Daily Writeups
@Daily_Writeups
4.18K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.18K subscribers
Daily Writeups
⤷ Title: Part 2: I Broke Out of YouTube — My Telegram Bot Now Downloads Instagram Reels, Stories & Twitter/X…
════════════════════════
𐀪 Author: Chandan
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 06:28:34 GMT
════════════════════════
⌗ Tags: #telegram_bot #learning_to_code #youtube #hacking
Medium
Part 2: I Broke Out of YouTube — My Telegram Bot Now Downloads Instagram Reels, Stories & Twitter/X Videos
This is Part 2. Part 1 is here — read it first, this builds on it…
17 views
Daily Writeups
⤷ Title: N-Map- Enumeration Beginner to Intermediate
════════════════════════
𐀪 Author: Vatansingh
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 05:58:01 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #malware #hacking #offensive_security
Medium
N-Map- Enumeration Beginner to Intermediate
Imagine you are looking for a book in a library. You ask the librarian where to find it. If they simply say, “It’s in the library,” you…
15 views
Daily Writeups
⤷ Title: TightVNC Pre-Auth RCE Vulnerability Allows Hackers to Execute Code on Windows PCs
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 05:31:44 GMT
════════════════════════
⌗ Tags: #hacking #windows_11 #cybersecurity #vnc #cyber
Medium
TightVNC Pre-Auth RCE Vulnerability Allows Hackers to Execute Code on Windows PCs
A newly released proof-of-concept exploit demonstrates how a malicious VNC server can compromise TightVNC Viewer before authentication.
17 views
Daily Writeups
⤷ Title: TryHackMe walkthrough: Web Server Attacks — II
════════════════════════
𐀪 Author: Gabriella Kwok
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 05:08:47 GMT
════════════════════════
⌗ Tags: #web_server_attacks #tryhackme_walkthrough #cybersecurity #tryhackme
Medium
TryHackMe walkthrough: Web Server Attacks — II
Been busy lately… managed to publish this today. Look at my Linkedin account and you’ll see that I’ve been flying through rooms, but I was…
18 views
Daily Writeups
⤷ Title: Recruit CTF | TryHackMe | Writeup
════════════════════════
𐀪 Author: LZR_404
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 04:59:14 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #web_security #ctf_writeup
Medium
Recruit CTF | TryHackMe | Writeup
1.Reconnaissance :
18 views
Daily Writeups
⤷ Title: Important 10 Reconnaissance Tools every Ethical Hackers.
════════════════════════
𐀪 Author: Zakirdev
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 06:10:00 GMT
════════════════════════
⌗ Tags: #ethical_hacking #dns #linux #nmap
Medium
Important 10 Reconnaissance Tools every Ethical Hackers.
প্রত্যেক এথিক্যাল হ্যাকারের ব্যবহার করা উচিত এমন সেরা ১০টি রিকনেসান্স টুল
27 views
Daily Writeups
⤷ Title: A valid request can still move the wrong money: five questions for a payment API
════════════════════════
𐀪 Author: Altafhossain
════════════════════════
ⴵ Time: Fri, 30 Oct 2026 09:26:57 GMT
════════════════════════
⌗ Tags: #application_security #fintech #api_security
Medium
A valid request can still move the wrong money: five questions for a payment API
Imagine a customer approves a payment of ৳1,250. A request then arrives at the bank’s API with a valid token and a correct signature, and…
29 views
Daily Writeups
⤷ Title: Lab4: Routing-based SSRF
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 06:40:04 GMT
════════════════════════
⌗ Tags: #host_header_injection #ssrf #burpsuite #portswigger
Medium
Lab4: Routing-based SSRF
SSRF (Server‑Side Request Forgery) is a web vulnerability where an attacker tricks a server into making unauthorized internal or external…
36 views
Daily Writeups
⤷ Title: Understanding and Preventing SSRF in Spring Boot 4.1 with RestClient
════════════════════════
𐀪 Author: Arun Kumar Meenakshi Sundaram
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 06:37:12 GMT
════════════════════════
⌗ Tags: #spring_boot #ssrf #ssrf_attack #java #spring
Medium
Understanding and Preventing SSRF in Spring Boot 4.1 with RestClient
What is SSRF ?
37 views
Daily Writeups
⤷ Title: FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
════════════════════════
𐀪 Author: Eduard Kovacs
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 08:40:36 +0000
════════════════════════
⌗ Tags: #Cybercrime #Binance #cryptocurrency #cryptocurrency heist
SecurityWeek
FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
25 views
Daily Writeups
⤷ Title: Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
════════════════════════
𐀪 Author: Eduard Kovacs
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 07:57:49 +0000
════════════════════════
⌗ Tags: #Vulnerabilities #exploited #Featured #Ivanti #Zero_Day
SecurityWeek
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.
