Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: What You’ll Learn After Gaining Your 1'st Hacking Certifcate? | Certificated Hacker’s Roadmap #1
════════════════════════
𐀪 Author: NnFace
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 23:33:13 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #ethical_hacking #certification #ceh_certification
Medium
What You’ll Learn After Gaining Your 1'st Hacking Certifcate? | Certificated Hacker’s Roadmap #1
Greetings, Beautifull Hackers. There was a pretty long time brake, wasn’t it? Here I am to share one question that I’ve answered and it’s…
36 views
Daily Writeups
⤷ Title: Windows Malware Development Roadmap
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 23:00:29 GMT
════════════════════════
⌗ Tags: #malware #pentesting #red_team #cybersecurity #hacking
Medium
Windows Malware Development Roadmap
Welcome to this Medium article! Unlike my previous posts that dive into specific malware development techniques, this one focuses on a…
39 views
Daily Writeups
⤷ Title: Chaos is the Name of this Congress
════════════════════════
𐀪 Author: A. J. Wyzinski
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 22:35:07 GMT
════════════════════════
⌗ Tags: #technology #ai #claude #society #hacking
Medium
Chaos is the Name of this Congress
And it is probably one of the sanest meetings on tech around
36 views
Daily Writeups
⤷ Title: APPRENEZ LE NMAP: Exécutez des Scans Stratégiques avec Scripts et Automatisation
════════════════════════
𐀪 Author: Diego Rodrigues
════════════════════════
ⴵ Time: Sun, 04 Jan 2026 21:58:41 GMT
════════════════════════
⌗ Tags: #virus #nmap #hacking #kali_linux #metasploit
Medium
APPRENEZ LE NMAP: Exécutez des Scans Stratégiques avec Scripts et Automatisation
#BestSeller #Amazon #France #Lesmeilleuresventes #Top10 en Certification en informatique et Internet
36 views
Daily Writeups
⤷ Title: Researcher Wipes White Supremacist Dating Sites, Leaks Data on okstupid.lol
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 01:36:49 +0000
════════════════════════
⌗ Tags: #Hacking News #Security #CCC #Cybersecurity #DDoSecrets #europe #Germany #HACKTIVISM #Martha Root #OkCupid #OkStupid #Vulnerability #WhiteChild #WhiteDate #WhiteDeal
Hackread
Researcher Wipes White Supremacist Dating Sites, Leaks Data on okstupid.lol
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
26 views
Daily Writeups
⤷ Title: CVE-2026-21440: New AdonisJS 9.2 Critical Flaw Allows Arbitrary File Writes and RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:44:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@adonisjs/bodyparser #AdonisJS #Arbitrary File Write #CVE_2026_21440 #Cyber Security #File Upload Vulnerability #Node.js #Patch Alert #Path Traversal #rce #web development
Daily CyberSecurity
CVE-2026-21440: New AdonisJS 9.2 Critical Flaw Allows Arbitrary File Writes and RCE
CVE-2026-21440: A critical 9.2 flaw in AdonisJS file uploads allows attackers to overwrite system files and gain RCE. Update to v10.1.2 immediately!
24 views
Daily Writeups
⤷ Title: “Sliver” in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:40:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Bangladesh #Bangladesh Airforce #c0baltstrik3d #CVE_2025_55182 #cyber_espionage #Edge Security #Fast Reverse Proxy #FortiWeb #FRP #Pakistan #React2Shell #Sliver C2
Daily CyberSecurity
"Sliver" in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
Threat actor uses React2Shell to deploy Sliver C2 on FortiWeb devices, using a Bangladesh Airforce decoy to target govt and financial sectors.
32 views
Daily Writeups
⤷ Title: The Invisible Predator: How VVS Stealer Abuses Pyarmor to Ghost Discord Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:32:07 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #Cybercrime #Discord #Discord Injection #Infostealer #Obfuscation #Pyarmor #Python Malware #Session Hijacking #Telegram #Unit 42 #VVS Stealer
Daily CyberSecurity
The Invisible Predator: How VVS Stealer Abuses Pyarmor to Ghost Discord Accounts
Unit 42 unmasks VVS Stealer, a Python-based threat using Pyarmor obfuscation to bypass AV, hijack Discord sessions, and steal browser credentials.
21 views
Daily Writeups
⤷ Title: CVE-2025-66848: Critical Flaw in JD Cloud Routers Grants Hackers Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:28:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Command Injection #CVE_2025_66848 #firmware update #JD Cloud #Joylink API #NAS #rce #Remote Code Execution #root access #router security
Daily CyberSecurity
CVE-2025-66848: Critical Flaw in JD Cloud Routers Grants Hackers Root Access
JD Cloud alerts users to CVE-2025-66848, a 9.8 critical flaw allowing remote attackers to bypass auth and gain root access on NAS routers.
15 views
Daily Writeups
⤷ Title: Transparent Tribe Weaponizes “JLPT” Tests in New Cyber-Espionage Campaign Against India
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:22:18 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT36 #cyber_espionage #Cyfirma #Fileless Malware #India #JLPT #LNK malware #MSHTA #Pakistan_linked #rat #Remote Access Trojan #Transparent Tribe
Daily CyberSecurity
Transparent Tribe Weaponizes "JLPT" Tests in New Cyber-Espionage Campaign Against India
CYFIRMA unmasks APT36's latest campaign: a fake JLPT exam lure using fileless LNK malware to evade antivirus and spy on Indian government targets.
