Daily Writeups
@Daily_Writeups
3.62K subscribers
4 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.62K subscribers
Daily Writeups
⤷ Title: OSCP Exam Secrets — Avoiding Rabbit Holes and Staying on Track (Part 4)
════════════════════════
𐀪 Author: Got Root?
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 01:15:32 GMT
════════════════════════
⌗ Tags: #infosec #information_security #cybersecurity #information_technology #hacking
Medium
OSCP Exam Secrets — Avoiding Rabbit Holes and Staying on Track (Part 4)
Part 4 reveals how smart breaks, structured reporting, and a final checklist can protect you from OSCP rabbit holes.
45 views
Daily Writeups
⤷ Title: Best Hacking Tools for 2026: From Linux to DragonOS
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 01:04:49 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #ethical_hacking #dragon_os #hacking_tools
Medium
Best Hacking Tools for 2026: From Linux to DragonOS
Forget the Fancy Hacks. Your Toolkit is Your Foundation.
33 views
Daily Writeups
⤷ Title: The Walking Dead of Active Directory
════════════════════════
𐀪 Author: Nikos Vourdas (nickvourd)
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 01:26:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #red_teaming #penetration_testing #red_team #active_directory
Medium
The Walking Dead of Active Directory
Hello folks, @nickvourd is calling! Just your friendly neighborhood APT! The story shared in this post is inspired by a real-world…
27 views
Daily Writeups
⤷ Title: The Skeleton Key in your Pocket: Mastering The iCopy-XS (Part 2 of 5)
════════════════════════
𐀪 Author: Nicholas Mullenski
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 01:10:16 GMT
════════════════════════
⌗ Tags: #penetration_testing #technology #gadgets #cybersecurity #ethical_hacking
Medium
The Skeleton Key in your Pocket: Mastering The iCopy-XS (Part 2 of 5)
THE MAGIC TRICK (VELOCITY & DICTIONARY ATTACKS)🔓 THE EXPECTATION VS. REALITY
31 views
Daily Writeups
⤷ Title: BYPASSING STATIC ANALYSIS
════════════════════════
𐀪 Author: Cybernight
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 01:07:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #security_research #threat_detection #malware_analysis
Medium
BYPASSING STATIC ANALYSIS
BEFORE
34 views
Daily Writeups
⤷ Title: CTF Galaxy Dash Access JWT Private Key
════════════════════════
𐀪 Author: Mr3Moe
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 03:38:43 GMT
════════════════════════
⌗ Tags: #bug_bounty #jwt #ctf #web_security #ctf_writeup
Medium
CTF Galaxy Dash Access JWT Private Key
Galaxy Dash recently rolled out new features to their application, and with that came a fresh security challenge. In this weekly lab, the…
37 views
Daily Writeups
⤷ Title: I Got Tired of Rebuilding DAST in Every Repo
════════════════════════
𐀪 Author: Rio Wiraldhani
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 02:20:56 GMT
════════════════════════
⌗ Tags: #application_security #open_source #devops #cloud_security #github_actions
Medium
I Got Tired of Rebuilding DAST in Every Repo
So I built a reusable GitHub Actions workflow for ZAP, Nuclei, and OPA
49 views
Daily Writeups
⤷ Title: XSS Made Simple: How It Works, Why It’s Dangerous, and How Hackers Use JavaScript
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Researcher
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 03:40:41 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #pentesting #xss_attack #cybersecurity #bug_bounty_tips
Medium
XSS Made Simple: How It Works, Why It’s Dangerous, and How Hackers Use JavaScript
“Wait… how can a website attack me from inside itself?”
66 views
Daily Writeups
⤷ Title: Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWorm
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 10:34:00 +0530
════════════════════════
⌗ Tags: No_Tags
50 views
Daily Writeups
⤷ Title: IIS Under Siege: UAT-8099 Deploys Region-Locked “BadIIS” & Linux Variants
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:46:23 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Asian Cyber Threat #BadIIS #Cisco Talos #cyber_espionage #GotoHTTP #IIS Security #Linux Malware #SEO Fraud #UAT_8099 #WEBJACK
Daily CyberSecurity
IIS Under Siege: UAT-8099 Deploys Region-Locked "BadIIS" & Linux Variants
Cisco Talos warns of UAT-8099 targeting Asian IIS servers with region-locked BadIIS malware. New variants now attack Linux systems.
45 views
Daily Writeups
⤷ Title: The “Fix” is a Trap: ConsentFix Phishing Bypasses MFA via Azure CLI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:42:43 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AuthCodeFix #Azure CLI #Conditional Access #ConsentFix #MFA Bypass #Microsoft Entra ID #NVISO #OAuth Abuse #phishing #social engineering
Daily CyberSecurity
The "Fix" is a Trap: ConsentFix Phishing Bypasses MFA via Azure CLI
"ConsentFix" phishing tricks users into pasting OAuth codes from Azure CLI, bypassing MFA and Conditional Access. Detect this "fix" scam now.
26 views
Daily Writeups
⤷ Title: Signed & Stolen: “Phantom Stealer” Hijacks Java App via Fake DHL Invoice
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:36:35 +0000
════════════════════════
⌗ Tags: #Malware #AddInProcess32.exe #DHL Phishing #DLL Sideloading #info_stealer #Java security #jdeps.exe #Malware Analysis #Manoj Kshirsagar #Phantom Stealer #Process Hollowing
Daily CyberSecurity
Signed & Stolen: "Phantom Stealer" Hijacks Java App via Fake DHL Invoice
Attackers use fake DHL invoices to sideload Phantom Stealer v3.5.0 via a signed Java utility. Malware hides in AddInProcess32.exe. Watch out.
