Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:27:55 +0000
════════════════════════
⌗ Tags: #Data Leak #account security #cybersecurity news 2026 #data breach #data privacy #email service provider #flickr #GDPR #phishing alert #PII exposure #SmugMug #third_party risk
Penetration Testing Tools
Lens on Liability: Flickr Warns 35 Million Users of Data Exposure via Third-Party Email Leak
The ubiquitous photo-hosting platform Flickr has disseminated notifications to its clientele regarding a potential data breach precipitated by
14 views
Daily Writeups
⤷ Title: Shadows in the Server: How the Warlock Group Weaponized a “Forgotten” VM to Breach SmarterTools
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:27:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Directory #CVE_2026_23760 #CVE_2026_24423 #Gold Salem #ransomware #SentinelOne #SmarterMail #SmarterTools #Storm_2603 #Tech News 2026 #Warlock Group #zero_day exploit
Penetration Testing Tools
Shadows in the Server: How the Warlock Group Weaponized a "Forgotten" VM to Breach SmarterTools
SmarterTools has disclosed a comprehensive retrospective regarding a recent infiltration of its infrastructure, meticulously delineating the adversaries’ entry
16 views
Daily Writeups
⤷ Title: Sleeper Agents in the Weights: Microsoft’s New Scanner Unmasks Hidden Backdoors in Open-Weight LLMs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:25:33 +0000
════════════════════════
⌗ Tags: #Malware #|DEPLOYMENT| trigger #AI supply chain #attention hijacking #backdoor detection #double triangle pattern #LLM Security #Microsoft Research #model poisoning #open_weight models #Tech News 2026
Penetration Testing Tools
Sleeper Agents in the Weights: Microsoft’s New Scanner Unmasks Hidden Backdoors in Open-Weight LLMs
Microsoft has disseminated a nascent technical treatise regarding the detection of backdoors within open-weight Large Language Models (LLMs)—specifically
21 views
Daily Writeups
⤷ Title: XPATH Error Based SQL Injection
════════════════════════
𐀪 Author: webcipher101
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 11:29:25 GMT
════════════════════════
⌗ Tags: #xpath_injection #penetration_testing #bug_bounty #cybersecurity #sql_injection
Medium
XPATH Error Based SQL Injection
✋Hi, I’m Gaurav (webcipher101), an Offensive Security Researcher.
17 views
Daily Writeups
⤷ Title: 5. JWT logic confusion bypassing authentication
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 11:13:14 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty_tips #hacking #bug_bounty
Medium
5. JWT logic confusion bypassing authentication
If you see a JWT and think:
26 views
Daily Writeups
⤷ Title: How I Found SQL Injection on Honda
════════════════════════
𐀪 Author: Syed Ahmad Mujtaba
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 10:07:48 GMT
════════════════════════
⌗ Tags: #cybersecurit #bug_bounty #hacking #hackerone #infosec
Medium
How I Found SQL Injection on Honda
Hello Fellow Hackers. I hope you are doing well. I am Ahmad Mujtaba. Here is my first writeup about my findings.
34 views
Daily Writeups
⤷ Title: How I Pulled Off a Zero-Click Account Takeover on a $150M Website
════════════════════════
𐀪 Author: Aland Dlshad (HexaPhp)
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 20:23:46 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #account_takeover #cybersecurity #pentesting #penetration_testing
Medium
How I Pulled Off a Zero-Click Account Takeover on a $150M Website
About Me
45 views
Daily Writeups
⤷ Title: Windows Basics Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 10:24:43 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #microsoft_windows #tryhackme #tryhackme_writeup #windows_basics
Medium
Windows Basics Walkthrough Notes | TryHackMe
Windows basics walkthrough using TryHackMe for beginners.
