Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: -$14.250: Military vulnerability
════════════════════════
𐀪 Author: Lucas Soares
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 18:15:23 GMT
════════════════════════
⌗ Tags: #vulnerability #outsystems #ethical_hacking #rest_api
Medium
-$14.250: Military vulnerability
Emails, names, courses, CPF (tax identification number), mother’s name, date of birth… Better stop here, right?! In this security article…
51 views
Daily Writeups
⤷ Title: -$14.250: A vulnerabilidade militar
════════════════════════
𐀪 Author: Lucas Soares
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 18:13:47 GMT
════════════════════════
⌗ Tags: #security #outsystems #ethical_hacking #army #api
Medium
-$14.250: A vulnerabilidade militar
Emails, nomes, cursos, CPF (identificação fiscal), nome da mãe, data de nascimento… Melhor parar por aqui, né?! Nesse artigo de segurança…
54 views
Daily Writeups
⤷ Title: Insecure Direct Object Reference (IDOR)
════════════════════════
𐀪 Author: Cybernight
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 20:23:41 GMT
════════════════════════
⌗ Tags: #penetration_test #ai #cybersecurity #bug_bounty #information_security
Medium
Insecure Direct Object Reference (IDOR)
Introduction
41 views
Daily Writeups
⤷ Title: The Right Methodology for Hacking Anything
════════════════════════
𐀪 Author: Cybernight
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 20:21:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #penetration_testing #hacking #ai
Medium
The Right Methodology for Hacking Anything
Almost every hacker has been there at some point — staring at a target and wondering, “Am I even good enough?” That doubt is normal…
30 views
Daily Writeups
⤷ Title: Securing API Servers (Week 4)
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 21:04:24 GMT
════════════════════════
⌗ Tags: #api_security #cors #application_security #cybersecurity #api_server
Medium
Securing API Servers (Week 4)
In Week 4, I took the Securing API Servers course on APISEC University.
23 views
Daily Writeups
⤷ Title: Breaking vm2 Isolation in n8n via Exposed Global Helpers (CVE-2025–68697)
════════════════════════
𐀪 Author: Berk Dedekargınoğlu
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 20:56:36 GMT
════════════════════════
⌗ Tags: #red_team #vulnerability #cybersecurity #information_security #application_security
Medium
Breaking vm2 Isolation in n8n via Exposed Global Helpers (CVE-2025–68697)
Introduction
18 views
Daily Writeups
⤷ Title: The Worm That Eats the Supply Chain: Deconstructing Shai-Hulud
════════════════════════
𐀪 Author: The GlassBox Security
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 20:56:21 GMT
════════════════════════
⌗ Tags: #application_security #supply_chain #shai_hulud #supply_chain_security #open_source
Medium
The Worm That Eats the Supply Chain: Deconstructing Shai-Hulud
How a self-replicating NPM malware conquered the ecosystem — and why your CI/CD pipeline is the next victim.
21 views
Daily Writeups
⤷ Title: Sandbox Escape and Remote Code Execution in n8n Python Code Node (CVE-2025–68668)
════════════════════════
𐀪 Author: Berk Dedekargınoğlu
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 20:08:53 GMT
════════════════════════
⌗ Tags: #information_security #red_team #cybersecurity #vulnerability #application_security
Medium
Sandbox Escape and Remote Code Execution in n8n Python Code Node (CVE-2025–68668)
Introduction
32 views
Daily Writeups
⤷ Title: Infrared, Reflections, and Wires: Reading the Signs of Hidden Surveillance
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 21:06:00 GMT
════════════════════════
⌗ Tags: #infrared #surveillance #privacy #opsec #hacking
Medium
Infrared, Reflections, and Wires: Reading the Signs of Hidden Surveillance
Spaces are never neutral. They contain histories, intentions, unseen observation. Walls, furniture, fixtures — they record and transmit…
37 views
Daily Writeups
⤷ Title: Cracking Passwords with John the Ripper: A Beginner’s Guide
════════════════════════
𐀪 Author: Madhu Sudhan
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 20:47:12 GMT
════════════════════════
⌗ Tags: #hacking #cracking #password_cracking #cybersecurity #john_the_ripper
Medium
Cracking Passwords with John the Ripper: A Beginner’s Guide
A step-by-step walkthrough for ethical hacking students.
