Daily Writeups
@Daily_Writeups
3.62K subscribers
4 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.62K subscribers
Daily Writeups
⤷ Title: The “Styles” Trap: 500,000 VK Accounts Hijacked by Chrome Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:27:00 +0000
════════════════════════
⌗ Tags: #Malware #Account Hijacking #browser security #Chrome Web Store #CSRF #KOI Security #Malicious Extensions #Social Media Botnet #VK #VK Styles #VKontakte
Daily CyberSecurity
The "Styles" Trap: 500,000 VK Accounts Hijacked by Chrome Extensions
500k VK accounts hijacked by "VK Styles" extensions. Malware forces subscriptions and bypasses CSRF tokens. Remove the extension immediately.
23 views
Daily Writeups
⤷ Title: Game Over: “RenEngine” Malware Hides in Pirated Visual Novels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:22:22 +0000
════════════════════════
⌗ Tags: #Malware #ACR Stealer #Cyber Crime #Data Theft #Game Security #kaspersky #Lumma Stealer #malware #Pirated Games #Ren'Py #RenEngine #Visual Novels
Daily CyberSecurity
Game Over: "RenEngine" Malware Hides in Pirated Visual Novels
Kaspersky warns: Pirated visual novels are spreading RenEngine malware. Attackers use fake downloads to install ACR Stealer. Protect your data now.
19 views
Daily Writeups
⤷ Title: The 1% Breach: 287 Chrome Extensions Caught Spying on 37M Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:19:15 +0000
════════════════════════
⌗ Tags: #Data Leak #Big Star Labs #browser security #Chrome extensions #Cyber Security #Data Privacy #Google Analytics Abuse #Q Continuum #Similarweb #spyware #Super PiP
Daily CyberSecurity
The 1% Breach: 287 Chrome Extensions Caught Spying on 37M Users
Q Continuum finds 287 Chrome extensions spying on 37M users. "Super PiP" & others exfiltrate history via Google Analytics. Check your browser now.
17 views
Daily Writeups
⤷ Title: Foxveil: New Malware Loader Hides in Plain Sight Using Cloudflare and Discord
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:13:48 +0000
════════════════════════
⌗ Tags: #Malware #Cato CTRL #Cloudflare Abuse #Cyber Security #Discord #evasion techniques #Fileless Malware #Foxveil #infosec #malware loader #Netlify
Daily CyberSecurity
Foxveil: New Malware Loader Hides in Plain Sight Using Cloudflare and Discord
Cato CTRL discovers Foxveil, a new malware loader abusing Cloudflare, Netlify & Discord to bypass defenses. Active since Aug 2025. Learn the signs.
29 views
Daily Writeups
⤷ Title: “CL Suite” Deception: Malicious Chrome Extension Steals 2FA Secrets and Meta Business Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:07:00 +0000
════════════════════════
⌗ Tags: #Malware #2FA Theft #Account Takeover #CL Suite #Cyber Security #Facebook Business #Instagram Business #Malicious Chrome Extension #Meta Business Suite #Socket Threat Research #TOTP Seeds
Daily CyberSecurity
"CL Suite" Deception: Malicious Chrome Extension Steals 2FA Secrets and Meta Business Data
"CL Suite" Chrome extension steals Meta Business 2FA seeds & data. Attackers bypass security even after uninstall. Reset 2FA immediately.
20 views
Daily Writeups
⤷ Title: “Natural Selection” at Work: How North Korean IT Workers Use AI to Infiltrate Companies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:00:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Deepfakes #Background Checks #DPRK #employment fraud #identity theft #Insider Threat #North Korean IT workers #Okta Threat Intelligence #Remote Work Security #social engineering
Daily CyberSecurity
"Natural Selection" at Work: How North Korean IT Workers Use AI to Infiltrate Companies
Okta exposes North Korean IT workers using AI photos & stolen LinkedIn profiles to land remote jobs. Learn how "JJ" bypassed checks.
15 views
Daily Writeups
⤷ Title: UUID Might Not Be Unique (Use this to report a security issue)
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:52:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #uuid #cryptography #bug_bounty_reports
Medium
UUID Might Not Be Unique (Use this to report a security issue)
UUID — It stands for Universally Unique Identifier. It has the word UNIQUE in it. But is it really unique? How many times have you…
17 views
Daily Writeups
⤷ Title: Guía de sslscan: Cómo auditar certificados SSL/TLS y detectar vulnerabilidades críticas
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #penetration_testing #hacking #technology
Medium
Guía de sslscan: Cómo auditar certificados SSL/TLS y detectar vulnerabilidades críticas
Aprende a usar sslscan para identificar fallos de cifrado, protocolos obsoletos y activos ocultos en tus auditorías de seguridad web.
