Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: API Keys, Tokens & Secrets: How They Leak and How Developers can Avoid it
════════════════════════
𐀪 Author: Veronica Peter
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 01:21:19 GMT
════════════════════════
⌗ Tags: #api #sdlc #credentials #api_key #application_security
Medium
API Keys, Tokens & Secrets: How They Leak and How Developers can Avoid it
Credential exposures are one of the fastest paths to compromise. In 2024 alone, GitHub detected over 39M leaked secrets across its…
16 views
Daily Writeups
⤷ Title: Understanding Broken Object Level Authorization (BOLA): What It Is, How It Happens, and How to…
════════════════════════
𐀪 Author: Veronica Peter
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 01:04:01 GMT
════════════════════════
⌗ Tags: #application_security #owasp_top_10 #api_security #owasp #api
Medium
Understanding Broken Object Level Authorization (BOLA): What It Is, How It Happens, and How to Prevent it
Broken Object Level Authorization (BOLA) is a critical API vulnerability that occurs when an application fails to properly verify whether…
23 views
Daily Writeups
⤷ Title: Droid-Warden CTF by INE : How I Finished First Under Pressure
════════════════════════
𐀪 Author: The.Flying.Wolf
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:02:46 GMT
════════════════════════
⌗ Tags: #reverse_engineering #red_team #android_pentesting #ctf_writeup #hacking
Medium
Droid-Warden CTF by INE : How I Finished First Under Pressure
INE’s Android Pentesting CTF · Medium · 14 days Challenge
17 views
Daily Writeups
⤷ Title: Advanced Mobile App Security: Protecting Code, Integrity, and User Trust
════════════════════════
𐀪 Author: Rafi zimraan arjuna wijaya
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:57:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #app_development #infosec #react_native #mobile_security
Medium
Advanced Mobile App Security: Protecting Code, Integrity, and User Trust
The Day My Assumptions Failed
29 views
Daily Writeups
⤷ Title: Building a Secure Malware Lab & Dissecting WannaCry: From ISO to IOCs
════════════════════════
𐀪 Author: Eren Ergen
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 00:43:41 GMT
════════════════════════
⌗ Tags: #ransomware #infosec #cybersecurity #blue_team #malware_analysis
Medium
Building a Secure Malware Lab & Dissecting WannaCry: From ISO to IOCs
A step-by-step guide to setting up an isolated VirtualBox environment for safe ransomware analysis.
29 views
Daily Writeups
⤷ Title: Hacker “Lovely” Leaks 2.3M WIRED Subscriber Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:15:51 +0000
════════════════════════
⌗ Tags: #Data Leak #data breach #hacker #Have I Been Pwned #Hudson Rock #identity theft #Lovely #Subscriber Leak #The New Yorker #Vogue #WIRED
Penetration Testing Tools
Hacker "Lovely" Leaks 2.3M WIRED Subscriber Records
A hacker using the alias Lovely has published a database containing the personal information of WIRED subscribers on
31 views
Daily Writeups
⤷ Title: Skip the SIEM: BlueTriage Delivers Instant Incident Reports from Raw Logs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:14:40 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BlueTriage #DFIR #Incident Response #Log Analysis #MITRE ATT&CK #open source #python #Threat Hunting #Triage #Windows Security Logs
Penetration Testing Tools
Skip the SIEM: BlueTriage Delivers Instant Incident Reports from Raw Logs
BlueTriage is a new Python tool for rapid Windows log triage. Normalize JSON events, detect MITRE-mapped threats, and generate HTML reports in seconds.
29 views
Daily Writeups
⤷ Title: Beyond the Balance Sheet: The Tragic Rise of Cyber-Physical Violence in 2025
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:12:04 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crisis24 #cybercrime #deepfakes #Digital Extortion #Infosec 2025 #Ledger #NHS #Physical Security #ransomware #Virtual Kidnapping
Penetration Testing Tools
Beyond the Balance Sheet: The Tragic Rise of Cyber-Physical Violence in 2025
In 2025, cybercrime has increasingly moved beyond the realm of “just money.” Behind today’s attacks lie not only
19 views
Daily Writeups
⤷ Title: The LangGrinch Stole Your Keys: Critical LangChain Flaw Enables Data Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:10:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_68664 #CVE_2025_68665 #Infosec #LangChain #LangChain.js #LangGrinch #LLM Security #Prompt Injection #python #Serialization
Penetration Testing Tools
The LangGrinch Stole Your Keys: Critical LangChain Flaw Enables Data Theft
A critical vulnerability has been discovered in the LangChain ecosystem that allows attackers to steal sensitive data and
25 views
Daily Writeups
⤷ Title: The End of Ad-Free AI? OpenAI’s Plan to Put “Sponsored Answers” in ChatGPT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:07:04 +0000
════════════════════════
⌗ Tags: #Technology #Advertising #AI Monetization #ChatGPT #Digital Marketing 2026 #Google Gemini #OpenAI #Sam Altman #Search Ads #Sponsored Content #The Information
Penetration Testing Tools
The End of Ad-Free AI? OpenAI’s Plan to Put "Sponsored Answers" in ChatGPT
At OpenAI, discussions have once again resurfaced around the potential introduction of advertising in ChatGPT—this time in the
18 views
Daily Writeups
