Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Bounty Hacker | TryHackMe | CTF
════════════════════════
𐀪 Author: s1lja
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:59:58 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #hacking
Medium
Bounty Hacker | TryHackMe | CTF
Hello World😶‍🌫️
38 views
Daily Writeups
⤷ Title: Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:43:18 +0000
════════════════════════
⌗ Tags: #Open Source Tool #attack path visualization #AWS EKS #cloud_native security #DevSecOps #eks_security_scanner #Go #IAM security #Kubernetes security #RBAC audit #Tech News 2026 #Threat Modeling
Penetration Testing Tools
Mapping the Blast Radius: Visualize Attack Paths in AWS EKS with This New Go-Based Scanner
Stop guessing your EKS security posture. Use eks-security-scanner to build threat graphs, detect privileged pods, and audit RBAC/IAM access paths instantly.
31 views
Daily Writeups
⤷ Title: The Invisible Siege: Google Unmasks the Sophisticated “Human Layer” War on the Defense Industry
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:35:07 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT groups #China cyber espionage #Defense Industry #Google Threat Intelligence #manufacturing ransomware #North Korea #recruitment scams #Social Engineering #Supply Chain Security #Tech News 2026
Penetration Testing Tools
The Invisible Siege: Google Unmasks the Sophisticated "Human Layer" War on the Defense Industry
The magnitude of cyber threats confronting the defense industry is escalating precipitously, transcending the boundaries of isolated digital
25 views
Daily Writeups
⤷ Title: Digital Eraser: Google Unleashes AI-Powered Shields for Passports and Private Photos
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:33:54 +0000
════════════════════════
⌗ Tags: #Google #AI filtering #digital footprint #Google Search #identity theft #non_consensual imagery #passport monitoring #privacy tools #Results about you #Safer Internet Day #Tech News 2026
Penetration Testing Tools
Digital Eraser: Google Unleashes AI-Powered Shields for Passports and Private Photos
In honor of International Safer Internet Day, Google has augmented its suite of privacy preservation instruments, meticulously engineered
20 views
Daily Writeups
⤷ Title: Total Mobile Dominion: The “ZeroDayRAT” Spyware Turning iPhones and Androids into Open Books
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:32:23 +0000
════════════════════════
⌗ Tags: #Malware #2FA Bypass #Android malware #iOS spyware #iVerify #mobile EDR #Mobile Spyware #Smishing #Tech News 2026 #Telegram malware #ZeroDayRAT
Penetration Testing Tools
Total Mobile Dominion: The "ZeroDayRAT" Spyware Turning iPhones and Androids into Open Books
Security analysts at iVerify have unearthed a nascent mobile espionage platform dubbed ZeroDayRAT within public Telegram channels. The
16 views
Daily Writeups
⤷ Title: Shielding the Cloud: Intel and Google Unmask “Critical” Vulnerabilities in TDX Hardware Isolation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:29:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security audit #confidential computing #CVE_2025_30513 #google cloud #Hardware Security #Intel TDX #Live Migration #Tech News 2026 #TEE #Trusted Execution Environment
Penetration Testing Tools
Shielding the Cloud: Intel and Google Unmask "Critical" Vulnerabilities in TDX Hardware Isolation
Intel Corporation and Google have concluded a collaborative security audit focusing on a cornerstone of Trusted Execution Technology
15 views
Daily Writeups
⤷ Title: The End of Intrusive Apps: Microsoft Unveils the “Mobile-Style” Permission Model for Windows 11
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:27:57 +0000
════════════════════════
⌗ Tags: #Windows #App Permissions #Baseline Security Mode #cybersecurity #Digital Signature #Microsoft #Privacy 2026 #system integrity #Tech News 2026 #User Consent Model #Windows 11
Penetration Testing Tools
The End of Intrusive Apps: Microsoft Unveils the "Mobile-Style" Permission Model for Windows 11
Microsoft has resolved to significantly fortify the security architecture of Windows 11 without compromising the platform’s quintessential openness
16 views
Daily Writeups
⤷ Title: The Watchers Unmasked: Massive Leak Exposes 500,000 Users of “Stalkerware” Spy Apps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:26:27 +0000
════════════════════════
⌗ Tags: #Data Leak #data breach #Ersten Group #Geofinder #Hacktivism #Peekviewer #privacy violation #spy apps #stalkerware #Tech News 2026 #uMobix #wikkid #Xnspy
Penetration Testing Tools
The Watchers Unmasked: Massive Leak Exposes 500,000 Users of "Stalkerware" Spy Apps
An anonymous hacktivist has disseminated over half a million payment records belonging to users of stalkerware applications. These
14 views
Daily Writeups
⤷ Title: The Filter Trap: How “Adbleed” Unmasks Your Real Location Behind Any VPN
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:25:06 +0000
════════════════════════
⌗ Tags: #Data Leak #ad blocker #Adbleed #Browser Fingerprinting #cybersecurity #De_anonymization #EasyList #JavaScript #privacy #Tech News 2026 #Tor Browser #VPN
Penetration Testing Tools
The Filter Trap: How "Adbleed" Unmasks Your Real Location Behind Any VPN
Security researcher Melvin Lammerts has unveiled Adbleed, a Proof-of-Concept (PoC) utility that demonstrates a sophisticated technique for the
17 views
Daily Writeups
⤷ Title: The Rust OS is Alive: Redox Achieves Self-Hosting Milestone and Slashes USB Latency
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:22:34 +0000
════════════════════════
⌗ Tags: #Linux #Cargo #COSMIC Edit #microkernel #open source #operating system #Redox OS #Relibc #Rust #rustc #self_hosting #Tech News 2026
Penetration Testing Tools
The Rust OS is Alive: Redox Achieves Self-Hosting Milestone and Slashes USB Latency
The architects of Redox, an avant-garde operating system forged in Rust, have presented a comprehensive retrospective of their
9 views
Daily Writeups
⤷ Title: Payment Bypass: When “Payment Successful” Was Just a Suggestion
════════════════════════
𐀪 Author: Xp10it
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:46:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #software_engineering #bug_bounty #fintech
Medium
Payment Bypass: When “Payment Successful” Was Just a Suggestion
Payment flows are built on trust.
