Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Total Dominion: The CVSS 10.0 Flaw in Nanobot Allowing Hackers to Hijack Your WhatsApp
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:55:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Assistant #Critical Vulnerability #CVE_2026_2577 #CVSS 10.0 #Nanobot #QR code theft #session takeover #Tech News 2026 #Tenable #WebSocket hijacking #WhatsApp
Penetration Testing Tools
Total Dominion: The CVSS 10.0 Flaw in Nanobot Allowing Hackers to Hijack Your WhatsApp
Security researchers from Tenable have unearthed a critical vulnerability, designated CVE-2026-2577, within the prominent AI assistant Nanobot, a
18 views
Daily Writeups
⤷ Title: Double-Locked and Hardened: Inside the Notepad++ Fight Against the “Chrysalis” Supply Chain Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:53:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Chrysalis backdoor #CVE_2025_15556 #CVE_2026_25926 #Don Ho #Lotus Panda #Notepad++ #Notepad++ 8.9.2 #Software Security #supply chain attack #Tech News 2026 #WinGUp update
Penetration Testing Tools
Double-Locked and Hardened: Inside the Notepad++ Fight Against the "Chrysalis" Supply Chain Attack
The architects of Notepad++ have disseminated security patch 8.9.2 to fortify vulnerabilities recently exploited by a sophisticated threat
17 views
Daily Writeups
⤷ Title: Shattering the Syndicate: Poland Dismantles Key Operative in Global Phobos Ransomware Hunt
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:49:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Central Bureau for Combating Cybercrime #Cybercrime Arrest #Cybersecurity 2026 #Data Extortion #Europol #Operation Aether #Phobos ransomware #Poland #RaaS #Ransomware_as_a_Service
Penetration Testing Tools
Shattering the Syndicate: Poland Dismantles Key Operative in Global Phobos Ransomware Hunt
In Poland, law enforcement agencies have executed a targeted operation against an alleged operative within the infrastructure of
18 views
Daily Writeups
⤷ Title: WebClientRelayUp – an universal no-fix local privilege escalation in domain-joined windows workstations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:58:24 +0000
════════════════════════
⌗ Tags: #Open Source Tool #local privilege escalation #WebClientRelayUp
Penetration Testing Tools
WebClientRelayUp - an universal no-fix local privilege escalation in domain-joined windows workstations
WebClientRelayUp This is basically an universal no-fix local privilege escalation in domain-joined windows workstations in default configuration. Tested
18 views
Daily Writeups
⤷ Title: The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:35:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Runner #CVE_2025_65715 #CVE_2025_65717 #data exfiltration #Live Server #Markdown Preview Enhanced #OX Security #rce #Remote Code Execution #Tech News 2026 #Visual Studio Code security #VS Code
Daily CyberSecurity
The Dev Environment Trap: 128 Million Users at Risk as Top VS Code Extensions Unmask Critical Flaws
Critical flaws in Live Server, Code Runner, and more expose 128M+ developers to file theft and remote code execution. Is your VS Code workspace secure?
22 views
Daily Writeups
⤷ Title: Google Unveils Gemini 3.1 Pro with 1 Million Tokens for Deep-Data Mastery
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:23:04 +0000
════════════════════════
⌗ Tags: #Technology #1 million token context #AI model launch #enterprise AI #Gemini API #Google AI Studio #Google Gemini 3.1 Pro #multi_modal AI #NotebookLM #Tech News 2026 #Vertex AI
Daily CyberSecurity
Google Unveils Gemini 3.1 Pro with 1 Million Tokens for Deep-Data Mastery
Google debuts Gemini 3.1 Pro! With a 1M token context window and native multi-modal power, it’s the new gold standard for complex analysis and big data.
16 views
Daily Writeups
⤷ Title: Infoblox Exposes Hybrid Malvertising & “Pig Butchering” Scam
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:32:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cryptocurrency Fraud #Cyber Crime #Cyber Security #Financial Scam #Hybrid Scam #Infoblox Threat Intel #Malvertising #Pig Butchering #social engineering #threat intelligence
Daily CyberSecurity
Infoblox Exposes Hybrid Malvertising & "Pig Butchering" Scam
Infoblox Threat Intel exposes a highly scalable hybrid scam merging automated malvertising with "pig butchering" to drain global crypto investors' funds.
