Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Total Mobile Dominion: The “ZeroDayRAT” Spyware Turning iPhones and Androids into Open Books
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:32:23 +0000
════════════════════════
⌗ Tags: #Malware #2FA Bypass #Android malware #iOS spyware #iVerify #mobile EDR #Mobile Spyware #Smishing #Tech News 2026 #Telegram malware #ZeroDayRAT
Penetration Testing Tools
Total Mobile Dominion: The "ZeroDayRAT" Spyware Turning iPhones and Androids into Open Books
Security analysts at iVerify have unearthed a nascent mobile espionage platform dubbed ZeroDayRAT within public Telegram channels. The
16 views
Daily Writeups
⤷ Title: Shielding the Cloud: Intel and Google Unmask “Critical” Vulnerabilities in TDX Hardware Isolation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:29:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security audit #confidential computing #CVE_2025_30513 #google cloud #Hardware Security #Intel TDX #Live Migration #Tech News 2026 #TEE #Trusted Execution Environment
Penetration Testing Tools
Shielding the Cloud: Intel and Google Unmask "Critical" Vulnerabilities in TDX Hardware Isolation
Intel Corporation and Google have concluded a collaborative security audit focusing on a cornerstone of Trusted Execution Technology
15 views
Daily Writeups
⤷ Title: The End of Intrusive Apps: Microsoft Unveils the “Mobile-Style” Permission Model for Windows 11
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:27:57 +0000
════════════════════════
⌗ Tags: #Windows #App Permissions #Baseline Security Mode #cybersecurity #Digital Signature #Microsoft #Privacy 2026 #system integrity #Tech News 2026 #User Consent Model #Windows 11
Penetration Testing Tools
The End of Intrusive Apps: Microsoft Unveils the "Mobile-Style" Permission Model for Windows 11
Microsoft has resolved to significantly fortify the security architecture of Windows 11 without compromising the platform’s quintessential openness
16 views
Daily Writeups
⤷ Title: The Watchers Unmasked: Massive Leak Exposes 500,000 Users of “Stalkerware” Spy Apps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:26:27 +0000
════════════════════════
⌗ Tags: #Data Leak #data breach #Ersten Group #Geofinder #Hacktivism #Peekviewer #privacy violation #spy apps #stalkerware #Tech News 2026 #uMobix #wikkid #Xnspy
Penetration Testing Tools
The Watchers Unmasked: Massive Leak Exposes 500,000 Users of "Stalkerware" Spy Apps
An anonymous hacktivist has disseminated over half a million payment records belonging to users of stalkerware applications. These
14 views
Daily Writeups
⤷ Title: The Filter Trap: How “Adbleed” Unmasks Your Real Location Behind Any VPN
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:25:06 +0000
════════════════════════
⌗ Tags: #Data Leak #ad blocker #Adbleed #Browser Fingerprinting #cybersecurity #De_anonymization #EasyList #JavaScript #privacy #Tech News 2026 #Tor Browser #VPN
Penetration Testing Tools
The Filter Trap: How "Adbleed" Unmasks Your Real Location Behind Any VPN
Security researcher Melvin Lammerts has unveiled Adbleed, a Proof-of-Concept (PoC) utility that demonstrates a sophisticated technique for the
17 views
Daily Writeups
⤷ Title: The Rust OS is Alive: Redox Achieves Self-Hosting Milestone and Slashes USB Latency
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:22:34 +0000
════════════════════════
⌗ Tags: #Linux #Cargo #COSMIC Edit #microkernel #open source #operating system #Redox OS #Relibc #Rust #rustc #self_hosting #Tech News 2026
Penetration Testing Tools
The Rust OS is Alive: Redox Achieves Self-Hosting Milestone and Slashes USB Latency
The architects of Redox, an avant-garde operating system forged in Rust, have presented a comprehensive retrospective of their
9 views
Daily Writeups
⤷ Title: Payment Bypass: When “Payment Successful” Was Just a Suggestion
════════════════════════
𐀪 Author: Xp10it
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:46:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #software_engineering #bug_bounty #fintech
Medium
Payment Bypass: When “Payment Successful” Was Just a Suggestion
Payment flows are built on trust.
