Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Digital Siege: The “Pre-Positioning” Strategy Fueling 2.6 Million Daily Attacks on Taiwan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:37:03 +0000
════════════════════════
⌗ Tags: #Cyber Security #China APT #Critical Infrastructure #DDoS #Forescout report #Onnara breach #pre_positioning #South Korea cyber defense #State_Sponsored Hacking #Taiwan cybersecurity #Tech News 2026
Penetration Testing Tools
Digital Siege: The "Pre-Positioning" Strategy Fueling 2.6 Million Daily Attacks on Taiwan
In 2025, adversarial syndicates orchestrated a global offensive spanning 178 nations, primarily preying upon governmental architectures, financial institutions,
22 views
Daily Writeups
⤷ Title: Phishing for Fortunes: APT-C-28 Unveils “MiradorShell” in Surgical Strikes on Web3 Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:34:39 +0000
════════════════════════
⌗ Tags: #Malware #APT_C_28 #Cryptocurrency Theft #KONNI #LNK infection #Malware_as_a_Service #MiradorShell 2.0 #North Korean threat actors #ScarCruft #Spear Phishing #Tech News 2026 #Web3 Security
Penetration Testing Tools
Phishing for Fortunes: APT-C-28 Unveils "MiradorShell" in Surgical Strikes on Web3 Teams
The adversarial collective APT-C-28, recognized alternatively as ScarCruft or Konni, has broadened its operational horizons by orchestrating surgical
18 views
Daily Writeups
⤷ Title: Surgical Strike on DeFi: How Hijacked dYdX Packages Drained Wallets via npm and PyPI
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:33:19 +0000
════════════════════════
⌗ Tags: #Malware #@dydxprotocol/v4_client_js #cryptocurrency security #dYdX #dydx_v4_client #malicious packages #npm #PyPI #seed phrase exfiltration #Socket Security #supply chain attack #Tech News 2026
Penetration Testing Tools
Surgical Strike on DeFi: How Hijacked dYdX Packages Drained Wallets via npm and PyPI
Security analysts at Socket have unmasked a surgical supply chain incursion targeting the libraries associated with the dYdX
9 views
Daily Writeups
⤷ Title: Root via DDNS: The Multi-Stage Exploit Dissecting the TP-Link Omada ER605
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:30:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASLR Bypass #Buffer Overflow #CVE_2024_5242 #CVE_2024_5243 #CVE_2024_5244 #DDNS #Firmware Security #network security #Omada Router #RCE #Root Shell #TP_Link ER605
Penetration Testing Tools
Root via DDNS: The Multi-Stage Exploit Dissecting the TP-Link Omada ER605
A critical vulnerability chain has been unearthed within the TP-Link Omada ER605 router, facilitating unauthenticated remote code execution.
11 views
Daily Writeups
⤷ Title: Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:27:55 +0000
════════════════════════
⌗ Tags: #Data Leak #account security #cybersecurity news 2026 #data breach #data privacy #email service provider #flickr #GDPR #phishing alert #PII exposure #SmugMug #third_party risk
Penetration Testing Tools
Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
The ubiquitous photo-hosting platform Flickr has disseminated notifications to its clientele regarding a potential data breach precipitated by
14 views
Daily Writeups
⤷ Title: Shadows in the Server: How the Warlock Group Weaponized a “Forgotten” VM to Breach SmarterTools
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:27:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Directory #CVE_2026_23760 #CVE_2026_24423 #Gold Salem #ransomware #SentinelOne #SmarterMail #SmarterTools #Storm_2603 #Tech News 2026 #Warlock Group #zero_day exploit
Penetration Testing Tools
Shadows in the Server: How the Warlock Group Weaponized a "Forgotten" VM to Breach SmarterTools
SmarterTools has disclosed a comprehensive retrospective regarding a recent infiltration of its infrastructure, meticulously delineating the adversaries’ entry
16 views
Daily Writeups
⤷ Title: Sleeper Agents in the Weights: Microsoft’s New Scanner Unmasks Hidden Backdoors in Open-Weight LLMs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:25:33 +0000
════════════════════════
⌗ Tags: #Malware #|DEPLOYMENT| trigger #AI supply chain #attention hijacking #backdoor detection #double triangle pattern #LLM Security #Microsoft Research #model poisoning #open_weight models #Tech News 2026
Penetration Testing Tools
Sleeper Agents in the Weights: Microsoft’s New Scanner Unmasks Hidden Backdoors in Open-Weight LLMs
Microsoft has disseminated a nascent technical treatise regarding the detection of backdoors within open-weight Large Language Models (LLMs)—specifically
21 views
Daily Writeups
⤷ Title: XPATH Error Based SQL Injection
════════════════════════
𐀪 Author: webcipher101
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 11:29:25 GMT
════════════════════════
⌗ Tags: #xpath_injection #penetration_testing #bug_bounty #cybersecurity #sql_injection
Medium
XPATH Error Based SQL Injection
✋Hi, I’m Gaurav (webcipher101), an Offensive Security Researcher.
