Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Acheron: Indirect Syscalls in Go Done Right
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 22:50:13 GMT
════════════════════════
⌗ Tags: #technology #cyberattack #ethical_hacking #hacking #cybersecurity
Medium
Acheron: Indirect Syscalls in Go Done Right
Why this library matters for modern offensive tradecraft
13 views
Daily Writeups
⤷ Title: Real Life Machine Windows Server 2022 Attacking Walkthrough WeInnovate
════════════════════════
𐀪 Author: Y0s_0x_IBM
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 22:21:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #windows_server #hacking
Medium
Real Life Machine Windows Server 2022 Attacking Walkthrough WeInnovate
Hello and welcome for my reports again
11 views
Daily Writeups
⤷ Title: John the Ripper: Guía Completa de Cracking para Bug Bounty y Auditoría
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #bug_bounty #hacking #penetration_testing
Medium
John the Ripper: Guía Completa de Cracking para Bug Bounty y Auditoría
Domina John the Ripper: instalación, comandos esenciales y estrategias avanzadas para auditorías de contraseñas y Bug Bounty.
12 views
Daily Writeups
⤷ Title: 30 Days of Red Team: Day 21 — Week 3 Integration & Practice
════════════════════════
𐀪 Author: Maxwell Cross
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 22:28:29 GMT
════════════════════════
⌗ Tags: #active_directory #red_team #ethical_hacking #penetration_testing #cybersecurity
Medium
30 Days of Red Team: Day 21 — Week 3 Integration & Practice
How to chain Credential Harvesting, Privilege Escalation, and Pivoting into a unified attack campaign that turns a single shell into total…
22 views
Daily Writeups
⤷ Title: Benign | TryHackMe!
════════════════════════
𐀪 Author: Shyroot
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 23:34:16 GMT
════════════════════════
⌗ Tags: #tryhackme #blue_team #incident_response #splunk #cybersecurity
Medium
Benign | TryHackMe!
Scenario: Identify and Investigate an Infected Host
12 views
Daily Writeups
⤷ Title: Offsec “Sar” CTF Writeup
════════════════════════
𐀪 Author: sabR
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 21:58:27 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #pentesting #ethical_hacking #cybersecurity #tryhackme
Medium
Offsec “Sar” CTF Writeup
Step 1: Reconnaissance
16 views
Daily Writeups
⤷ Title: SSRF via Referer Header: How a Simple Header Led to a Serious Finding
════════════════════════
𐀪 Author: AKU
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 13:52:11 GMT
════════════════════════
⌗ Tags: #bugcrowd #hacking #bug_bounty #cybersecurity #ssrf
Medium
SSRF via Referer Header: How a Simple Header Led to a Serious Finding
Introduction
20 views
Daily Writeups
⤷ Title: Investigating a Potential Insider Threat with Microsoft Defender for Endpoint
════════════════════════
𐀪 Author: Julian Smith
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 00:36:03 GMT
════════════════════════
⌗ Tags: #infosec #blue_team #cybersecurity
Medium
Investigating a Potential Insider Threat with Microsoft Defender for Endpoint
Goal & Scenario:
17 views
Daily Writeups
⤷ Title: GamingServer Room THM
════════════════════════
𐀪 Author: Lazzaro_404
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 23:59:45 GMT
════════════════════════
⌗ Tags: #tryhackme #gamingserver #ctf_writeup
Medium
GamingServer Room THM
First thing i thought about right after starting the machine is visiting the url. Visiting the application URL i found a normal html page.
15 views
Daily Writeups
⤷ Title: Breaking Our Own APIs: Practical Security Testing with ffuf
════════════════════════
𐀪 Author: Rathinasabapathy Ramalingam (Saba)
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:54:22 GMT
════════════════════════
⌗ Tags: #security #iso_27001 #api_security #owasp_api_security_top_10 #information_security
Medium
Breaking Our Own APIs: Practical Security Testing with ffuf
It started with what felt like an innocent discovery in our QA environment.
25 views
Daily Writeups
⤷ Title: 2nm Power Shift: Samsung’s Exynos 2600 Rivals Snapdragon in New Galaxy S26 Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:52:33 +0000
════════════════════════
⌗ Tags: #Technology #2nm GAA process #Android 16 #Exynos 2600 #Geekbench 6 scores #mobile gaming performance #Samsung Foundry SF2 #Samsung Galaxy S26 #Samsung Xclipse 960 #Snapdragon 8 Elite Gen 5 #Tech News
Daily CyberSecurity
2nm Power Shift: Samsung’s Exynos 2600 Rivals Snapdragon in New Galaxy S26 Leaks
Samsung’s 2nm Exynos 2600 hits Geekbench, showing a 39% performance jump and narrowing the gap with Qualcomm. Is the "Exynos Curse" finally over for 2026?
21 views
Daily Writeups
⤷ Title: Grid Sabotage: “Static Tundra” Hits Poland’s Energy Sector with DynoWiper
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:47:22 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Berserk Bear #CERT Polska #Critical Infrastructure #Cyber Sabotage #DynoWiper #energy sector #LazyWiper #Mikronika #Moxa NPort #OT Security #Poland #Static Tundra
Daily CyberSecurity
Grid Sabotage: "Static Tundra" Hits Poland's Energy Sector with DynoWiper
CERT Polska reveals destructive attacks on energy infrastructure. "Static Tundra" used DynoWiper and LazyWiper to brick OT devices. Read more.
