Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Op Neusploit: Russian APT28 Uses Microsoft Office Flaw in Malware Attacks
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 18:01:08 +0000
════════════════════════
⌗ Tags: #Cyber Attacks #Microsoft #Security #APT28 #Cyber Attack #Cybersecurity #europe #Malware #Neusploit #Romania #Russia #Ukraine #Vulnerability #Windows
Hackread
Op Neusploit: Russian APT28 Uses Microsoft Office Flaw in Malware Attacks
A new campaign by the Russian-linked group APT28, called Op Neusploit, exploits a Microsoft Office flaw to steal emails for remote control of devices in Ukraine, Slovakia, and Romania.
27 views
Daily Writeups
⤷ Title: Cybersecurity Isn’t Technical Anymore — It’s Strategic
════════════════════════
𐀪 Author: Liam
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 18:54:23 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #self_improvement #technology #infosec
Medium
Cybersecurity Isn’t Technical Anymore — It’s Strategic
Firewalls don’t fail. Decisions do.
31 views
Daily Writeups
⤷ Title: HTB — Starting Point [TIER 0] — “Redeemer”
════════════════════════
𐀪 Author: Faraam
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 18:42:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #capture_the_flag #beginner #hackthebox #hacking
Medium
HTB — Starting Point [TIER 0] — “Redeemer”
For our last free Tier 0 box, we will take a look at the Redis service. Redis is a powerful, open-source, in-memory data structure store…
26 views
Daily Writeups
⤷ Title: From Network Pentesting to Red Teaming : The Fast-Track Journey
════════════════════════
𐀪 Author: Maverick
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 18:00:53 GMT
════════════════════════
⌗ Tags: #technology #hacking #who_am_i
Medium
From Network Pentesting to Red Teaming : The Fast-Track Journey
Hey, I’m Shaheer Yasir, better known in the infosec community as Maverick a 19-year-old Red Team Operator and Offensive Cloud Security…
23 views
Daily Writeups
⤷ Title: Race Conditions Tryhackme — (Challenge Web App)
════════════════════════
𐀪 Author: Panglimaizza
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 18:45:51 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #cybersecurity #ctf_writeup #penetration_testing
Medium
Race Conditions Tryhackme — (Challenge Web App)
Introduction
20 views
Daily Writeups
⤷ Title: What Is Phishing & How It Steals Your Data
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 19:40:21 GMT
════════════════════════
⌗ Tags: #cyberattack #phishing #ethical_hacking #technology #data_science
Medium
What Is Phishing & How It Steals Your Data
It does not Hack Your Software it Hacks Your Trust
24 views
Daily Writeups
⤷ Title: Proving Grounds: Prison (Linux) Full Walkthrough
════════════════════════
𐀪 Author: Ekemini Bassey
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 17:55:00 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #jenkins_security #tunneling #sql_injection #privilege_escalation
Medium
📝 [Writeup] Proving Grounds: Prison (Linux)
From Prison Break to Jenkins Break: Tunnelling for Root
31 views
Daily Writeups
⤷ Title: Vulnerability Analysis: Reflected XSS via React Bypass and CSP Whitelist Gadget
════════════════════════
𐀪 Author: lightofmoon
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 21:43:43 GMT
════════════════════════
⌗ Tags: #hacking #html #penetration_testing #web_development #web_penetration_testing
Medium
Vulnerability Analysis: Reflected XSS via React Bypass and CSP Whitelist Gadget
Executive Summary
36 views
Daily Writeups
⤷ Title: TryHackMe (THM) Further Nmap Walkthrough + Answers
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 21:29:31 GMT
════════════════════════
⌗ Tags: #port_scanning #nmap #tryhackme #network_mapping_tools #tryhackme_walkthrough
28 views
Daily Writeups
⤷ Title: What Learning API Security Taught Me About Building Systems for the Real World
════════════════════════
𐀪 Author: Chihurumnanya Ruth Godwin
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 21:04:59 GMT
════════════════════════
⌗ Tags: #learning #cyber_security_awareness #api_security #information_technology #technology
Medium
What Learning API Security Taught Me About Building Systems for the Real World
When I first began learning about API security, my understanding was narrow and overly optimistic. I believed that once an endpoint…
31 views
Daily Writeups
⤷ Title: How to Use Python to Detect SQL Injection
════════════════════════
𐀪 Author: Ilkay Adil
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 13:16:07 GMT
════════════════════════
⌗ Tags: #sql_server #sql #sql_injection #python_programming #python
Medium
How to Use Python to Detect SQL Injection (Beginner-Friendly Guide)
SQL Injection is one of the oldest — and still one of the most dangerous — vulnerabilities in web applications. The good news is that you…
26 views
Daily Writeups
⤷ Title: Jobert Abma — A Determined Black Man & A $50,000 Bounty — Chains, Coke & Doubles
════════════════════════
𐀪 Author: Justas_b_2
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 23:39:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacker #hackerone #cybersecurity #bug_bounty
Medium
Jobert Abma — A Determined Black Man & A $50,000 Bounty — Chains, Coke & Doubles
Against all odds, this is the inspiring true story of one African American man who triumphed over grueling work conditions, a fabricated…
22 views
Daily Writeups
⤷ Title: The Invisible Flaw: A Write-Up on Business Logic & Access Control
════════════════════════
𐀪 Author: lightofmoon
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 22:13:44 GMT
════════════════════════
⌗ Tags: #web_development #bug_bounty #logic #money #web_penetration_testing
Medium
The Invisible Flaw: A Write-Up on Business Logic & Access Control
1. The Challenge Analysis (Barbarossa CTF)
18 views
Daily Writeups
⤷ Title: What If SSO Logged You In Without Checking Your Password?
