Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Wireless Penetration Testing: From Monitor Mode to Key Recovery
════════════════════════
𐀪 Author: Mai Tran
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 20:52:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #network_security #penetration_testing
Medium
Wireless Penetration Testing: From Monitor Mode to Key Recovery
Wireless penetration testing evaluates the security posture of Wi-Fi networks by simulating real attacker techniques. Unlike traditional…
15 views
Daily Writeups
⤷ Title: How to Use BloodHound to Hack Active Directory: A Full Guide
════════════════════════
𐀪 Author: Youssef Said Thabet
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 20:05:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #bloodhound #red_teaming
Medium
How to Use BloodHound to Hack Active Directory: A Full Guide
What Is BloodHound?
22 views
Daily Writeups
⤷ Title: Cybersecurity vs Ethical Hacking Explained for Absolute Beginners
════════════════════════
𐀪 Author: G. Sharan Raghav
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 21:22:35 GMT
════════════════════════
⌗ Tags: #ethical_hacking #internet #cyber_security_awareness #jobs #cybersecurity
Medium
Cybersecurity vs Ethical Hacking Explained for Absolute Beginners
Cybersecurity vs Ethical Hacking: What’s the Real Difference (In Simple Words)?
24 views
Daily Writeups
⤷ Title: PhishMasterX: Building an Educational Framework to Understand Modern Phishing Attacks
════════════════════════
𐀪 Author: Cyber Wolf
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 20:06:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #phishing_attacks #cybersecurity #cyber_security_awareness #phishing
Medium
🔐 PhishMasterX: Building an Educational Framework to Understand Modern Phishing Attacks
Phishing remains one of the most effective attack vectors in cybersecurity — not because it is technically complex, but because it exploits…
20 views
Daily Writeups
⤷ Title: Private Sandwich Harbour 4x4 Tour with Lunch Walvis Bay
════════════════════════
𐀪 Author: Sullivancarpenter
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 20:51:00 GMT
════════════════════════
⌗ Tags: #harbour #tour #private #sandwich #xs
26 views
Daily Writeups
⤷ Title: Effective Dorking Tools
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 23:04:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #osint #dorking #bug_bounty
Medium
Effective Dorking Tools
different dorking tools for bug hunters, osint investigators
21 views
Daily Writeups
⤷ Title: Guide to HTTP Status Codes for Bug Bounty and Pentesting
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #technology #web_development
Medium
Guide to HTTP Status Codes for Bug Bounty and Pentesting
Master HTTP codes: from Blind SQLi techniques in 200 OK to bypasses in 403 and credential leaks in 307.
16 views
Daily Writeups
⤷ Title: Academic research tools-OSINT
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 23:02:45 GMT
════════════════════════
⌗ Tags: #hacking #osint #osint_investigation #cybersecurity #research
Medium
Academic research tools-OSINT
Academic Tools Supercharge OSINT
10 views
Daily Writeups
⤷ Title: Hack AWS Like a Pro: Pacu Reveals Every Hidden Weakness!
════════════════════════
𐀪 Author: cybrNK
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 23:02:20 GMT
════════════════════════
⌗ Tags: #cloud_security #cybersecurity #aws #offensive_security #hacking
Medium
Hack AWS Like a Pro: Pacu Reveals Every Hidden Weakness!
Pacu is a focused, offensive security framework that lets you explore, break, and document the real blast radius of misconfigurations in an…
14 views
Daily Writeups
⤷ Title: How Hackers Target Your Phone and Wi-Fi
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 23:08:19 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #security #hacker #technology
Medium
How Hackers Target Your Phone and Wi-Fi
Protect Your Digital Life From These Common (and Sneaky) Attacks
13 views
Daily Writeups
⤷ Title: From Theory to Exploitation: A Deep Dive into SQL Injection Attacks
════════════════════════
𐀪 Author: Sriman kundu
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 21:58:21 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #sql_attack #ethical_hacking #web_security
Medium
From Theory to Exploitation: A Deep Dive into SQL Injection Attacks
How I validated my recent CodeRed certification by analyzing vulnerabilities on a legal testing environment.
20 views
Daily Writeups
⤷ Title: Introducing ExecEvasion: Understanding Execution Evasion Beyond Simple Filters
════════════════════════
𐀪 Author: Sid Joshi
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 23:14:17 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #linux_commands #defense_evasion #oscp #bug_bounty_tips
Medium
Introducing ExecEvasion: Understanding Execution Evasion Beyond Simple Filters
Turning “Access Denied” into “Challenge Accepted” — responsibly.
20 views
Daily Writeups
⤷ Title: GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 01:58:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD #CVE_2025_7659 #Denial of Service #DevOps Security #gitlab #graphql #Markdown Vulnerability #Patch Alert #Token Theft #Web IDE
Daily CyberSecurity
GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
GitLab fixes critical CVE-2025-7659 (CVSS 8.0). Unauthenticated attackers can steal tokens via Web IDE. Update to v18.8.4 now to secure your code.