14 views
Daily Writeups
⤷ Title: ASUS Kills “File Shredder” Feature to Fix Critical Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:21:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary File Creation #ASUS #ASUS Business Manager #Commercial PC #CVE_2025_13348 #File Shredder #infosec #Patch Alert #Secure Delete #Vulnerability
Daily CyberSecurity
ASUS Kills "File Shredder" Feature to Fix Critical Flaw
ASUS removes "File Shredder" from Business Manager due to CVE-2025-13348 (CVSS 8.5). The feature is gone in V3.0.37.0. Check your commercial PCs.
17 views
Daily Writeups
⤷ Title: Trojan AI: OpenClaw “Skills” Marketplace Flooded with Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:56:12 +0000
════════════════════════
⌗ Tags: #Malware #AI Agents #AI security #AMOS #Atomic Stealer #Clawdbot #ClawHub #malware #OpenClaw #supply chain attack #VirusTotal
Daily CyberSecurity
Trojan AI: OpenClaw "Skills" Marketplace Flooded with Malware
VirusTotal warns of massive supply chain attack on OpenClaw. Hackers use fake "skills" to deploy malware like Atomic Stealer. Verify your agents.
20 views
Daily Writeups
⤷ Title: Hydra Tactics: North Korea’s LABYRINTH CHOLLIMA Splits to Hunt Crypto & Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:46:31 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #CrowdStrike #Cryptocurrency Theft #cyber_espionage #FudModule #GOLDEN CHOLLIMA #LABYRINTH CHOLLIMA #North Korea #PRESSURE CHOLLIMA #WannaCry
Daily CyberSecurity
Hydra Tactics: North Korea's LABYRINTH CHOLLIMA Splits to Hunt Crypto & Secrets
North Korea's LABYRINTH CHOLLIMA splits into 3 units: GOLDEN, PRESSURE, & Core. CrowdStrike reveals new strategy targeting crypto & defense.
18 views
Daily Writeups
⤷ Title: Fancy Bear Returns: APT28 Exploits Office Flaw in “Operation Neusploit”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:18:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT28 #CVE_2026_21509 #cyber_espionage #Fancy Bear #MiniDoor #Operation Neusploit #PixyNetLoader #RTF Exploit #russia #Zscaler ThreatLabz
Daily CyberSecurity
Fancy Bear Returns: APT28 Exploits Office Flaw in "Operation Neusploit"
APT28 launches "Operation Neusploit" targeting Europe. Hackers exploit CVE-2026-21509 to deploy MiniDoor malware via RTF files. Patch Office now.
9 views
Daily Writeups
⤷ Title: WiFi Hijack: Hikvision Patches Command Injection in DS-3WAP Access Points
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:10:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access point #Command Injection #CVE_2026_0709 #DS_3WAP #firmware update #Hikvision #IoT security #network_security #rce #Wireless Security
Daily CyberSecurity
WiFi Hijack: Hikvision Patches Command Injection in DS-3WAP Access Points
Hikvision patches high-severity command injection (CVE-2026-0709) in DS-3WAP access points. Authenticated attackers can execute code. Update now.
25 views
Daily Writeups
⤷ Title: Broadcast Hijack: Critical KiloView Flaw (CVSS 9.8) Grants Full Control
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:05:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Admin Takeover #Broadcast Security #CISA alert #CVE_2026_1453 #firmware update #IoT security #KiloView #Streaming Security #Video Encoder Security
Daily CyberSecurity
Broadcast Hijack: Critical KiloView Flaw (CVSS 9.8) Grants Full Control
Critical KiloView flaw CVE-2026-1453 (CVSS 9.8) allows unauthenticated admin takeover. Broadcast feeds at risk. Check affected E1/E2 versions immediately.
20 views
Daily Writeups
⤷ Title: AI-Coded Oppression: “RedKitten” Malware Targets Iranian Protesters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:59:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #AI Malware #cyber_espionage #HarfangLab #Human Rights #Iran Protests #LLM Security #RedKitten #SloppyMIO #surveillance #Telegram C2
Daily CyberSecurity
AI-Coded Oppression: "RedKitten" Malware Targets Iranian Protesters
"RedKitten" spies on Iranian protesters using AI-written malware. Attackers use fake death lists to deploy SloppyMIO surveillance tools.
13 views
Daily Writeups
⤷ Title: The “IClickFix” Trap: 3,800+ WordPress Sites Poisoned by Fake CAPTCHAs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:49:29 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #fake CAPTCHA #IClickFix #malware #NetSupport RAT #powershell #Sekoia TDR #social engineering #watering hole attack #wordpress security
Daily CyberSecurity
The "IClickFix" Trap: 3,800+ WordPress Sites Poisoned by Fake CAPTCHAs
IClickFix malware hijacks 3,800+ WordPress sites with fake Cloudflare CAPTCHAs. This watering hole attack tricks users into running malicious PowerShell.
14 views
Daily Writeups
⤷ Title: Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 01:41:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Syncope #CVE_2026_23794 #CVE_2026_23795 #IAM Security #Identity Management #Open Source Security #Patch Alert #Session Hijacking #XSS #xxe
Daily CyberSecurity
Identity at Risk: Apache Syncope Patches Critical Login XSS & XXE Flaws
Apache patches XSS (CVE-2026-23794) & XXE flaws in Syncope. Vulnerability allows session hijacking via login page. Update to v3.0.16 or v4.0.4 now.
18 views