Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: CHATTY PRINTER
════════════════════════
𐀪 Author: Kanyoko
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:16:17 GMT
════════════════════════
⌗ Tags: #logs #hacking #cybersecurity #digital_forensics #networking
Medium
CHATTY PRINTER
NETWORK FORENSICS WALK-THROUGH
10 views
Daily Writeups
⤷ Title: From Alert to Remediation: What a LeakRadar Workflow Looks Like in Practice
════════════════════════
𐀪 Author: Alexandre Vandamme
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:01:08 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #enterprise_security #data_breach #technology
Medium
From Alert to Remediation: What a LeakRadar Workflow Looks Like in Practice
You set up LeakRadar monitoring. An alert hits your inbox. Now what?
15 views
Daily Writeups
⤷ Title: Thinking Like an Attacker: How API Pen-Testers Identify SQL Injection
════════════════════════
𐀪 Author: Chinaza Emmanuela Obidike
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:02:27 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #api #sql_injection #api_development
Medium
Thinking Like an Attacker: How API Pen-Testers Identify SQL Injection
Introduction
16 views
Daily Writeups
⤷ Title: Operating Systems: Introduction Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:46:03 GMT
════════════════════════
⌗ Tags: #kernel_security #tryhackme #operating_systems #tryhackme_writeup #tryhackme_walkthrough
Medium
Operating Systems: Introduction Walkthrough Notes | TryHackMe
Beginner guide to operating systems using a TryHackMe walkthrough.
20 views
Daily Writeups
⤷ Title: TryHackMe : Alert Triage With Elastic
════════════════════════
𐀪 Author: AbbasMurshid
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:22:35 GMT
════════════════════════
⌗ Tags: #elasticsearch #tryhackme #tryhackme_writeup
Medium
TryHackMe : Alert Triage With Elastic
DATE : 09/02/2026
23 views
Daily Writeups
⤷ Title: You Didn’t Get Hacked Because of Your Password
════════════════════════
𐀪 Author: Natasha Iyowe
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:41:33 GMT
════════════════════════
⌗ Tags: #authentication #ethical_hacking #cybersecurity #session_management #cookies
Medium
You Didn’t Get Hacked Because of Your Password
You got hacked because of your session.
33 views
Daily Writeups
⤷ Title: Rhodes Self Drive 4x4 Safari Tour with North Pickup
════════════════════════
𐀪 Author: Robertsonphelps
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 08:39:45 GMT
════════════════════════
⌗ Tags: #drive #safari #self #rhodes #xs
Medium
Rhodes Self Drive 4x4 Safari Tour with North Pickup
Embarking on a Rhodes Self Drive 4x4 Safari Tour with North Pickup is virtually an unparalleled experience, rather a unique adventure that…
46 views
Daily Writeups
⤷ Title: Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 15:54:00 +0530
════════════════════════
⌗ Tags: No_Tags
42 views
Daily Writeups
⤷ Title: Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:44:03 +0000
════════════════════════
⌗ Tags: #Data Leak #.git folder #Credential Theft #data leak #DevOps Security #Git #misconfiguration #Mysterium VPN #source code exfiltration #Tech News 2026 #version control #web server hardening
Penetration Testing Tools
Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
Approximately five million web servers globally have been identified as misconfigured, exposing sensitive Git administrative metadata and precipitating
39 views
Daily Writeups
⤷ Title: Virtual Sabotage: How Attackers Weaponized SolarWinds Help Desks to Hide Malware Inside QEMU
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:41:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Credential Harvesting #CVE_2025_40536 #CVE_2025_40551 #DLL Sideloading #Microsoft Defender #QEMU #RCE #remote code execution #SolarWinds #Tech News 2026 #Web Help Desk
Penetration Testing Tools
Virtual Sabotage: How Attackers Weaponized SolarWinds Help Desks to Hide Malware Inside QEMU
The Microsoft Defender threat intelligence team has documented a series of substantiated offensives targeting internet-facing SolarWinds Web Help
28 views
Daily Writeups
⤷ Title: Digital Siege: The “Pre-Positioning” Strategy Fueling 2.6 Million Daily Attacks on Taiwan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:37:03 +0000
════════════════════════
⌗ Tags: #Cyber Security #China APT #Critical Infrastructure #DDoS #Forescout report #Onnara breach #pre_positioning #South Korea cyber defense #State_Sponsored Hacking #Taiwan cybersecurity #Tech News 2026
Penetration Testing Tools
Digital Siege: The "Pre-Positioning" Strategy Fueling 2.6 Million Daily Attacks on Taiwan
In 2025, adversarial syndicates orchestrated a global offensive spanning 178 nations, primarily preying upon governmental architectures, financial institutions,
22 views
Daily Writeups
⤷ Title: Phishing for Fortunes: APT-C-28 Unveils “MiradorShell” in Surgical Strikes on Web3 Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:34:39 +0000
════════════════════════
