Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Zombie SSH: How I Forced a Modern Server into a “Logjam” (And Why It Was Marked N/A)
════════════════════════
𐀪 Author: Zer0Figure
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:03:53 GMT
════════════════════════
⌗ Tags: #bug_bounty #vulnerability #bug_bounty_writeup #cybersecurity #bug_bounty_tips
Medium
The Zombie SSH: How I Forced a Modern Server into a “Logjam” (And Why It Was Marked N/A)
Finding an OpenSSH 7.4 server in 2025 is rare. Finding one that accepts 1024-bit Diffie-Hellman keys is a critical risk. Here is how I…
11 views
Daily Writeups
⤷ Title: The Complete Mobile App Hacking Guide for Bug Bounty Hunters (2026 Edition)
════════════════════════
𐀪 Author: BugHunter’s Journal
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:56:49 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #bug_bounty #mobile_hacking #mobile_app_development
Medium
The Complete Mobile App Hacking Guide for Bug Bounty Hunters (2026 Edition)
Complete mobile app hacking guide: Android/iOS setup, tools (Frida, MobSF), static/dynamic analysis, vulnerabilities & real examples.
20 views
Daily Writeups
⤷ Title: The Social Icon That Could Cost a Company Its Reputation
════════════════════════
𐀪 Author: Md Tanjimul Islam Sifat
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:20:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #broken_link_hijacking #bug_bounty #bug_bounty_tool
Medium
🔎 The Social Icon That Could Cost a Company Its Reputation
A Bug Bounty Hunter’s Guide to Broken Link Hijacking
9 views
Daily Writeups
⤷ Title: Authorization Is a Graph, Not a Check
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:19:43 GMT
════════════════════════
⌗ Tags: #bug_bounty #pentesting #hacking #ethical_hacking #cybersecurity
Medium
Authorization Is a Graph, Not a Check
🔗 Authorization Is a Graph, Not a Check
28 views
Daily Writeups
⤷ Title: How to Learn AI From Scratch in 2026
════════════════════════
𐀪 Author: Manisha Chaudhary
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:54:02 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #ai #cybersecurity #machine_learning
Medium
How to Learn AI From Scratch in 2026
Artificial Intelligence (AI) is no longer a futuristic concept — it is a core part of modern technology in 2026. From smartphones and…
9 views
Daily Writeups
⤷ Title: LOGICAL ACCESS- OFFICIAL WALK-THROUGH
════════════════════════
𐀪 Author: Kanyoko
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:16:52 GMT
════════════════════════
⌗ Tags: #web_application_security #cybersecurity #ctf #web_security #hacking
Medium
LOGICAL ACCESS- OFFICIAL WALK-THROUGH
Hello there, welcome to another exciting cybersecurity challenge walk-through on matters on web security. This write-up will work on…
10 views
Daily Writeups
⤷ Title: CHATTY PRINTER
════════════════════════
𐀪 Author: Kanyoko
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:16:17 GMT
════════════════════════
⌗ Tags: #logs #hacking #cybersecurity #digital_forensics #networking
Medium
CHATTY PRINTER
NETWORK FORENSICS WALK-THROUGH
10 views
Daily Writeups
⤷ Title: From Alert to Remediation: What a LeakRadar Workflow Looks Like in Practice
════════════════════════
𐀪 Author: Alexandre Vandamme
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:01:08 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #enterprise_security #data_breach #technology
Medium
From Alert to Remediation: What a LeakRadar Workflow Looks Like in Practice
You set up LeakRadar monitoring. An alert hits your inbox. Now what?
15 views
Daily Writeups
⤷ Title: Thinking Like an Attacker: How API Pen-Testers Identify SQL Injection
════════════════════════
𐀪 Author: Chinaza Emmanuela Obidike
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:02:27 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #api #sql_injection #api_development
Medium
Thinking Like an Attacker: How API Pen-Testers Identify SQL Injection
Introduction
16 views
Daily Writeups
⤷ Title: Operating Systems: Introduction Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:46:03 GMT
════════════════════════
⌗ Tags: #kernel_security #tryhackme #operating_systems #tryhackme_writeup #tryhackme_walkthrough
Medium
Operating Systems: Introduction Walkthrough Notes | TryHackMe
Beginner guide to operating systems using a TryHackMe walkthrough.
20 views
Daily Writeups
⤷ Title: TryHackMe : Alert Triage With Elastic
════════════════════════
𐀪 Author: AbbasMurshid
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:22:35 GMT
════════════════════════
⌗ Tags: #elasticsearch #tryhackme #tryhackme_writeup
Medium
TryHackMe : Alert Triage With Elastic
DATE : 09/02/2026
23 views
Daily Writeups
⤷ Title: You Didn’t Get Hacked Because of Your Password
════════════════════════
𐀪 Author: Natasha Iyowe
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:41:33 GMT
════════════════════════
⌗ Tags: #authentication #ethical_hacking #cybersecurity #session_management #cookies
Medium
You Didn’t Get Hacked Because of Your Password
You got hacked because of your session.