18 views
Daily Writeups
⤷ Title: Critical MediaTek Vulnerabilities Patched in Chipsets
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 08:44:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #CVE_2026_20499 #CVE_2026_20545 #CVE_2026_20546 #MediaTek #MediaTek chipsets #privilege escalation
Daily CyberSecurity
Critical MediaTek Vulnerabilities Patched in Chipsets
TL;DR MediaTek published its November 2026 product security bulletin fixing 57 security flaws across multiple chipset architectures. The update addresses six critical MediaTek vulnerabilities in c…
20 views
Daily Writeups
⤷ Title: Google Project Suncatcher Achieves Orbital AI Inference
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 08:31:56 +0000
════════════════════════
⌗ Tags: #Technology #artificial intelligence #Gemma 4 #google #Orbital AI #Project Suncatcher #TPU
Daily CyberSecurity
Google Project Suncatcher Achieves Orbital AI Inference
Google officially achieved an extraordinary milestone in extra-terrestrial computation. Through Google Project Suncatcher, engineers conducted orbital artificial intelligence inference aboard a pr…
23 views
Daily Writeups
⤷ Title: NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 08:09:39 +0000
════════════════════════
⌗ Tags: #Malware #C2 Framework #Cisco Talos #Infostealer #NIK C2 framework #OpenAI API #Windows NIK C2 framework
Daily CyberSecurity
NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks
At a Glance Malware Family NIK C2 framework (Go-based 64-bit Windows implant, OpenAI API client, and screen-locking ransomware) Threat Actor Unattributed operator group (internal project labeled n…
15 views
Daily Writeups
⤷ Title: ChatGPT Codex Usage Limits Merged Across Plans
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 07:37:13 +0000
════════════════════════
⌗ Tags: #Technology #artificial intelligence #ChatGPT #Codex #OpenAI #Usage Limits
Daily CyberSecurity
ChatGPT Codex Usage Limits Merged Across Plans
OpenAI updated its official documentation to introduce unified consumption policies. Specifically, beginning in December 2026, the company will merge ChatGPT Codex usage limits across multiple sub…
19 views
Daily Writeups
⤷ Title: Claude Ultra Subscription Debuts with No 5-Hour Limit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 07:31:11 +0000
════════════════════════
⌗ Tags: #Technology #Anthropic #artificial intelligence #Claude #Claude Ultra #Subscriptions
Daily CyberSecurity
Claude Ultra Subscription Debuts with No 5-Hour Limit
Anthropic has restructured its premium consumer offerings to empower intensive developers. Specifically, the company rebranded its high-tier plans to simplify the subscription hierarchy. The forme…
18 views
Daily Writeups
⤷ Title: North Korean Threat Actors Accelerate Cyber Operations With Artificial Intelligence
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 07:07:48 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI_enabled North Korean threat actors #ARTEX #Cybercrime #Jade Sleet #Microsoft Threat Intelligence #North Korean threat actors #Onyx Sleet
Daily CyberSecurity
North Korean Threat Actors Accelerate Cyber Operations With Artificial Intelligence
At a Glance Actor or Group North Korean state-sponsored threat actors (Jade Sleet, Onyx Sleet, Coral Sleet, Diamond Sleet, Pearl Sleet, Jasper Sleet, Sapphire Sleet, Emerald Sleet) Activity Type A…
16 views
Daily Writeups
⤷ Title: How two forward slashes let anyone use a government website as a free file host
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 08:46:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #bug_bounty_tips #bug_bounty #bugs
Medium
How two forward slashes let anyone use a government website as a free file host
The most dangerous line of code I have ever found was commented out.
17 views
Daily Writeups
⤷ Title: Password Reset Token Does Not Expire: An Insecure Configurability Issue
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 08:38:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #pentesting #technology #cybersecurity
Medium
Password Reset Token Does Not Expire: An Insecure Configurability Issue
Learn how an expired password reset token vulnerability can affect account security. This article explains the Insecure Configurability…
16 views
Daily Writeups
⤷ Title: Logged In Is Not the Same as Allowed In
════════════════════════
𐀪 Author: Rei
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 07:38:09 GMT
════════════════════════
⌗ Tags: #application_security #owasp #software_testing #cybersecurity #web_development
Medium
Logged In Is Not the Same as Allowed In
Logged In Is Not the Same as Allowed In You log in to your bank’s website and open a statement. The address bar ends in …/statements/1042. Out of curiosity, you change it to 1043. Should you see …
27 views
Daily Writeups
⤷ Title: Super-Spam (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 08:48:58 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #tryhackme #linux #privilege_escalation
Medium
Super-Spam (THM) Tryhackme Walkthrough
Description : Defeat the evil Super-Spam, and save the day!!
17 views