29 views
Daily Writeups
⤷ Title: New Offensive OT Framework Targeting Energy Infrastructure Emerges on Dark Web
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:32:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT IRAN #Critical Infrastructure #Cyber Warfare #ICS security #IEC 61850 #IRGC #Lab52 #OT Security #Power Grid Attacks #SCADA
Daily CyberSecurity
New Offensive OT Framework Targeting Energy Infrastructure Emerges on Dark Web
New "APT IRAN" framework targets energy grids & military networks. Lab52 links the tool to the IRGC. See the threat to critical infrastructure.
31 views
Daily Writeups
⤷ Title: Silent Intruder: “EncystPHP” Web Shell Burrows into FreePBX Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:27:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Asterisk #CVE_2025_64328 #EncystPHP #FortiGuard Labs #FreePBX #INJ3CTOR3 #Malware Analysis #persistence #VoIP Security #Web Shell
Daily CyberSecurity
Silent Intruder: "EncystPHP" Web Shell Burrows into FreePBX Systems
INJ3CTOR3 hackers target FreePBX with EncystPHP web shell via CVE-2025-64328. Malware uses cron jobs for persistence. Patch immediately.
32 views
Daily Writeups
⤷ Title: “Exfil Out&Look” Flaw Lets Spies Steal Emails via OWA Undetected
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:21:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Audit Logs #Cloud Security #data exfiltration #Email Security #Exfil Out&Look #Insider Threat #Microsoft 365 #Outlook Web Access #OWA #Varonis Threat Labs
Daily CyberSecurity
"Exfil Out&Look" Flaw Lets Spies Steal Emails via OWA Undetected
New "Exfil Out&Look" attack uses OWA add-ins to steal emails without leaving logs. Microsoft has no immediate fix for this blind spot.
19 views
Daily Writeups
⤷ Title: Hidden in Plain Sight: TA584 Deploys “Tsundere Bot” & Invisible Registry Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:11:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Fileless Malware #IAB #initial access broker #Malware Analysis #Null Byte Injection #Proofpoint #ransomware #Registry Persistence #TA584 #Tsundere Bot
Daily CyberSecurity
Hidden in Plain Sight: TA584 Deploys "Tsundere Bot" & Invisible Registry Keys
TA584 triples activity with new "Tsundere Bot" malware. Attackers use invisible Registry keys to hide persistence. Read the Proofpoint analysis.
15 views
Daily Writeups
⤷ Title: Wrapped in Stealth: Python RAT Hides Inside ELF Binary to Evade Detection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:05:00 +0000
════════════════════════
⌗ Tags: #Malware #Adaptive Beaconing #anti_forensics #Cross_Platform Malware #Cyber Security #ELF Binary #K7 Labs #Malware Analysis #PyInstaller #Python Malware #rat
Daily CyberSecurity
Wrapped in Stealth: Python RAT Hides Inside ELF Binary to Evade Detection
K7 Labs uncovers a stealthy Python-based RAT disguised as an ELF binary. Features adaptive beaconing and anti-forensics to stay hidden. Read the analysis.
20 views
Daily Writeups
⤷ Title: AI-Coded Malware: Vietnamese “Huna” Actor Targets Job Seekers with PureRAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:00:55 +0000
════════════════════════
⌗ Tags: #Malware #AI Malware #Cybercrime #Huna #Job Scam #Malware Analysis #phishing #PureRAT #social engineering #Threat Hunter Team #Vietnam Hacker
Daily CyberSecurity
AI-Coded Malware: Vietnamese "Huna" Actor Targets Job Seekers with PureRAT
New AI-generated malware campaign targets job seekers. Vietnamese actor "Huna" uses fake job offers to deliver PureRAT via Dropbox.
16 views
Daily Writeups
⤷ Title: Vibe Coding: Balancing Speed and Security
════════════════════════
𐀪 Author: Sherman Davis
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 05:09:46 GMT
════════════════════════
⌗ Tags: #ai #software_development #cybersecurity #vibe_coding #application_security
Medium
Vibe Coding: Balancing Speed and Security
The demand for developers to produce more applications at an unprecedented speed has made many shift to vibe coding. What is vibe coding…
18 views
Daily Writeups
⤷ Title: 25 Best Hacking Movies For Cybersecurity Enthusiasts [2026 List]
════════════════════════
𐀪 Author: Alex Cole
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 05:18:37 GMT
════════════════════════
⌗ Tags: #coding #college #students #assignmentdude #hacking
Medium
25 Best Hacking Movies For Cybersecurity Enthusiasts [2026 List]
It’s 2 a.m. in my dorm room, and I’m three energy drinks deep into debugging a network security lab. My roommate walks in, sees my terminal…
20 views
Daily Writeups
⤷ Title: Zero Trust in Cybersecurity Sounds So Cool, but the Failure Rate Is Around 75%!
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 04:28:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #cyberattack #zero_trust #cybercrime
Medium
Zero Trust in Cybersecurity Sounds So Cool, but the Failure Rate Is Around 75%!
The Seduction of Perfection
20 views