33 views
Daily Writeups
⤷ Title: Rhodes Self Drive 4x4 Safari Tour with North Pickup
════════════════════════
𐀪 Author: Robertsonphelps
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:39:45 GMT
════════════════════════
⌗ Tags: #drive #safari #self #rhodes #xs
Medium
Rhodes Self Drive 4x4 Safari Tour with North Pickup
Embarking on a Rhodes Self Drive 4x4 Safari Tour with North Pickup is virtually an unparalleled experience, rather a unique adventure that…
46 views
Daily Writeups
⤷ Title: Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 15:54:00 +0530
════════════════════════
⌗ Tags: No_Tags
42 views
Daily Writeups
⤷ Title: Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:44:03 +0000
════════════════════════
⌗ Tags: #Data Leak #.git folder #Credential Theft #data leak #DevOps Security #Git #misconfiguration #Mysterium VPN #source code exfiltration #Tech News 2026 #version control #web server hardening
Penetration Testing Tools
Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
Approximately five million web servers globally have been identified as misconfigured, exposing sensitive Git administrative metadata and precipitating
39 views
Daily Writeups
⤷ Title: Virtual Sabotage: How Attackers Weaponized SolarWinds Help Desks to Hide Malware Inside QEMU
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:41:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Credential Harvesting #CVE_2025_40536 #CVE_2025_40551 #DLL Sideloading #Microsoft Defender #QEMU #RCE #remote code execution #SolarWinds #Tech News 2026 #Web Help Desk
Penetration Testing Tools
Virtual Sabotage: How Attackers Weaponized SolarWinds Help Desks to Hide Malware Inside QEMU
The Microsoft Defender threat intelligence team has documented a series of substantiated offensives targeting internet-facing SolarWinds Web Help
28 views
Daily Writeups
⤷ Title: Digital Siege: The “Pre-Positioning” Strategy Fueling 2.6 Million Daily Attacks on Taiwan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:37:03 +0000
════════════════════════
⌗ Tags: #Cyber Security #China APT #Critical Infrastructure #DDoS #Forescout report #Onnara breach #pre_positioning #South Korea cyber defense #State_Sponsored Hacking #Taiwan cybersecurity #Tech News 2026
Penetration Testing Tools
Digital Siege: The "Pre-Positioning" Strategy Fueling 2.6 Million Daily Attacks on Taiwan
In 2025, adversarial syndicates orchestrated a global offensive spanning 178 nations, primarily preying upon governmental architectures, financial institutions,
22 views
Daily Writeups
⤷ Title: Phishing for Fortunes: APT-C-28 Unveils “MiradorShell” in Surgical Strikes on Web3 Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:34:39 +0000
════════════════════════
⌗ Tags: #Malware #APT_C_28 #Cryptocurrency Theft #KONNI #LNK infection #Malware_as_a_Service #MiradorShell 2.0 #North Korean threat actors #ScarCruft #Spear Phishing #Tech News 2026 #Web3 Security
Penetration Testing Tools
Phishing for Fortunes: APT-C-28 Unveils "MiradorShell" in Surgical Strikes on Web3 Teams
The adversarial collective APT-C-28, recognized alternatively as ScarCruft or Konni, has broadened its operational horizons by orchestrating surgical
18 views
Daily Writeups
⤷ Title: Surgical Strike on DeFi: How Hijacked dYdX Packages Drained Wallets via npm and PyPI
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:33:19 +0000
════════════════════════
⌗ Tags: #Malware #@dydxprotocol/v4_client_js #cryptocurrency security #dYdX #dydx_v4_client #malicious packages #npm #PyPI #seed phrase exfiltration #Socket Security #supply chain attack #Tech News 2026
Penetration Testing Tools
Surgical Strike on DeFi: How Hijacked dYdX Packages Drained Wallets via npm and PyPI
Security analysts at Socket have unmasked a surgical supply chain incursion targeting the libraries associated with the dYdX
9 views
Daily Writeups
⤷ Title: Root via DDNS: The Multi-Stage Exploit Dissecting the TP-Link Omada ER605
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:30:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASLR Bypass #Buffer Overflow #CVE_2024_5242 #CVE_2024_5243 #CVE_2024_5244 #DDNS #Firmware Security #network security #Omada Router #RCE #Root Shell #TP_Link ER605
Penetration Testing Tools
Root via DDNS: The Multi-Stage Exploit Dissecting the TP-Link Omada ER605
A critical vulnerability chain has been unearthed within the TP-Link Omada ER605 router, facilitating unauthenticated remote code execution.
11 views
Daily Writeups
⤷ Title: Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:27:55 +0000
════════════════════════
⌗ Tags: #Data Leak #account security #cybersecurity news 2026 #data breach #data privacy #email service provider #flickr #GDPR #phishing alert #PII exposure #SmugMug #third_party risk
Penetration Testing Tools
Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
The ubiquitous photo-hosting platform Flickr has disseminated notifications to its clientele regarding a potential data breach precipitated by
14 views