Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: Thick Client Application Pentesting: A Complete Practical Guide
════════════════════════
𐀪 Author: Lernerspath
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 02:20:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #cybersecurity_training #cybersecurity_education #penetration_testing #cybersecurity_awareness
Medium
Thick Client Application Pentesting: A Complete Practical Guide
1️⃣ What is a Thick Client Application?
20 views
Daily Writeups
⤷ Title: Nmap: The Foundation of Smart Network Reconnaissance
════════════════════════
𐀪 Author: Nida Arshad
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 01:47:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #penetration_testing
Medium
Nmap: The Foundation of Smart Network Reconnaissance
In cybersecurity, information is everything. Before any vulnerability can be exploited or any system can be secured, one crucial step must…
13 views
Daily Writeups
⤷ Title: Incident Response Fundamentals — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 01:31:00 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #tryhackme_writeup #cybersecurity_101 #incident_response
Medium
Incident Response Fundamentals — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: Incident Response Fundamentals
Room URL: https://tryhackme.com/room/incidentresponsefundamentals
Difficulty: Easy…
23 views
Daily Writeups
⤷ Title: How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology.
════════════════════════
𐀪 Author: Kipc-Sharon
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 01:04:18 GMT
════════════════════════
⌗ Tags: #api_security #api_pentesting #api_pen_testers_approach
Medium
How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology.
Why API Pen-Testing Is Different From Web App Testing
52 views
Daily Writeups
⤷ Title: The Invisible Switch: North Korean Hackers Use “Contagious Interviews” to Trojanize Your MetaMask
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:59:27 +0000
════════════════════════
⌗ Tags: #Malware #BeaverTail #Chrome Security #Contagious Interview #Crypto Theft #Developer Security #InvisibleFerret #malware #MetaMask #North Korea #OtterCookie #Secure Preferences #Tech News 2026
Penetration Testing Tools
The Invisible Switch: North Korean Hackers Use "Contagious Interviews" to Trojanize Your MetaMask
North Korean cyber-adversaries are endeavoring to surreptitiously supplant the MetaMask cryptocurrency wallet extension directly upon a victim’s workstation—an
25 views
Daily Writeups
⤷ Title: The R50 Million Siege: Inside the Ransomware Offensive Paralyzing South Africa’s Land Bank
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:57:16 +0000
════════════════════════
⌗ Tags: #Data Leak #banking news 2026 #cyberattack #data breach #Financial Cybercrime #forensic audit #IT security #Land Bank #R50 million ransom #ransomware #South Africa
Penetration Testing Tools
The R50 Million Siege: Inside the Ransomware Offensive Paralyzing South Africa’s Land Bank
The Land and Agricultural Development Bank of South Africa has found itself at the epicenter of a significant
20 views
Daily Writeups
⤷ Title: Total Dominion: The CVSS 10.0 Flaw in Nanobot Allowing Hackers to Hijack Your WhatsApp
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:55:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Assistant #Critical Vulnerability #CVE_2026_2577 #CVSS 10.0 #Nanobot #QR code theft #session takeover #Tech News 2026 #Tenable #WebSocket hijacking #WhatsApp
Penetration Testing Tools
Total Dominion: The CVSS 10.0 Flaw in Nanobot Allowing Hackers to Hijack Your WhatsApp
Security researchers from Tenable have unearthed a critical vulnerability, designated CVE-2026-2577, within the prominent AI assistant Nanobot, a
17 views
Daily Writeups
⤷ Title: Double-Locked and Hardened: Inside the Notepad++ Fight Against the “Chrysalis” Supply Chain Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:53:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Chrysalis backdoor #CVE_2025_15556 #CVE_2026_25926 #Don Ho #Lotus Panda #Notepad++ #Notepad++ 8.9.2 #Software Security #supply chain attack #Tech News 2026 #WinGUp update
Penetration Testing Tools
Double-Locked and Hardened: Inside the Notepad++ Fight Against the "Chrysalis" Supply Chain Attack
The architects of Notepad++ have disseminated security patch 8.9.2 to fortify vulnerabilities recently exploited by a sophisticated threat
17 views
Daily Writeups
⤷ Title: Shattering the Syndicate: Poland Dismantles Key Operative in Global Phobos Ransomware Hunt
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:49:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Central Bureau for Combating Cybercrime #Cybercrime Arrest #Cybersecurity 2026 #Data Extortion #Europol #Operation Aether #Phobos ransomware #Poland #RaaS #Ransomware_as_a_Service
Penetration Testing Tools
Shattering the Syndicate: Poland Dismantles Key Operative in Global Phobos Ransomware Hunt
In Poland, law enforcement agencies have executed a targeted operation against an alleged operative within the infrastructure of
18 views
Daily Writeups
⤷ Title: WebClientRelayUp – an universal no-fix local privilege escalation in domain-joined windows workstations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:58:24 +0000
════════════════════════
⌗ Tags: #Open Source Tool #local privilege escalation #WebClientRelayUp
Penetration Testing Tools
WebClientRelayUp - an universal no-fix local privilege escalation in domain-joined windows workstations
WebClientRelayUp This is basically an universal no-fix local privilege escalation in domain-joined windows workstations in default configuration. Tested
18 views
Daily Writeups
⤷ Title: The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:35:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Runner #CVE_2025_65715 #CVE_2025_65717 #data exfiltration #Live Server #Markdown Preview Enhanced #OX Security #rce #Remote Code Execution #Tech News 2026 #Visual Studio Code security #VS Code
Daily CyberSecurity
The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
Critical flaws in Live Server, Code Runner, and more expose 128M+ developers to file theft and remote code execution. Is your VS Code workspace secure?