28 views
Daily Writeups
⤷ Title: New WordPress Phishing Scam Steals Credit Cards via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:17:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #3_D Secure bypass #Anurag #credit card theft #cyber fraud #DMARC #Domain Renewal Scam #Exfiltration #OTP Harvesting #phishing #soyfix[.]com #Telegram bot #wordpress
Daily CyberSecurity
New WordPress Phishing Scam Steals Credit Cards via Telegram
Researcher Anurag uncovers a WordPress phishing campaign that steals credit cards and 3-D Secure OTPs, exfiltrating data directly via Telegram bots.
19 views
Daily Writeups
⤷ Title: Eaton UPS Software Flaws Expose Systems to High-Risk Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:11:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Christmas Eve Alert #CVE_2025_59887 #CVE_2025_59888 #DLL hijacking #Eaton #infosec #Power Management #rce #Remote Code Execution #Unquoted Search Path #UPS Companion #Vulnerability
Daily CyberSecurity
Eaton UPS Software Flaws Expose Systems to High-Risk Code Execution
Eaton warns of critical 8.6 severity flaws in UPS Companion software (CVE-2025-59887 & 59888). Upgrade to v3.0 now to prevent hijacking!
16 views
Daily Writeups
⤷ Title: The Sleeper in Your Browser: How DarkSpectre Turned 8.8 Million Extensions into State-Aligned Spies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:06:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Browser Extensions #chrome #cyber_espionage #DarkSpectre #Edge #firefox #GhostPoster #KOI Security #malware #ShadyPanda #state_sponsored #Zoom Stealer
Daily CyberSecurity
The Sleeper in Your Browser: How DarkSpectre Turned 8.8 Million Extensions into State-Aligned Spies
Koi Security unmasks DarkSpectre, a Chinese threat group that used 300+ browser extensions to spy on 8.8M users and steal corporate meeting data.
23 views
Daily Writeups
⤷ Title: Zero-Click Hijack: The PrestaShop Checkout Flaw That Turns Emails Into Full Account Access, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:01:54 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #Ananda Dhakal #CVE_2025_61922 #e_commerce security #paypal #PII Leak #PrestaShop #PS Checkout #Session Hijacking #Web Vulnerability #Zero_Click
Daily CyberSecurity
Zero-Click Hijack: The PrestaShop Checkout Flaw That Turns Emails Into Full Account Access, PoC Publishes
PrestaShop patches a 9.1 critical flaw (CVE-2025-61922) in the Checkout module. Attackers can hijack accounts via email. PoC available.
22 views
Daily Writeups
⤷ Title: QNAP Patches High-Severity SQL Injection and Path Traversal Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:00:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_59384 #CVE_2025_59387 #cybersecurity #Data Protection #Mac Security #MARS #NAS #Path Traversal #Qfiling #QNAP #security #sql injection
Daily CyberSecurity
QNAP Patches High-Severity SQL Injection and Path Traversal Flaws
QNAP patches high-severity flaws (CVSS 8.1) in Qfiling and MARS that allow data theft and code injection. Secure your NAS by updating to the latest versions!
23 views
Daily Writeups
⤷ Title: How Our Agent Extracted a System Prompt Using Base64
════════════════════════
𐀪 Author: Daniel Knight
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:56:05 GMT
════════════════════════
⌗ Tags: #technology #penetration_testing #llm #cybersecurity #prompt_injection_attack
Medium
How Our Agent Extracted a System Prompt Using Base64
Daniel Knight, CEO at Vulnetic
20 views
Daily Writeups
⤷ Title: The Great Disappearing Act -TryHackMe Writeup
════════════════════════
𐀪 Author: 7s26Simon
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:10:25 GMT
════════════════════════
⌗ Tags: #writeup #tryhackme #thegreatdisappearingac #ctf_walkthrough #tryhackme_walkthrough
Medium
The Great Disappearing Act -TryHackMe Writeup
Hard-rated THM Room Writeup
31 views
Daily Writeups
⤷ Title: HTB Labs : Spookifier | Web Exploitation Write-up
════════════════════════
𐀪 Author: Alexander Sapo
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 01:44:43 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #ssti_vulnerability #owasp_top_10 #ctf_writeup #web_hacking
Medium
HTB Labs : Spookifier | Web Exploitation
Category: Web
42 views
Daily Writeups
⤷ Title: CPTS — HackTheBox: Password Attacks — Attacking Active Directory and NTDS.dit
════════════════════════
𐀪 Author: Daniel Hruska
════════════════════════
ⴵ Time: Fri, 02 Jan 2026 20:10:22 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #hackthebox_walkthrough #hackthebox
41 views
Daily Writeups
⤷ Title: DbgNexum: Shellcode injection using the Windows Debugging API
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 03:32:19 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Cyber Security 2026 #DbgNexum #EDR evasion #Hardware Breakpoints #Malware Research #Process injection #red teaming #shellcode #Windows API
Penetration Testing Tools
DbgNexum: Shellcode injection using the Windows Debugging API
DbgNexum is a 2026 PoC that uses Hardware Breakpoints and File Mapping to inject shellcode without standard APIs, making it invisible to most EDRs.
28 views
Daily Writeups
⤷ Title: The End of Offline: Microsoft Silently Kills Phone Activation After 24 Years
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 03:28:15 +0000
════════════════════════
⌗ Tags: #Windows #Air_Gapped Security #Ben Kleinberg #Microsoft #Microsoft Account #Office Activation #Offline Setup #Phone Activation #Windows 10 #Windows 11 #Windows 7
Penetration Testing Tools
The End of Offline: Microsoft Silently Kills Phone Activation After 24 Years
Microsoft has definitively abandoned phone-based activation for Windows and Office. Although the company still references this method in
28 views