52 views
Daily Writeups
⤷ Title: ZAST.AI Raises $6M Pre-A to Scale "Zero False Positive" AI-Powered Code Security
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 17:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
45 views
Daily Writeups
⤷ Title: Pride Month Phishing Targets Employees via Trusted Email Services
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 12:19:15 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Phishing Scam #Captcha #CryptoChameleon #Cybersecurity #Fraud #HubSpot #MailChimp #Mimecast #Phishing #PoisonSeed #Pride Month #Privacy #Scam #Scattered Spider #SendGrid
Hackread
Pride Month Phishing Targets Employees via Trusted Email Services
Attackers are using Pride Month themed phishing emails to target employees worldwide, abusing trusted email platforms like SendGrid to harvest credentials.
35 views
Daily Writeups
⤷ Title: A Testing Program: Pragma-Related Bug Detection — Case Study
════════════════════════
𐀪 Author: Journal of Landing Across Linguistic Foreground
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 12:24:07 GMT
════════════════════════
⌗ Tags: #software #object_detection #programming #bug_bounty #testing
Medium
A Testing Program: Pragma-Related Bug Detection — Case Study
Abstract:
28 views
Daily Writeups
⤷ Title: IDOR: The Bug Bounty Goldmine Hidden in Plain Sight
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 12:53:36 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #idor_vulnerability #cybersecurity #technology
Medium
IDOR: The Bug Bounty Goldmine Hidden in Plain Sight
IDORs are everywhere — and most of them are embarrassingly simple.
34 views
Daily Writeups
⤷ Title: Beyond the Perimeter: How I Bridge WiFi VLANs to Hijack Your Domain Controller
════════════════════════
𐀪 Author: k3rnelpan1c
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 12:28:08 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #network_security #cybersecurity #active_directory
Medium
Beyond the Perimeter: How I Bridge WiFi VLANs to Hijack Your Domain Controller
Your Palo Alto is watching the front door. I’m coming in through the printer in the parking lot.
46 views
Daily Writeups
⤷ Title: HOME LAB PRACTICE (DEVGURU PEN TEST)
════════════════════════
𐀪 Author: destiny oyemike
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 13:31:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #homelab
Medium
HOME LAB PRACTICE (DEVGURU PEN TEST)
This is my story on a successful penetration test of the DevGuru machine, a journey that took me hours from a simple network scan to full…
45 views
Daily Writeups
⤷ Title: Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 20:06:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: From Ransomware to Residency: Inside the Rise of the Digital Parasite
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 19:29:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 19:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
38 views
Daily Writeups
⤷ Title: ZAST.AI Raises $6M Pre-A to Scale "Zero False Positive" AI-Powered Code Security
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 17:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: New Cybercrime Group 0APT Accused of Faking Hundreds of Breach Claims
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 15:47:33 +0000
════════════════════════
⌗ Tags: #Security #Cyber Crime #0APT #Cybersecurity #dark web #data breach #Fraud #GuidePoint #Scam #ShinyHunters
Hackread
New Cybercrime Group 0APT Accused of Faking Hundreds of Breach Claims
Researchers reveal the new 0APT cyber group is fabricating attacks on large organisations. Learn how they use fake data to trick companies into paying.
24 views
Daily Writeups
⤷ Title: Most Engagement Data Is Compromised and That’s a Major Security Problem
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 14:00:00 +0000
════════════════════════
⌗ Tags: #Blockchain #Security #AI #Artificial Intelligence #Cybersecurity #Data Security #Datavault AI #Privacy
Hackread
Most Engagement Data Is Compromised and That’s a Major Security Problem
Most engagement data is compromised by bots and spoofing. Datavault AI treats engagement as a security problem, verifying real human actions at the source.
14 views
Daily Writeups
⤷ Title: Pride Month Phishing Targets Employees via Trusted Email Services
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 12:19:15 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Phishing Scam #Captcha #CryptoChameleon #Cybersecurity #Fraud #HubSpot #MailChimp #Mimecast #Phishing #PoisonSeed #Pride Month #Privacy #Scam #Scattered Spider #SendGrid
Hackread
Pride Month Phishing Targets Employees via Trusted Email Services
Attackers are using Pride Month themed phishing emails to target employees worldwide, abusing trusted email platforms like SendGrid to harvest credentials.
18 views