⤷ Title: MongoBleed Alert: Critical Flaw Leaking Your Database Secrets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:06:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_14847 #cyber attack #data breach #Heap Overflow #Heartbleed #Infosec 2025 #MongoBleed #MongoDB #NoSQL Security #Zlib
Penetration Testing Tools
MongoBleed Alert: Critical Flaw Leaking Your Database Secrets
A critical vulnerability has been discovered in MongoDB that allows a remote attacker to access uninitialized server memory
25 views
Daily Writeups
⤷ Title: The Gig Trap: Group-IB Exposes 1,500+ Fake Job Ads Draining MENA Wallets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:01:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime 2025 #Fraud Prevention #Group_IB #Job Scam #MENA #Middle East #phishing #remote work #Social Engineering #Telegram
Penetration Testing Tools
The Gig Trap: Group-IB Exposes 1,500+ Fake Job Ads Draining MENA Wallets
Fraudulent job advertisements promising easy income and remote work continue to flood social media platforms, particularly across the
23 views
Daily Writeups
⤷ Title: Operation Artemis: North Korean ScarCruft Hijacks HWP Files to Deploy RoKRAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:00:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT37 #Cyber Espionage #DLL side_loading #Genians #HWP #Operation Artemis #phishing #RoKRAT #ScarCruft #South Korea #Steganography
Penetration Testing Tools
Operation Artemis: North Korean ScarCruft Hijacks HWP Files to Deploy RoKRAT
As part of a large-scale malware campaign dubbed Operation Artemis, the North Korean hacking group APT37—also known as
16 views
Daily Writeups
⤷ Title: The Big Screen Remembers: Samsung & Google Bring Vision AI to Your Photos
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 02:48:29 +0000
════════════════════════
⌗ Tags: #Technology #AI Editing #Bixby AI #Google DeepMind #Google Photos #Memories #Nano Banana #samsung #Smart TV 2026 #Tizen OS #Vision AI Companion
Daily CyberSecurity
The Big Screen Remembers: Samsung & Google Bring Vision AI to Your Photos
Samsung's 2026 TVs will natively integrate Google Photos and Vision AI, bringing exclusive Memories, AI editing, and video generation to the big screen.
18 views
Daily Writeups
⤷ Title: The Memory Rebellion: SoftBank & Intel’s SAIMEMORY Aims to Topple HBM Dominance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 02:45:34 +0000
════════════════════════
⌗ Tags: #Technology #AI Memory #Fujitsu #HBM #intel #Masayoshi Son #Memory Wall #PSMC #RIKEN #SAIMEMORY #semiconductor #SoftBank #Stacked DRAM
Daily CyberSecurity
The Memory Rebellion: SoftBank & Intel’s SAIMEMORY Aims to Topple HBM Dominance
SAIMEMORY, backed by SoftBank, Intel, and now Fujitsu, is developing a low-power HBM successor to end the AI memory shortage and challenge Korean dominance.
20 views
Daily Writeups
⤷ Title: The Year Linux Went “Rusty”: 2025’s Most Audacious Kernel Breakthroughs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 02:30:03 +0000
════════════════════════
⌗ Tags: #Linux #2025 Review #Bcachefs #Linus Torvalds #Linux Kernel #Meta #NOVA Driver #nvidia #open_source #Rust_for_Linux #Steam Deck #TernFS #WebAssembly
Daily CyberSecurity
The Year Linux Went "Rusty": 2025's Most Audacious Kernel Breakthroughs
From Meta adopting the Steam Deck scheduler to the first Rust CVE, 2025 was the year Linux matured, clashed, and conquered. Read the full year-end wrap.
25 views
Daily Writeups
⤷ Title: Every Bug Bounty Hunter Starts with the OWASP Top 10
════════════════════════
𐀪 Author: Jugal Patel
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 02:32:21 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #bug_bounty #web_application_security #ethical_hacking #cybersecurity
Medium
Every Bug Bounty Hunter Starts with the OWASP Top 10
Linkedin : Cybersense Jugal Patel
Instagram : Jugal Patel
25 views
Daily Writeups
⤷ Title: 針對 TSMC 2nm 暨東京威力科創營業秘密外流事件之個案評估報告
════════════════════════
𐀪 Author: p1x06u9
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:09:15 GMT
════════════════════════
⌗ Tags: #semiconductors #technology #tsmc #infosec #cybersecurity
Medium
針對 TSMC 2nm 暨東京威力科創營業秘密外流事件之個案評估報告
執行摘要
30 views
Daily Writeups
⤷ Title: TryHackMe: Year of the Pig Writeup
════════════════════════
𐀪 Author: cbev
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:33:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #tryhackme #information_security
Medium
TryHackMe: Year of the Pig Writeup
This box is ranked hard difficulty on THM, it involves us brute forcing the login page with a custom wordlist, enumerating a sqlite…
42 views
Daily Writeups
⤷ Title: TryHackMe | The Phishing Pond |Write-up
════════════════════════
𐀪 Author: Puterishariff
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 02:48:37 GMT
════════════════════════
⌗ Tags: #writeup #tryhackme #phishing
Medium
TryHackMe | The Phishing Pond |Write-up
46 views
Daily Writeups
⤷ Title: TryHackMe | Network Traffic Basics Walkthrough.
════════════════════════
𐀪 Author: Umang Mishra
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 05:36:20 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #tryhackme_writeup
Medium
TryHackMe | Network Traffic Basics Walkthrough.
Network Traffic Analysis (NTA) is a process that encompasses capturing, inspecting, and analyzing data as it flows in a network. Its goal…
52 views