12 views
Daily Writeups
⤷ Title: Membedah Ancaman Lumma Stealer: Modus Fake CAPTCHA dalam Perspektif Cyber Kill Chain
════════════════════════
𐀪 Author: Bryankurniaakbar
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:23:22 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity
Medium
Membedah Ancaman Lumma Stealer: Modus Fake CAPTCHA dalam Perspektif Cyber Kill Chain
Belakangan ini, komunitas keamanan siber dikejutkan dengan kampanye penyebaran Lumma Stealer yang sangat licin. Berbeda dengan teknik…
20 views
Daily Writeups
⤷ Title: Awas! Jebakan “Saya Bukan Robot” yang Bisa Mencuri Semua Akun Kamu (Bedah Kasus Lumma Stealer)
════════════════════════
𐀪 Author: Adrian Syah Abidin
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 02:36:40 GMT
════════════════════════
⌗ Tags: #fake_captcha #lumma_stealer #hacking #penetration_testing #cybersecurity
Medium
Awas! Jebakan “Saya Bukan Robot” yang Bisa Mencuri Semua Akun Kamu (Bedah Kasus Lumma Stealer)
Ditulis Oleh : Adrian Syah Abidin
17 views
Daily Writeups
⤷ Title: When a Browser Extension Becomes a Backdoor: Inside the Malicious Chrome Extension Targeting MEXC…
════════════════════════
𐀪 Author: Deven Chhajed
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:31:01 GMT
════════════════════════
⌗ Tags: #cryptosecurity #browser_extension_malware #browser_security #cybersecurity #api_security
Medium
When a Browser Extension Becomes a Backdoor: Inside the Malicious Chrome Extension Targeting MEXC Users
Browser extensions are supposed to make life easier. In the crypto world, they promise speed, automation and convenience. But sometimes…
25 views
Daily Writeups
⤷ Title: GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
════════════════════════
𐀪 Author: Criminal IP
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 02:29:13 GMT
════════════════════════
⌗ Tags: #attack_surface_management #ssrf #cve_2021_39935 #gitlab #threat_intelligence
Medium
GitLab CI Lint API Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021–39935)
In early February 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2021–39935, a Server-Side Request…
27 views
Daily Writeups
⤷ Title: How an Internal Tool Accidentally Became Public Internet Property
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:44:02 GMT
════════════════════════
⌗ Tags: #hacking #infosec_write_ups #cybersecurity #bug_bounty #bug_bounty_tips
Medium
How an Internal Tool Accidentally Became Public Internet Property 🌐🚪
Free Link 🎈
21 views
Daily Writeups
⤷ Title: The Feature Was Disabled — The Backend Didn’t Get the Memo
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:41:33 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #hacking #infosec
Medium
🚦💥 The Feature Was Disabled — The Backend Didn’t Get the Memo
Free Link 🎈
14 views
Daily Writeups
⤷ Title: 3. Race Conditions Vulnerability
════════════════════════
𐀪 Author: Abhijeet kumawat
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:25:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #technology #infosec #bug_bounty #hacking
Medium
3. Race Conditions Vulnerability
Most applications assume one thing:
9 views
Daily Writeups
⤷ Title: How I Found My First Account Takeover Vulnerability
════════════════════════
𐀪 Author: SudoHunt
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:44:02 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cybersecurity #python
Medium
How I Found My First Account Takeover Vulnerability
Hi Hackers,
11 views
Daily Writeups
⤷ Title: Bug Bounty Masterclass —$90,000+ Real World Exploitation
════════════════════════
𐀪 Author: Zabed Ullah Poyel
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 03:59:14 GMT
════════════════════════
⌗ Tags: #idor #s3_bucket #web_security #bug_bounty #account_takeover
Medium
Bug Bounty Masterclass —$90,000+ Real World Exploitation
Open Deepseek Database
30 views
Daily Writeups
⤷ Title: Advanced IDOR: When One Login Unlocks Multiple Identities
════════════════════════
𐀪 Author: Shreya Dutta
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:02:28 GMT
════════════════════════
⌗ Tags: #idor #application_security #ethical_hacking #web_security #cybersecurity
Medium
Advanced IDOR: When One Login Unlocks Multiple Identities
In modern applications, authentication is usually implemented well. You log in, you get access to your dashboard, and everything seems…
15 views
Daily Writeups
⤷ Title: Breaking Down the Handshake: A Step-by-Step Guide to WPA2 Auditing
════════════════════════
𐀪 Author: Maryam Zahra
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:56:01 GMT
════════════════════════
⌗ Tags: #password_security #cybersecurity #hacking #cybersecurity_awareness
Medium
Breaking Down the Handshake: A Step-by-Step Guide to WPA2 Auditing
In the world of cybersecurity, understanding how to defend a network starts with understanding how it can be compromised. For my latest…
7 views
Daily Writeups
⤷ Title: What is Ethical Hacking ? A Beginner’s guide for 2026
════════════════════════
𐀪 Author: 0xSmit
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 05:27:57 GMT
════════════════════════
⌗ Tags: #beginners_guide #infosec #hacking #cybersecurity #ethical_hacking
Medium
What is Ethical Hacking ? A Beginner’s guide for 2026
Cybercrime is growing faster than ever. From data breaches to ransomware attacks, companies are constantly under threat. But here’s the…
7 views
Daily Writeups
⤷ Title: Ketika “I’m Not a Robot” Jadi Awal Serangan: Membongkar Fake CAPTCHA dan Lumma Stealer
════════════════════════
𐀪 Author: Ibnu Hibban
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 04:42:50 GMT
════════════════════════
⌗ Tags: #hacking #social_engineering #information_security #malware #cybersecurity
Medium
Ketika “I’m Not a Robot” Jadi Awal Serangan: Membongkar Fake CAPTCHA dan Lumma Stealer
Bagaimana satu klik verifikasi bisa berubah menjadi pintu masuk malware pencuri data.
10 views
Daily Writeups
⤷ Title: Why Your 2025 Cloud Pentest is Probably Useless (Hint: It’s the AI)
════════════════════════
𐀪 Author: Sujal Meghwal
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 04:19:20 GMT
════════════════════════
⌗ Tags: #penetration_testing #cloud #cybersecurity #information_security #cyber_security_awareness
Medium
Why Your 2025 Cloud Pentest is Probably Useless (Hint: It’s the AI)
Let’s be real for a second traditional cloud penetration testing is kind of dying.
8 views