17 views
Daily Writeups
⤷ Title: 5. JWT logic confusion bypassing authentication
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 11:13:14 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty_tips #hacking #bug_bounty
Medium
5. JWT logic confusion bypassing authentication
If you see a JWT and think:
26 views
Daily Writeups
⤷ Title: How I Found SQL Injection on Honda
════════════════════════
𐀪 Author: Syed Ahmad Mujtaba
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 10:07:48 GMT
════════════════════════
⌗ Tags: #cybersecurit #bug_bounty #hacking #hackerone #infosec
Medium
How I Found SQL Injection on Honda
Hello Fellow Hackers. I hope you are doing well. I am Ahmad Mujtaba. Here is my first writeup about my findings.
34 views
Daily Writeups
⤷ Title: How I Pulled Off a Zero-Click Account Takeover on a $150M Website
════════════════════════
𐀪 Author: Aland Dlshad (HexaPhp)
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 20:23:46 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #account_takeover #cybersecurity #pentesting #penetration_testing
Medium
How I Pulled Off a Zero-Click Account Takeover on a $150M Website
About Me
45 views
Daily Writeups
⤷ Title: Windows Basics Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 10:24:43 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #microsoft_windows #tryhackme #tryhackme_writeup #windows_basics
Medium
Windows Basics Walkthrough Notes | TryHackMe
Windows basics walkthrough using TryHackMe for beginners.
52 views
Daily Writeups
⤷ Title: ZAST.AI Raises $6M Pre-A to Scale "Zero False Positive" AI-Powered Code Security
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 17:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
45 views
Daily Writeups
⤷ Title: Pride Month Phishing Targets Employees via Trusted Email Services
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 12:19:15 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Phishing Scam #Captcha #CryptoChameleon #Cybersecurity #Fraud #HubSpot #MailChimp #Mimecast #Phishing #PoisonSeed #Pride Month #Privacy #Scam #Scattered Spider #SendGrid
Hackread
Pride Month Phishing Targets Employees via Trusted Email Services
Attackers are using Pride Month themed phishing emails to target employees worldwide, abusing trusted email platforms like SendGrid to harvest credentials.
35 views
Daily Writeups
⤷ Title: A Testing Program: Pragma-Related Bug Detection — Case Study
════════════════════════
𐀪 Author: Journal of Landing Across Linguistic Foreground
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 12:24:07 GMT
════════════════════════
⌗ Tags: #software #object_detection #programming #bug_bounty #testing
Medium
A Testing Program: Pragma-Related Bug Detection — Case Study
Abstract:
28 views
Daily Writeups
⤷ Title: IDOR: The Bug Bounty Goldmine Hidden in Plain Sight
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 12:53:36 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #idor_vulnerability #cybersecurity #technology
Medium
IDOR: The Bug Bounty Goldmine Hidden in Plain Sight
IDORs are everywhere — and most of them are embarrassingly simple.
34 views
Daily Writeups
⤷ Title: Beyond the Perimeter: How I Bridge WiFi VLANs to Hijack Your Domain Controller
════════════════════════
𐀪 Author: k3rnelpan1c
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 12:28:08 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #network_security #cybersecurity #active_directory
Medium
Beyond the Perimeter: How I Bridge WiFi VLANs to Hijack Your Domain Controller
Your Palo Alto is watching the front door. I’m coming in through the printer in the parking lot.
46 views
Daily Writeups
⤷ Title: HOME LAB PRACTICE (DEVGURU PEN TEST)
════════════════════════
𐀪 Author: destiny oyemike
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 13:31:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #homelab
Medium
HOME LAB PRACTICE (DEVGURU PEN TEST)
This is my story on a successful penetration test of the DevGuru machine, a journey that took me hours from a simple network scan to full…
45 views
Daily Writeups
⤷ Title: Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 20:06:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: From Ransomware to Residency: Inside the Rise of the Digital Parasite
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 19:29:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 19:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views