Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Write-Up Máquina Predictable DockerLabs — Hard [ES]
════════════════════════
𐀪 Author: Joel Morillas Pagan (Ghxstsec)
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 18:05:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #how_to #hacking #dockerlabs #pentesting
Medium
Write-Up Máquina Predictable DockerLabs — Hard [ES]
En este artículo estaremos viendo la forma de rootear la máquina predictable de la plataforma DockerLabs creada por Mario Álvarez…
23 views
Daily Writeups
⤷ Title: Client-Server Basics Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 18:46:51 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #tryhackme_writeup #client_server_model
Medium
Client-Server Basics Walkthrough Notes | TryHackMe
Client-server basics and web communication.
41 views
Daily Writeups
⤷ Title: Ethical Hacking
════════════════════════
𐀪 Author: Siddra Naseem
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 18:38:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity
Medium
Ethical Hacking
Ethical Hacking:
45 views
Daily Writeups
⤷ Title: RingZeroCTF Coding Challenge 4 [Can you help me find the answer to this equation] Writeup
════════════════════════
𐀪 Author: Devansh Patel
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 20:47:42 GMT
════════════════════════
⌗ Tags: #capture_the_flag #ctf #cybersecurity #ctf_writeup #bug_bounty
Medium
RingZeroCTF Coding Challenge 4 [Can you help me find the answer to this equation] Writeup
Hey Guys, this is the writeup for the RingZero CTF Coding Challenge 4 named as the ‘Can you help me find the answer to this equation’…
39 views
Daily Writeups
⤷ Title: Business Logic Vulnerabilities — When Applications Work as Designed, but Still Fail
════════════════════════
𐀪 Author: Anshkamra
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 20:12:08 GMT
════════════════════════
⌗ Tags: #concept #business_logic #beginner #bug_bounty
Medium
Business Logic Vulnerabilities — When Applications Work as Designed, but Still Fail
Not all vulnerabilities come from broken code.
Some come from perfectly working features.
32 views
Daily Writeups
⤷ Title: Sokudo writeup (Bugforge)
════════════════════════
𐀪 Author: 7s26Simon
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 20:11:04 GMT
════════════════════════
⌗ Tags: #ctf_writeup #bugforge #hacking #cybersecurity #ctf
Medium
Sokudo writeup (Bugforge)
🍺 Quick message to readers: if my writeups help you, please consider a small donation to my buymeacoffee link here. This is not required…
26 views
Daily Writeups
⤷ Title: MASTERING THE HACKER MINDSET: HOW ETHICAL HACKERS DEFEND BY THINKING LIKE ATTACKERS
════════════════════════
𐀪 Author: Raphaam Digital (Cyber Security Updates)
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 20:50:44 GMT
════════════════════════
⌗ Tags: #exploitation #penetration_testing #offensive_security #ethical_hacking #cybersecurity
Medium
MASTERING THE HACKER MINDSET: HOW ETHICAL HACKERS DEFEND BY THINKING LIKE ATTACKERS
As businesses and organisations continue to face a constant barrage of sophisticated digital threats, they turn to a unique breed of…
26 views
Daily Writeups
⤷ Title: Client-Server Basics · TryHackMe Walkthrough
════════════════════════
𐀪 Author: RosanaFSS
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 20:57:12 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #security #cybersecurity #tryhackme #architecture
Medium
Client-Server Basics · TryHackMe Walkthrough
This room teaches the basics of the Client-Server model.
29 views
Daily Writeups
⤷ Title: CloudSEK CTF_FINAL 2025 — Multi-step exploitation (JWT → SSTI → RCE)
════════════════════════
𐀪 Author: codebreaker
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 20:13:20 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ssti #rce #jwt_authentication #ctf
Medium
CloudSEK CTF_FINAL 2025 — Multi-step exploitation (JWT → SSTI → RCE)
CloudSEK CTF 2025 Round 2 — Writeup Submission
39 views
Daily Writeups
⤷ Title: Substack Breach: 662,752 User Records Leaked on Cybercrime Forum
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 22:50:05 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Data Breaches #BreachForums #Cyber Attack #Cyber Crime #Cybersecurity #data breach #Privacy #Scraping #Substack
Hackread
Substack Breach: 662,752 User Records Leaked on Cybercrime Forum
Substack confirms a breach after hacker accessed internal user records now circulating on crime forums, exposing emails, phone numbers, and account metadata.
