Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Mozilla Adds One-Click Option to Disable Generative AI Features in Firefox
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 11:09:00 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: The Silent Sentinel: How WhatsApp is Rewriting Its Media Engine in Rust to Stop “Stagefright” 2.0
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:58:15 +0000
════════════════════════
⌗ Tags: #Technology #C++ vs Rust #cybersecurity news #end_to_end encryption #Kaleidoscope security #media processing #Memory Safety #mobile security #Rust Programming #Stagefright #WhatsApp
Penetration Testing Tools
The Silent Sentinel: How WhatsApp is Rewriting Its Media Engine in Rust to Stop "Stagefright" 2.0
WhatsApp has introduced a sophisticated layer of defense that operates clandestinely to the user, yet effectively neutralizes surreptitious
28 views
Daily Writeups
⤷ Title: Shadow Commits: The Stealthy “Force Push” Attack That Compromised Plone’s GitHub Repositories
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:57:22 +0000
════════════════════════
⌗ Tags: #Malware #credential exfiltration #force push attack #GitHub rulesets #GitHub security breach #malicious JavaScript #open source security #Personal Access Token (PAT) #Plone CMS #RCE exploit #Supply Chain Security
Penetration Testing Tools
Shadow Commits: The Stealthy "Force Push" Attack That Compromised Plone’s GitHub Repositories
A stealthy security breach has compromised one of the most prominent open-source content management projects. An anonymous adversary
15 views
Daily Writeups
⤷ Title: 40 Million Requests Per Second: How Pingora 0.7.0 is Redefining the Memory-Safe Internet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:55:08 +0000
════════════════════════
⌗ Tags: #Technology #Cloudflare #high_performance computing #HTTP/2 #load balancing #Memory Safety #mTLS #network infrastructure #Pingora 0.7.0 #proxy framework #Rust Programming
Penetration Testing Tools
40 Million Requests Per Second: How Pingora 0.7.0 is Redefining the Memory-Safe Internet
The developers have unveiled a formidable new iteration of Pingora, a sophisticated framework engineered for the construction of
14 views
Daily Writeups
⤷ Title: The Final Sunset: Microsoft Lays Out the 3-Phase Plan to Kill NTLM After 30 Years
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:48:53 +0000
════════════════════════
⌗ Tags: #Microsoft #Windows #Active Directory Security #cybersecurity news #IAKerb #Kerberos authentication #Local KDC #NTLM deprecation #NTLM relay attack #Pass_the_Hash #Windows 11 24H2 #Windows Server 2025
Penetration Testing Tools
The Final Sunset: Microsoft Lays Out the 3-Phase Plan to Kill NTLM After 30 Years
Microsoft has resolved to finally relegate NTLM to the periphery of its ecosystem, decreeing that in forthcoming Windows
13 views
Daily Writeups
⤷ Title: The Async Escape: Critical 9.8 Flaw in vm2 Turns JavaScript Sandboxes Into Open Gateways
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:46:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #async/await exploit #CVE_2026_22709 #JavaScript security #Node.js #npm security #Promise sanitization #RCE vulnerability #Sandbox Escape #Tech News #vm2
Penetration Testing Tools
The Async Escape: Critical 9.8 Flaw in vm2 Turns JavaScript Sandboxes Into Open Gateways
A critical sandbox escape vulnerability has been unearthed within the vm2 library—a utility frequently employed as a JavaScript
10 views
Daily Writeups
⤷ Title: Zero-Day Flaw: Why Ivanti’s 9.8-Rated “Bash” Flaws Are a Disaster for Mobile Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:45:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bash injection #CISA KEV #CVE_2026_1281 #CVE_2026_1340 #cybersecurity #EPMM #Ivanti #Mobile Device Management #RCE #WatchTowr #zero_day
Penetration Testing Tools
Zero-Day Flaw: Why Ivanti’s 9.8-Rated "Bash" Flaws Are a Disaster for Mobile Security
Ivanti has disseminated remedial updates addressing two critical zero-day vulnerabilities within its Endpoint Manager Mobile (EPMM) platform. At
12 views
Daily Writeups
⤷ Title: S/MIME Stack Overflow: OpenAI Researchers Uncover “Highly Likely” RCE in GnuPG
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:44:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_24881 #cybersecurity news #GnuPG 2.5.17 #gpg_agent #Gpg4win 5.0.1 #OpenAI Security Research #RCE vulnerability #S/MIME security #stack buffer overflow #T8044
Penetration Testing Tools
S/MIME Stack Overflow: OpenAI Researchers Uncover "Highly Likely" RCE in GnuPG
The GnuPG Project has inaugurated a vital maintenance release, GnuPG 2.5.17, engineered to rectify a critical security deficit
9 views
Daily Writeups
⤷ Title: Automation or Infiltration? The JFrog Discoveries Breaking n8n’s Security Sandboxes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:42:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_0863 #CVE_2026_1470 #JavaScript eval injection #JFrog Security #n8n #Ni8mare #python_task_executor #RCE vulnerability #Sandbox Escape #workflow automation security
Penetration Testing Tools
Automation or Infiltration? The JFrog Discoveries Breaking n8n’s Security Sandboxes
A team of cybersecurity experts has unearthed two critically severe vulnerabilities within the n8n workflow automation platform. Both
12 views
Daily Writeups
⤷ Title: Part 3: From Recon to Critical Impact — Chaining Bugs the Right Way
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:19:36 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #bug_bounty #ethical_hacking #penetration_testing
Medium
Part 3: From Recon to Critical Impact — Chaining Bugs the Right Way
Part 3: From Recon to Critical Impact — Chaining Bugs the Right Way
14 views
Daily Writeups
⤷ Title: Recon for PHP, ASPX, JSP Juicy Endpoints via URLScan Dorking
════════════════════════
𐀪 Author: Abhirup Konwar
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:34:37 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #pentesting #ethical_hacking #reconnaissance
Medium
Recon for PHP, ASPX, JSP Juicy Endpoints via URLScan Dorking
From 10000+ subdomains which one to select in bug bounty hunting ?