12 views
Daily Writeups
⤷ Title: Membedah Ancaman Lumma Stealer: Modus Fake CAPTCHA dalam Perspektif Cyber Kill Chain
════════════════════════
𐀪 Author: Bryankurniaakbar
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:23:22 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity
Medium
Membedah Ancaman Lumma Stealer: Modus Fake CAPTCHA dalam Perspektif Cyber Kill Chain
Belakangan ini, komunitas keamanan siber dikejutkan dengan kampanye penyebaran Lumma Stealer yang sangat licin. Berbeda dengan teknik…
20 views
Daily Writeups
⤷ Title: Awas! Jebakan “Saya Bukan Robot” yang Bisa Mencuri Semua Akun Kamu (Bedah Kasus Lumma Stealer)
════════════════════════
𐀪 Author: Adrian Syah Abidin
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 02:36:40 GMT
════════════════════════
⌗ Tags: #fake_captcha #lumma_stealer #hacking #penetration_testing #cybersecurity
Medium
Awas! Jebakan “Saya Bukan Robot” yang Bisa Mencuri Semua Akun Kamu (Bedah Kasus Lumma Stealer)
Ditulis Oleh : Adrian Syah Abidin
17 views
Daily Writeups
⤷ Title: When a Browser Extension Becomes a Backdoor: Inside the Malicious Chrome Extension Targeting MEXC…
════════════════════════
𐀪 Author: Deven Chhajed
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:31:01 GMT
════════════════════════
⌗ Tags: #cryptosecurity #browser_extension_malware #browser_security #cybersecurity #api_security
Medium
When a Browser Extension Becomes a Backdoor: Inside the Malicious Chrome Extension Targeting MEXC Users
Browser extensions are supposed to make life easier. In the crypto world, they promise speed, automation and convenience. But sometimes…
25 views
Daily Writeups
⤷ Title: GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 02:29:13 GMT
════════════════════════
⌗ Tags: #attack_surface_management #ssrf #cve_2021_39935 #gitlab #threat_intelligence
Medium
GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
In early February 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2021–39935, a Server-Side Request…
27 views
Daily Writeups
⤷ Title: How an Internal Tool Accidentally Became Public Internet Property
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:44:02 GMT
════════════════════════
⌗ Tags: #hacking #infosec_write_ups #cybersecurity #bug_bounty #bug_bounty_tips
Medium
How an Internal Tool Accidentally Became Public Internet Property 🌐🚪
Free Link 🎈
21 views
Daily Writeups
⤷ Title: The Feature Was Disabled — The Backend Didn’t Get the Memo
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:41:33 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #hacking #infosec
Medium
🚦💥 The Feature Was Disabled — The Backend Didn’t Get the Memo
Free Link 🎈
14 views
Daily Writeups
⤷ Title: 3. Race Conditions Vulnerability
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:25:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #technology #infosec #bug_bounty #hacking
Medium
3. Race Conditions Vulnerability
Most applications assume one thing:
9 views
Daily Writeups
⤷ Title: How I Found My First Account Takeover Vulnerability
════════════════════════
𐀪 Author: SudoHunt
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:44:02 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cybersecurity #python
Medium
How I Found My First Account Takeover Vulnerability
Hi Hackers,
11 views
Daily Writeups
⤷ Title: Bug Bounty Masterclass —$90,000+ Real World Exploitation
════════════════════════
𐀪 Author: Zabed Ullah Poyel
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:59:14 GMT
════════════════════════
⌗ Tags: #idor #s3_bucket #web_security #bug_bounty #account_takeover
Medium
Bug Bounty Masterclass —$90,000+ Real World Exploitation
Open Deepseek Database
30 views
Daily Writeups
⤷ Title: Advanced IDOR: When One Login Unlocks Multiple Identities
════════════════════════
𐀪 Author: Shreya Dutta
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:02:28 GMT
════════════════════════
⌗ Tags: #idor #application_security #ethical_hacking #web_security #cybersecurity
Medium
Advanced IDOR: When One Login Unlocks Multiple Identities
In modern applications, authentication is usually implemented well. You log in, you get access to your dashboard, and everything seems…
15 views