46 views
Daily Writeups
⤷ Title: What You’ll Learn After Gaining Your 1'st Hacking Certifcate? | Certificated Hacker’s Roadmap #1
════════════════════════
𐀪 Author: NnFace
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 23:33:13 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #ethical_hacking #certification #ceh_certification
Medium
What You’ll Learn After Gaining Your 1'st Hacking Certifcate? | Certificated Hacker’s Roadmap #1
Greetings, Beautifull Hackers. There was a pretty long time brake, wasn’t it? Here I am to share one question that I’ve answered and it’s…
36 views
Daily Writeups
⤷ Title: Windows Malware Development Roadmap
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 23:00:29 GMT
════════════════════════
⌗ Tags: #malware #pentesting #red_team #cybersecurity #hacking
Medium
Windows Malware Development Roadmap
Welcome to this Medium article! Unlike my previous posts that dive into specific malware development techniques, this one focuses on a…
39 views
Daily Writeups
⤷ Title: Chaos is the Name of this Congress
════════════════════════
𐀪 Author: A. J. Wyzinski
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 22:35:07 GMT
════════════════════════
⌗ Tags: #technology #ai #claude #society #hacking
Medium
Chaos is the Name of this Congress
And it is probably one of the sanest meetings on tech around
36 views
Daily Writeups
⤷ Title: APPRENEZ LE NMAP: Exécutez des Scans Stratégiques avec Scripts et Automatisation
════════════════════════
𐀪 Author: Diego Rodrigues
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 21:58:41 GMT
════════════════════════
⌗ Tags: #virus #nmap #hacking #kali_linux #metasploit
Medium
APPRENEZ LE NMAP: Exécutez des Scans Stratégiques avec Scripts et Automatisation
#BestSeller #Amazon #France #Lesmeilleuresventes #Top10 en Certification en informatique et Internet
36 views
Daily Writeups
⤷ Title: Researcher Wipes White Supremacist Dating Sites, Leaks Data on okstupid.lol
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 01:36:49 +0000
════════════════════════
⌗ Tags: #Hacking News #Security #CCC #Cybersecurity #DDoSecrets #europe #Germany #HACKTIVISM #Martha Root #OkCupid #OkStupid #Vulnerability #WhiteChild #WhiteDate #WhiteDeal
Hackread
Researcher Wipes White Supremacist Dating Sites, Leaks Data on okstupid.lol
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
26 views
Daily Writeups
⤷ Title: CVE-2026-21440: New AdonisJS 9.2 Critical Flaw Allows Arbitrary File Writes and RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:44:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@adonisjs/bodyparser #AdonisJS #Arbitrary File Write #CVE_2026_21440 #Cyber Security #File Upload Vulnerability #Node.js #Patch Alert #Path Traversal #rce #web development
Daily CyberSecurity
CVE-2026-21440: New AdonisJS 9.2 Critical Flaw Allows Arbitrary File Writes and RCE
CVE-2026-21440: A critical 9.2 flaw in AdonisJS file uploads allows attackers to overwrite system files and gain RCE. Update to v10.1.2 immediately!
24 views
Daily Writeups
⤷ Title: “Sliver” in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:40:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Bangladesh #Bangladesh Airforce #c0baltstrik3d #CVE_2025_55182 #cyber_espionage #Edge Security #Fast Reverse Proxy #FortiWeb #FRP #Pakistan #React2Shell #Sliver C2
Daily CyberSecurity
"Sliver" in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
Threat actor uses React2Shell to deploy Sliver C2 on FortiWeb devices, using a Bangladesh Airforce decoy to target govt and financial sectors.
32 views
Daily Writeups
⤷ Title: The Invisible Predator: How VVS Stealer Abuses Pyarmor to Ghost Discord Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:32:07 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #Cybercrime #Discord #Discord Injection #Infostealer #Obfuscation #Pyarmor #Python Malware #Session Hijacking #Telegram #Unit 42 #VVS Stealer
Daily CyberSecurity
The Invisible Predator: How VVS Stealer Abuses Pyarmor to Ghost Discord Accounts
Unit 42 unmasks VVS Stealer, a Python-based threat using Pyarmor obfuscation to bypass AV, hijack Discord sessions, and steal browser credentials.
21 views
Daily Writeups
⤷ Title: CVE-2025-66848: Critical Flaw in JD Cloud Routers Grants Hackers Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:28:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Command Injection #CVE_2025_66848 #firmware update #JD Cloud #Joylink API #NAS #rce #Remote Code Execution #root access #router security
Daily CyberSecurity
CVE-2025-66848: Critical Flaw in JD Cloud Routers Grants Hackers Root Access
JD Cloud alerts users to CVE-2025-66848, a 9.8 critical flaw allowing remote attackers to bypass auth and gain root access on NAS routers.
15 views
Daily Writeups
⤷ Title: Transparent Tribe Weaponizes “JLPT” Tests in New Cyber-Espionage Campaign Against India
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:22:18 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT36 #cyber_espionage #Cyfirma #Fileless Malware #India #JLPT #LNK malware #MSHTA #Pakistan_linked #rat #Remote Access Trojan #Transparent Tribe
Daily CyberSecurity
Transparent Tribe Weaponizes "JLPT" Tests in New Cyber-Espionage Campaign Against India
CYFIRMA unmasks APT36's latest campaign: a fake JLPT exam lure using fileless LNK malware to evade antivirus and spy on Indian government targets.
28 views
Daily Writeups
⤷ Title: New WordPress Phishing Scam Steals Credit Cards via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:17:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #3_D Secure bypass #Anurag #credit card theft #cyber fraud #DMARC #Domain Renewal Scam #Exfiltration #OTP Harvesting #phishing #soyfix[.]com #Telegram bot #wordpress
Daily CyberSecurity
New WordPress Phishing Scam Steals Credit Cards via Telegram
Researcher Anurag uncovers a WordPress phishing campaign that steals credit cards and 3-D Secure OTPs, exfiltrating data directly via Telegram bots.
19 views