22 views
Daily Writeups
⤷ Title: Google Unveils Gemini 3.1 Pro with 1 Million Tokens for Deep-Data Mastery
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:23:04 +0000
════════════════════════
⌗ Tags: #Technology #1 million token context #AI model launch #enterprise AI #Gemini API #Google AI Studio #Google Gemini 3.1 Pro #multi_modal AI #NotebookLM #Tech News 2026 #Vertex AI
Daily CyberSecurity
Google Unveils Gemini 3.1 Pro with 1 Million Tokens for Deep-Data Mastery
Google debuts Gemini 3.1 Pro! With a 1M token context window and native multi-modal power, it’s the new gold standard for complex analysis and big data.
16 views
Daily Writeups
⤷ Title: Infoblox Exposes Hybrid Malvertising & “Pig Butchering” Scam
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:32:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cryptocurrency Fraud #Cyber Crime #Cyber Security #Financial Scam #Hybrid Scam #Infoblox Threat Intel #Malvertising #Pig Butchering #social engineering #threat intelligence
Daily CyberSecurity
Infoblox Exposes Hybrid Malvertising & "Pig Butchering" Scam
Infoblox Threat Intel exposes a highly scalable hybrid scam merging automated malvertising with "pig butchering" to drain global crypto investors' funds.
11 views
Daily Writeups
⤷ Title: PoC Publicly Disclosed: Critical Grandstream VoIP Flaw (CVSS 9.3) Grants Stealthy Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:25:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_2329 #cybersecurity #Exploit Disclosed #Grandstream #GXP1600 #PoC #Rapid7 #Remote Code Execution #VoIP Security
Daily CyberSecurity
PoC Publicly Disclosed: Critical Grandstream VoIP Flaw (CVSS 9.3) Grants Stealthy Root Access
Rapid7 publicly discloses a critical zero-day and PoC (CVE-2026-2329) for Grandstream GXP1600 VoIP phones allowing remote root access. Patch now.
10 views
Daily Writeups
⤷ Title: Trojan Routers: Texas Sues TP-Link Over Alleged CCP Surveillance and Supply Chain Deception
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:17:38 +0000
════════════════════════
⌗ Tags: #Malware #CCP Surveillance #Cyber Security #infosec #Ken Paxton #national security #Router Vulnerability #supply chain risk #Texas Attorney General #TP_Link Lawsuit #Wi_Fi security
Daily CyberSecurity
Trojan Routers: Texas Sues TP-Link Over Alleged CCP Surveillance and Supply Chain Deception
Texas AG Ken Paxton sues TP-Link, alleging the Wi-Fi giant's routers act as Trojan horses for CCP surveillance. State bans TP-Link gear for employees.
13 views
Daily Writeups
⤷ Title: The Database Was Sold Online… but the Vulnerability Was Still Open
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:23:59 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #bug_bounty #bug_bounty_tips #hacking #cybersecurity
Medium
The Database Was Sold Online… but the Vulnerability Was Still Open 💾🚨
Hey there!😁
16 views
Daily Writeups
⤷ Title: How I Bypassed Email Verification Using an Exposed API Endpoint
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:23:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #hackthebox #web_security #bug_bounty
Medium
How I Bypassed Email Verification Using an Exposed API Endpoint
HTB OWASP TOP 10 2025 | NovaEnergy
23 views
Daily Writeups
⤷ Title: How I found Critical Bug From Regular Pagination
════════════════════════
𐀪 Author: Albertstive
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:45:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #software_development #bug_bounty #web_development
Medium
How I found Critical Bug From Regular Pagination
Who would have thought that it all started from just a small thing!…
17 views
Daily Writeups
⤷ Title: How I Bypassed Email Verification Using an Exposed API Endpoint
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:23:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #hackthebox #web_security #bug_bounty
Medium
How I Bypassed Email Verification Using an Exposed API Endpoint
HTB OWASP TOP 10 2025 | NovaEnergy
16 views
Daily Writeups
⤷ Title: API Security : A Deep Dive into HTTP Fundamentals, Headers & Status Codes
════════════════════════
𐀪 Author: Reduan Islam Badhon
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:30:53 GMT
════════════════════════
⌗ Tags: #hackingapiswithdami #bug_bounty_tips #api_security #bug_bounty #api
Medium
API Security : A Deep Dive into HTTP Fundamentals, Headers & Status Codes
APIs are the backbone of modern applications. Whether you’re building microservices, mobile backends, or integrating third-party platforms…
13 views
Daily Writeups
⤷ Title: Metasploitable 3 (Windows) Write-up — Part XI: Port 8484 — Jetty Server Web Application…
════════════════════════
𐀪 Author: Kalash Kundaliya
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:20:16 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #privilege_escalation #hacking #jetty_server #metasploitable
Medium
Metasploitable 3 (Windows) Write-up — Part XI: Port 8484 — Jetty Server Web Application…
This guide is strictly for educational purposes only. All demonstrations are performed in a controlled environment using Metasploitable 3…
15 views