21 views
Daily Writeups
⤷ Title: Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:50:32 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT44 #cyber_espionage #Defense Industrial Base #Drone Security #Edge Device Security #Google Threat Intelligence #GTIG #Insider Threat #North Korean IT workers #SANDWORM
Daily CyberSecurity
Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector
GTIG report: Defense Industrial Base faces "constant siege" from Russian drone hackers & North Korean IT insiders. Learn the new threats.
16 views
Daily Writeups
⤷ Title: “Fiber” Optic Failure: Predictable UUIDs Expose Go Web Framework to Hijacking
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:48:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backend Development #CSRF #CVE_2025_66630 #Fiber Framework #go #Golang #Patch Alert #Session Hijacking #UUID #Web Security
Daily CyberSecurity
"Fiber" Optic Failure: Predictable UUIDs Expose Go Web Framework to Hijacking
Critical Fiber framework vulnerability CVE-2025-66630 (CVSS 9.2) causes silent UUID failures, leading to session hijacking. Update to v2.52.11 now.
9 views
Daily Writeups
⤷ Title: Sleeping with the Enemy: Dormant Backdoors Found in Ivanti EPMM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:42:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_1281 #CVE_2026_1340 #cyber_espionage #Defused #Fileless Malware #In_Memory Backdoor #initial access broker #Ivanti EPMM #Java Class Loader #Patch Alert
Daily CyberSecurity
Sleeping with the Enemy: Dormant Backdoors Found in Ivanti EPMM
New campaign targets Ivanti EPMM with dormant in-memory backdoors. Attackers use CVE-2026-1281 to plant "sleeper" agents. Restart servers immediately.
11 views
Daily Writeups
⤷ Title: Unmasking the Proxy: Silent Push “Traffic Origin” Exposes True Actor Locations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:42:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #geolocation #Insider Threats #IP Analysis #North Korean IT workers #residential proxies #Silent Push #threat intelligence #Traffic Origin #VPN Detection
Daily CyberSecurity
Unmasking the Proxy: Silent Push "Traffic Origin" Exposes True Actor Locations
Silent Push's Traffic Origin technology strips away VPN masks to reveal the true location of threat actors. Detect North Korean & Russian proxies now.
26 views
Daily Writeups
⤷ Title: Sandbox Breakout: Critical SandboxJS Flaw (CVE-2026-25881) Allows Host Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:37:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Array Taint Bypass #CVE_2026_25881 #JavaScript Security #Patch Alert #Prototype Pollution #Remote Code Execution #Sandbox Escape #SandboxJS #Web Security
Daily CyberSecurity
Sandbox Breakout: Critical SandboxJS Flaw (CVE-2026-25881) Allows Host Takeover
Critical SandboxJS flaw CVE-2026-25881 allows sandbox escape via prototype pollution. Malicious code can modify host logic & execute RCE. Update to v0.8.31.
21 views
Daily Writeups
⤷ Title: Fake CEO, Real Hack: North Korea Uses AI Deepfakes to Steal Crypto
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:32:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AI Threat #CHROMEPUSH #Cryptocurrency Theft #DEEPBREATH #Deepfake Attack #macOS Malware #Mandiant #SILENCELIFT #social engineering #UNC1069
Daily CyberSecurity
Fake CEO, Real Hack: North Korea Uses AI Deepfakes to Steal Crypto
North Korean hackers (UNC1069) use AI deepfakes & "ClickFix" tactics to deploy SILENCELIFT malware. Learn how they target crypto firms via Zoom.
12 views
Daily Writeups
⤷ Title: Factory Flaw: Critical WAGO Switch Vulnerabilities (CVSS 9.8) Allow Remote Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CERT@VDE #CVE_2026_22904 #CVE_2026_22906 #Hardcoded Encryption Key #ICS security #Industrial Managed Switch #OT Security #SCADA #WAGO 852 Series
Daily CyberSecurity
Factory Flaw: Critical WAGO Switch Vulnerabilities (CVSS 9.8) Allow Remote Takeover
Critical flaws in WAGO 852 switches (CVSS 9.8) allow remote takeover via hardcoded keys & buffer overflows. Update firmware 2.64 immediately.
11 views
Daily Writeups
⤷ Title: Hiding in the Cloud: GuLoader Malware Evolves to Evade Detection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 00:22:09 +0000
════════════════════════
⌗ Tags: #Malware #CloudEye #cybersecurity #Downloader #Google Drive Malware #GuLoader #infosec #Malware Analysis #Obfuscation #Polymorphic Code #Zscaler ThreatLabz
Daily CyberSecurity
Hiding in the Cloud: GuLoader Malware Evolves to Evade Detection
Zscaler analyzes GuLoader's evolution. The malware uses Google Drive, polymorphic code, and exception-based obfuscation to evade detection.
13 views