20 views
Daily Writeups
⤷ Title: (Windows/Linux)File Transfer Methods Labs | HTB
════════════════════════
𐀪 Author: Mohamed Mejahed
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:11:51 GMT
════════════════════════
⌗ Tags: #penetration_testing #htb_academy #htb_walkthrough
Medium
(Windows/Linux)File Transfer Methods Labs | HTB
Hello today i will walk through this 2 labs so maybe someone will benefit from this walk through
30 views
Daily Writeups
⤷ Title: Hidden Deep Into My Heart — TryHackMe writeup
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:21:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #reconnaissance #cybernerddd #valenfind #ethical_hacking
Medium
Hidden Deep Into My Heart — TryHackMe writeup
Breaking Into Cupid’s Secret Vault (Without Brute Force)
27 views
Daily Writeups
⤷ Title: Forgotten Ruins -OSINT
════════════════════════
𐀪 Author: Aser Ahmed
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 02:48:00 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #cybersecurity #hacking #osint
Medium
Forgotten Ruins -OSINT
Hello, this is my first writeup and I hope you enjoy it. So we have an OSINT challenge called Forgotten Ruins on vulnbydefault.com
23 views
Daily Writeups
⤷ Title: Tuesday Morning Threat Report: Feb 17, 2026
════════════════════════
𐀪 Author: Mark Maguire
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 02:24:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #anthropics
Medium
Tuesday Morning Threat Report: Feb 17, 2026
Where the news is always bad, but the analysis is always good.
27 views
Daily Writeups
⤷ Title: The Message Broker That Spoke Too Freely
════════════════════════
𐀪 Author: Isaac Adebayo
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 02:32:25 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #information_security #cybersecurity #technology
Medium
The Message Broker That Spoke Too Freely
A tale of JSON, trust, and the art of breaking things to understand them
32 views
Daily Writeups
⤷ Title: INE-Assessment Methodologies: Vulnerability Assessment CTF 1
════════════════════════
𐀪 Author: Singkhon K
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 02:00:26 GMT
════════════════════════
⌗ Tags: #penetration_testing #ctf #programming #coding #cybersecurity
Medium
INE-Assessment Methodologies: Vulnerability Assessment CTF 1
Hello, my name is Singkhon. After completing the eJPT course, I would like to share my methods and approaches for solving each CTF problem…
22 views
Daily Writeups
⤷ Title: The Message Broker That Spoke Too Freely
════════════════════════
𐀪 Author: Isaac Adebayo
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 01:54:29 GMT
════════════════════════
⌗ Tags: #information_security #ethical_hacking #technology #cybersecurity #penetration_testing
Medium
The Message Broker That Spoke Too Freely
A tale of JSON, trust, and the art of breaking things to understand them
22 views
Daily Writeups
⤷ Title: TryHackMe, The Game solved in less than 2 minutes
════════════════════════
𐀪 Author: Vick Kumar
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 01:21:33 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #cybersecurity #ethical_hacking
Medium
TryHackMe, The Game solved in less than 2 minutes
TryHackMe | The Game is a challenge where you’re provided with an exe file of the game “Tetris”, the game itself is written using GoDot and…
21 views
Daily Writeups
⤷ Title: Domain Name System (DNS)
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:54:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_fundamentals_series #dns #cybersecurity #web
Medium
Domain Name System (DNS)
Web Fundamentals Part 3
29 views
Daily Writeups
⤷ Title: TryHeartMe — TryHackMe Writeup | by P4NTHR
════════════════════════
𐀪 Author: P4NTHR
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 01:24:13 GMT
════════════════════════
⌗ Tags: #tryhackme #broken_access_control #tryhackme_writeup #jwt
Medium
TryHeartMe — TryHackMe Writeup | by P4NTHR
Enumeration
30 views
Daily Writeups
⤷ Title: Love Letter Locker | TryHackMe Walkthrough
════════════════════════
𐀪 Author: Munirah
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 01:10:44 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #notes
Medium
Love Letter Locker | TryHackMe Walkthrough
Use your skills to access other users’ letters.
37 views
Daily Writeups
⤷ Title: Apache NiFi Flaw (CVE-2026-25903) Lets Users Bypass Restrictions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 03:34:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache NiFi #Apache Software Foundation #Authorization Bypass #big data #CVE_2026_25903 #Data Pipeline Security #DevOps #NiFi 2.8.0 #Restricted Components
Daily CyberSecurity
Apache NiFi Flaw (CVE-2026-25903) Lets Users Bypass Restrictions
Apache NiFi flaw CVE-2026-25903 allows unauthorized users to modify restricted components. Update to version 2.8.0 immediately to secure data pipelines.
29 views
Daily Writeups
⤷ Title: Why curl Quit HackerOne
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 04:59:32 GMT
════════════════════════
⌗ Tags: #bug_bounty #hackerone #bug_bounty_writeup #infosec
Medium
Why curl Quit HackerOne
Daniel Stenberg, the creator of curl, recently made waves by removing the project from HackerOne. This wasn't because curl became insecure…
24 views