16 views
Daily Writeups
⤷ Title: Open Deepseek Database:Wiz Bug Bounty Masterclass Lesson
════════════════════════
𐀪 Author: Jared Douville
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:10:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_masterclass #hacking #red_team #bug_bounty
Medium
Open Deepseek Database:Wiz Bug Bounty Masterclass Lesson
Hey everyone! Today, we’re diving deep into a recent cybersecurity challenge that mirrors a critical real-world vulnerability from January…
18 views
Daily Writeups
⤷ Title: Inside the Global Software Composition Analysis Market: Technology Evolution and Vendor Landscape
════════════════════════
𐀪 Author: Gargiben
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:13:15 GMT
════════════════════════
⌗ Tags: #composition_software #softwaresupplychain #open_source_security #application_security #devsecops
Medium
Inside the Global Software Composition Analysis Market: Technology Evolution and Vendor Landscape
QKS Group’s Software Composition Analysis (SCA) market delivers an in-depth assessment of the global landscape, covering emerging…
22 views
Daily Writeups
⤷ Title: Malware Analysis: Analyzing Smokebot and Pikabot Loaders
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:48:18 GMT
════════════════════════
⌗ Tags: #hacking #cybercrime #malware #malware_analysis #cybersecurity
Medium
Malware Analysis: Analyzing Smokebot and Pikabot Loaders
What is a Loader Malware?
13 views
Daily Writeups
⤷ Title: Understanding Vulnerabilities: A Guide to Modern Cyber Threats and Defense
════════════════════════
𐀪 Author: Khabbab Sarker
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:40:19 GMT
════════════════════════
⌗ Tags: #career_advice #soc_analyst #software_engineering #infosec #hacking
Medium
Understanding Vulnerabilities: A Guide to Modern Cyber Threats and Defense
In the world of cybersecurity, the battle between attackers and defenders is a constant race against time. Every piece of software, from…
13 views
Daily Writeups
⤷ Title: Data Poisoning Attacks: How Hackers Manipulate AI Models
════════════════════════
𐀪 Author: Majidbasharat
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:33:14 GMT
════════════════════════
⌗ Tags: #ai #data #hacking #cybersecurity #data_poisoning
Medium
Data Poisoning Attacks: How Hackers Manipulate AI Models
Artificial Intelligence (AI) systems are only as trustworthy as the data used to train them. As organizations increasingly rely on machine…
11 views
Daily Writeups
⤷ Title: Engineering Database Activity Monitoring (DAM) | From Bare-Metal Linux to AWS RDS — EPISODE 3
════════════════════════
𐀪 Author: Vijenex
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:19:53 GMT
════════════════════════
⌗ Tags: #vijenex #dam #database_security #information_security #hacking
Medium
Engineering Database Activity Monitoring (DAM) | From Bare-Metal Linux to AWS RDS — EPISODE 3
🚨 Detection, Attacks, Telemetry, and Forensics 🚨
9 views
Daily Writeups
⤷ Title: Engineering Database Activity Monitoring (DAM) | From Bare-Metal Linux to AWS RDS — EPISODE 3
════════════════════════
𐀪 Author: Vijenex
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:19:23 GMT
════════════════════════
⌗ Tags: #hacking #dam #database_security #information_security #red_team
Medium
Engineering Database Activity Monitoring (DAM) | From Bare-Metal Linux to AWS RDS — EPISODE 3
🚨 Detection, Attacks, Telemetry, and Forensics 🚨
18 views
Daily Writeups
⤷ Title: How Attackers Collect Information Before an Attack (Recon Explained)
════════════════════════
𐀪 Author: Abhinsubej
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 07:01:01 GMT
════════════════════════
⌗ Tags: #reconnaissance #cybersecurity #cybersecurity_training #hacking #ethical_hacking
Medium
How Attackers Collect Information Before an Attack (Recon Explained)
Before any cyber attack happens, there is always a silent phase that most people never notice. Attackers don’t start by hacking systems —…
21 views
Daily Writeups
⤷ Title: Bug Bounty Masterclass: How a Forgotten API Exposed Thousands of Passengers
════════════════════════
𐀪 Author: Jared Douville
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:55:25 GMT
════════════════════════
⌗ Tags: #api #hacking #bug_bounty_masterclass #hackerone #swagger
Medium
Bug Bounty Masterclass: How a Forgotten API Exposed Thousands of Passengers
A Bug Bounty Masterclass Walkthrough
13 views
Daily Writeups
⤷ Title: Clash Of Clans APK
════════════════════════
𐀪 Author: Bandisharecx
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:47:02 GMT
════════════════════════
⌗ Tags: #bandishare #hacking #games #apk_mod #clashofclansapkfull
Medium
Clash Of Clans APK
Clash Of Clans APK giúp người chơi tập trung hoàn toàn vào chiến thuật xây dựng và tấn công mà không bị gián đoạn bởi thời gian chờ nâng…
10 views