════════════════════════
𐀪 Author: Sujaykumar
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 23:40:57 GMT
════════════════════════
⌗ Tags: #sso_authentication #identity_management #application_security #cybersecurity #enterprise_security
Medium
What If SSO Logged You In Without Checking Your Password?
What If Your SSO Never Checked the Password?
12 views
Daily Writeups
⤷ Title: When Trust Backfires: Inside the Sophisticated Supply-Chain Hack of Notepad++
════════════════════════
𐀪 Author: Aaron
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 23:37:13 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #programming #hacking #information_technology
Medium
When Trust Backfires: Inside the Sophisticated Supply-Chain Hack of Notepad++
How advanced attackers weaponized a beloved developer tool using elite tradecraft and a clever abuse of security software
9 views
Daily Writeups
⤷ Title: Discovering PPL Protection in Windows Processes
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 23:27:19 GMT
════════════════════════
⌗ Tags: #malware #hackthebox #tryhackme #hacking #cybersecurity
Medium
Discovering PPL Protection in Windows Processes
Welcome to my latest post! Today, we’re exploring the classic method for identifying the Protected Process Light (PPL) status of a specific…
16 views
Daily Writeups
⤷ Title: From INTERPOL to Hollywood: How Real Cybercrime Differs from TV Hacking
════════════════════════
𐀪 Author: Travis Ray Caverhill
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 22:42:43 GMT
════════════════════════
⌗ Tags: #hollywood #cybersecurity #script_consultant #hacking #hollywood_movies
Medium
From INTERPOL to Hollywood: How Real Cybercrime Differs from TV Hacking
Let me tell you about the first time a Hollywood producer called me. I was sitting in my office, surrounded by too many monitors, not…
15 views
Daily Writeups
⤷ Title: [Writeup] Proving Grounds: Prison (Linux)
════════════════════════
𐀪 Author: Ekemini Bassey
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 17:55:00 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #jenkins_security #tunneling #sql_injection #privilege_escalation
Medium
📝 [Writeup] Proving Grounds: Prison (Linux)
From Prison Break to Jenkins Break: Tunnelling for Root
18 views
Daily Writeups
⤷ Title: Rooted via Wi-Fi 7: TP-Link Patches Command Injection in Archer BE230
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:50:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Archer BE230 #Command Injection #CVE_2026_0630 #CVE_2026_22229 #Cyber Security #firmware update #Home Network Security #router security #TP_Link #Wi_Fi 7
Daily CyberSecurity
Rooted via Wi-Fi 7: TP-Link Patches Command Injection in Archer BE230
TP-Link discloses command injection flaws in Archer BE230 routers (CVE-2026-0630). Authenticated attackers can gain root access. Update firmware now.
15 views
Daily Writeups
⤷ Title: CVE-2026-24936: Critical ASUSTOR Flaw (CVSS 9.5) Allows Remote System Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:45:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #active directory #ADM #Arbitrary File Write #ASUSTOR #Critical Vulnerability #CVE_2026_24936 #Data Integrity #NAS security #Patch Alert #ransomware
Daily CyberSecurity
CVE-2026-24936: Critical ASUSTOR Flaw (CVSS 9.5) Allows Remote System Takeover
Critical ASUSTOR ADM flaw CVE-2026-24936 (CVSS 9.5) allows remote file overwrite. Unauthenticated attackers can seize NAS control. Update to v5.1.2 now.
15 views
Daily Writeups
⤷ Title: “IT Support” Imposters: ShinyHunters Vishing Rings Bypass MFA to Steal Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:40:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cloud Security #Corporate Security #Extortion #identity theft #Mandiant #MFA Bypass #ShinyHunters #social engineering #UNC6661 #UNC6671 #Vishing
Daily CyberSecurity
"IT Support" Imposters: ShinyHunters Vishing Rings Bypass MFA to Steal Data
Mandiant warns of vishing rings like ShinyHunters impersonating IT support to bypass MFA and steal corporate cloud data. Verify your callers.
20 views