agent
Medium
6 Ways AI Changes OSINT (For People Who Already Do It Manually)
You were pivoting before it was a prompt. Here’s what the machines actually add to the craft — and what they still can’t do for you.
31 views
Daily Writeups
⤷ Title: HackTheBox [HTB] — Conectándonos y probando una máquina virtual vulnerable
════════════════════════
𐀪 Author: BeachO
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:31:01 GMT
════════════════════════
⌗ Tags: #hacking #ctf #español #beacho #hackthebox
Medium
HackTheBox [HTB] — Conectándonos y probando una máquina virtual vulnerable
HackTheBox es una plataforma online en la que practicar y enfrentarse a diferentes retos de hacking. Desde servidores vulnerables…
18 views
Daily Writeups
⤷ Title: PortSwigger’s XSS Labs: Complete Walkthrough
════════════════════════
𐀪 Author: Muhammad Ayan
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 16:30:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #cross_site_scripting #ethical_hacking #web_security
Medium
PortSwigger’s XSS Labs: Complete Walkthrough
Disclaimer: This write-up is for educational purposes only. All attacks are done on PortSwigger’s Web Security Academy labs, which are made…
15 views