35 views
Daily Writeups
⤷ Title: Disabling PPL Protection on Windows Processes
════════════════════════
𐀪 Author: S12 - 0x12Dark Development
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 22:23:05 GMT
════════════════════════
⌗ Tags: #hacker #hacking #malware #antivirus #penetration_testing
Medium
Disabling PPL Protection on Windows Processes
Welcome to my latest Medium post. Today, we’ll explore the classic method for disabling a process’s Protected Process Light (PPL) using a…
24 views
Daily Writeups
⤷ Title: The Shocking Truth: How Companies Sell Your Data
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 22:41:38 GMT
════════════════════════
⌗ Tags: #data_science #technology #programming #cybersecurity #ethical_hacking
Medium
The Shocking Truth: How Companies Sell Your Data
You Are Not the Customer. You Are the Livestock
41 views
Daily Writeups
⤷ Title: Do AI Company's Even Have a Hold on Their Product
════════════════════════
𐀪 Author: Jerimiah Jackson
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 22:12:50 GMT
════════════════════════
⌗ Tags: #ai #206 #xs #news #elon_musk
Medium
Do AI Company's Even Have a Hold on Their Product
Yesterday February 3, 2026 a news story came out from APN & NBC news reporting on the infamous Elon musk. This story captured the events…
30 views
Daily Writeups
⤷ Title: The Invisible Landlord: ShadowSyndicate Rotates Keys to Hide Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:42:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #bulletproof hosting #C2 Servers #Cobalt Strike #Cybercrime #Group_IB #initial access broker #Ransomware Infrastructure #ShadowSyndicate #SSH Key Rotation
Daily CyberSecurity
The Invisible Landlord: ShadowSyndicate Rotates Keys to Hide Infrastructure
Group-IB reveals ShadowSyndicate is evolving. The cybercrime cluster now rotates SSH keys to hide its infrastructure. Is it a BPH or IAB?
22 views
Daily Writeups
⤷ Title: Popular n8n Platform Hit by Triple Threat of RCE Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:39:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_25049 #CVE_2026_25053 #CVE_2026_25056 #Git Node #Low Code Security #Merge Node #n8n #Patch Alert #Remote Code Execution #Workflow Automation
Daily CyberSecurity
Popular n8n Platform Hit by Triple Threat of RCE Flaws
Critical n8n flaws (CVE-2026-25053, 25056) allow attackers to hijack servers via Git & Merge nodes. Update to v2.5.0 now to prevent RCE.
20 views
Daily Writeups
⤷ Title: The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:33:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Baota Panel #Datadog #Gambling Spam #Malicious Configuration #nginx #Proxy Pass #SEO Poisoning #SysAdmin #Traffic Hijacking #Web Server Security
Daily CyberSecurity
The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
Hackers are hijacking NGINX servers via malicious config injections. Datadog warns of silent traffic redirection for SEO poisoning. Check your proxy_pass.
15 views
Daily Writeups
⤷ Title: Phantom in the Machine: Inside Salt Typhoon’s “SnappyBee” Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:27:36 +0000
════════════════════════
⌗ Tags: #Malware #Advanced Persistent Threat #Cobalt Strike #Darktrace #Deed RAT #Demodex #DLL side_loading #Earth Estries #Malware Analysis #Salt Typhoon #SNAPPYBEE
Daily CyberSecurity
Phantom in the Machine: Inside Salt Typhoon’s "SnappyBee" Backdoor
Darktrace dissects SnappyBee (Deed RAT), a stealthy Salt Typhoon backdoor. Learn how it uses DLL side-loading & memory hooking to evade modern AV.
12 views
Daily Writeups
⤷ Title: 4 Million Downloads at Risk: Critical Unstructured Flaw (CVSS 9.8) Allows RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:23:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI supply chain #CVE_2025_64712 #CVSS 9.8 #LLM Data #Malicious MSG #Patch Alert #Path Traversal #Python Security #rce #Unstructured Library
Daily CyberSecurity
4 Million Downloads at Risk: Critical Unstructured Flaw (CVSS 9.8) Allows RCE
Critical Unstructured library flaw CVE-2025-64712 (CVSS 9.8) allows RCE via malicious .msg files. 4M+ downloads affected. Update to v0.18.18 now.
21 views
Daily Writeups
⤷ Title: Stealth Injection: Silver Fox APT Upgrades “ValleyRat” with Rare PoolParty Tech
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:17:36 +0000
════════════════════════
⌗ Tags: #Malware #cyber_espionage #Cybereason #Explorer.exe #Fake Installer #Malware Analysis #PoolParty Variant 7 #Process injection #Silver Fox APT #ValleyRAT #Winos 4.0
Daily CyberSecurity
Stealth Injection: Silver Fox APT Upgrades "ValleyRat" with Rare PoolParty Tech
Silver Fox APT targets users with fake LINE installers delivering ValleyRat. New campaign uses rare "PoolParty" injection to evade detection.
13 views
Daily Writeups
⤷ Title: Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:11:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cloud Security #Credential Harvesting #Dropbox Impersonation #Email Security #PDF Phishing #phishing #social engineering #Telegram bot #Vercel Blob #X_Labs
Daily CyberSecurity
Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
Sophisticated phishing abuses Vercel Blob & PDFs to bypass filters. Stolen credentials are exfiltrated via Telegram bots. Learn how to spot this attack.
14 views
Daily Writeups
⤷ Title: “PDF” Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:07:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AcroForm #BMPDecoder #CVE_2026_24133 #CVE_2026_24737 #Denial of Service #Front_end Development #JavaScript Library #jsPDF #PDF Generation #Web Security #XSS
Daily CyberSecurity
"PDF" Poison: Popular JavaScript Library Patches Critical Injection and Crash Flaws
Critical jsPDF flaws (CVE-2026-24133) allow XSS & DoS via malicious BMPs. Update to v4.1.0 immediately to prevent browser crashes and code injection.
26 views