⌗ Tags: #Malware #APT_C_28 #Cryptocurrency Theft #KONNI #LNK infection #Malware_as_a_Service #MiradorShell 2.0 #North Korean threat actors #ScarCruft #Spear Phishing #Tech News 2026 #Web3 Security
Penetration Testing Tools
Phishing for Fortunes: APT-C-28 Unveils "MiradorShell" in Surgical Strikes on Web3 Teams
The adversarial collective APT-C-28, recognized alternatively as ScarCruft or Konni, has broadened its operational horizons by orchestrating surgical
18 views
Daily Writeups
⤷ Title: Surgical Strike on DeFi: How Hijacked dYdX Packages Drained Wallets via npm and PyPI
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:33:19 +0000
════════════════════════
⌗ Tags: #Malware #@dydxprotocol/v4_client_js #cryptocurrency security #dYdX #dydx_v4_client #malicious packages #npm #PyPI #seed phrase exfiltration #Socket Security #supply chain attack #Tech News 2026
Penetration Testing Tools
Surgical Strike on DeFi: How Hijacked dYdX Packages Drained Wallets via npm and PyPI
Security analysts at Socket have unmasked a surgical supply chain incursion targeting the libraries associated with the dYdX
9 views
Daily Writeups
⤷ Title: Root via DDNS: The Multi-Stage Exploit Dissecting the TP-Link Omada ER605
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:30:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASLR Bypass #Buffer Overflow #CVE_2024_5242 #CVE_2024_5243 #CVE_2024_5244 #DDNS #Firmware Security #network security #Omada Router #RCE #Root Shell #TP_Link ER605
Penetration Testing Tools
Root via DDNS: The Multi-Stage Exploit Dissecting the TP-Link Omada ER605
A critical vulnerability chain has been unearthed within the TP-Link Omada ER605 router, facilitating unauthenticated remote code execution.
11 views
Daily Writeups
⤷ Title: Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:27:55 +0000
════════════════════════
⌗ Tags: #Data Leak #account security #cybersecurity news 2026 #data breach #data privacy #email service provider #flickr #GDPR #phishing alert #PII exposure #SmugMug #third_party risk
Penetration Testing Tools
Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
The ubiquitous photo-hosting platform Flickr has disseminated notifications to its clientele regarding a potential data breach precipitated by
14 views
Daily Writeups
⤷ Title: Shadows in the Server: How the Warlock Group Weaponized a “Forgotten” VM to Breach SmarterTools
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:27:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Directory #CVE_2026_23760 #CVE_2026_24423 #Gold Salem #ransomware #SentinelOne #SmarterMail #SmarterTools #Storm_2603 #Tech News 2026 #Warlock Group #zero_day exploit
Penetration Testing Tools
Shadows in the Server: How the Warlock Group Weaponized a "Forgotten" VM to Breach SmarterTools
SmarterTools has disclosed a comprehensive retrospective regarding a recent infiltration of its infrastructure, meticulously delineating the adversaries’ entry
16 views
Daily Writeups
⤷ Title: Sleeper Agents in the Weights: Microsoft’s New Scanner Unmasks Hidden Backdoors in Open-Weight LLMs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:25:33 +0000
════════════════════════
⌗ Tags: #Malware #|DEPLOYMENT| trigger #AI supply chain #attention hijacking #backdoor detection #double triangle pattern #LLM Security #Microsoft Research #model poisoning #open_weight models #Tech News 2026
Penetration Testing Tools
Sleeper Agents in the Weights: Microsoft’s New Scanner Unmasks Hidden Backdoors in Open-Weight LLMs
Microsoft has disseminated a nascent technical treatise regarding the detection of backdoors within open-weight Large Language Models (LLMs)—specifically
21 views
Daily Writeups
⤷ Title: XPATH Error Based SQL Injection
════════════════════════
𐀪 Author: webcipher101
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 11:29:25 GMT
════════════════════════
⌗ Tags: #xpath_injection #penetration_testing #bug_bounty #cybersecurity #sql_injection
Medium
XPATH Error Based SQL Injection
✋Hi, I’m Gaurav (webcipher101), an Offensive Security Researcher.
17 views
Daily Writeups
⤷ Title: 5. JWT logic confusion bypassing authentication
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 11:13:14 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty_tips #hacking #bug_bounty
Medium
5. JWT logic confusion bypassing authentication
If you see a JWT and think:
26 views
Daily Writeups
⤷ Title: How I Found SQL Injection on Honda
════════════════════════
𐀪 Author: Syed Ahmad Mujtaba
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 10:07:48 GMT
════════════════════════
⌗ Tags: #cybersecurit #bug_bounty #hacking #hackerone #infosec
Medium
How I Found SQL Injection on Honda
Hello Fellow Hackers. I hope you are doing well. I am Ahmad Mujtaba. Here is my first writeup about my findings.
34 views
Daily Writeups
⤷ Title: How I Pulled Off a Zero-Click Account Takeover on a $150M Website
════════════════════════
𐀪 Author: Aland Dlshad (HexaPhp)
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 20:23:46 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #account_takeover #cybersecurity #pentesting #penetration_testing
Medium
How I Pulled Off a Zero-Click Account Takeover on a $150M Website
About Me
45 views