11 views
Daily Writeups
⤷ Title: PoC Publicly Disclosed: Critical Grandstream VoIP Flaw (CVSS 9.3) Grants Stealthy Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:25:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_2329 #cybersecurity #Exploit Disclosed #Grandstream #GXP1600 #PoC #Rapid7 #Remote Code Execution #VoIP Security
Daily CyberSecurity
PoC Publicly Disclosed: Critical Grandstream VoIP Flaw (CVSS 9.3) Grants Stealthy Root Access
Rapid7 publicly discloses a critical zero-day and PoC (CVE-2026-2329) for Grandstream GXP1600 VoIP phones allowing remote root access. Patch now.
10 views
Daily Writeups
⤷ Title: Trojan Routers: Texas Sues TP-Link Over Alleged CCP Surveillance and Supply Chain Deception
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:17:38 +0000
════════════════════════
⌗ Tags: #Malware #CCP Surveillance #Cyber Security #infosec #Ken Paxton #national security #Router Vulnerability #supply chain risk #Texas Attorney General #TP_Link Lawsuit #Wi_Fi security
Daily CyberSecurity
Trojan Routers: Texas Sues TP-Link Over Alleged CCP Surveillance and Supply Chain Deception
Texas AG Ken Paxton sues TP-Link, alleging the Wi-Fi giant's routers act as Trojan horses for CCP surveillance. State bans TP-Link gear for employees.
13 views
Daily Writeups
⤷ Title: The Database Was Sold Online… but the Vulnerability Was Still Open
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:23:59 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #bug_bounty #bug_bounty_tips #hacking #cybersecurity
Medium
The Database Was Sold Online… but the Vulnerability Was Still Open 💾🚨
Hey there!😁
16 views
Daily Writeups
⤷ Title: How I Bypassed Email Verification Using an Exposed API Endpoint
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:23:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #hackthebox #web_security #bug_bounty
Medium
How I Bypassed Email Verification Using an Exposed API Endpoint
HTB OWASP TOP 10 2025 | NovaEnergy
23 views
Daily Writeups
⤷ Title: How I found Critical Bug From Regular Pagination
════════════════════════
𐀪 Author: Albertstive
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:45:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #software_development #bug_bounty #web_development
Medium
How I found Critical Bug From Regular Pagination
Who would have thought that it all started from just a small thing!…
17 views
Daily Writeups
⤷ Title: How I Bypassed Email Verification Using an Exposed API Endpoint
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:23:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #hackthebox #web_security #bug_bounty
Medium
How I Bypassed Email Verification Using an Exposed API Endpoint
HTB OWASP TOP 10 2025 | NovaEnergy
16 views
Daily Writeups
⤷ Title: API Security : A Deep Dive into HTTP Fundamentals, Headers & Status Codes
════════════════════════
𐀪 Author: Reduan Islam Badhon
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:30:53 GMT
════════════════════════
⌗ Tags: #hackingapiswithdami #bug_bounty_tips #api_security #bug_bounty #api
Medium
API Security : A Deep Dive into HTTP Fundamentals, Headers & Status Codes
APIs are the backbone of modern applications. Whether you’re building microservices, mobile backends, or integrating third-party platforms…
13 views
Daily Writeups
⤷ Title: Metasploitable 3 (Windows) Write-up — Part XI: Port 8484 — Jetty Server Web Application…
════════════════════════
𐀪 Author: Kalash Kundaliya
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:20:16 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #privilege_escalation #hacking #jetty_server #metasploitable
Medium
Metasploitable 3 (Windows) Write-up — Part XI: Port 8484 — Jetty Server Web Application…
This guide is strictly for educational purposes only. All demonstrations are performed in a controlled environment using Metasploitable 3…
15 views
Daily Writeups
⤷ Title: Beginner Home-Lab Setup (Part-01)
════════════════════════
𐀪 Author: Naihalmerchant
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:50:40 GMT
════════════════════════
⌗ Tags: #hands_on_tutorials #homelab #social_media #hacking #cybersecurity
Medium
Beginner Home-Lab Setup (Part-01)
Hello people. Today we’ll be building a home lab. We don’t need a server to build this. Just need a laptop, some free software and…
15 views
Daily Writeups
⤷ Title: Cybersecurity Certifications vs Real Skills: What Matters More?
════════════════════════
𐀪 Author: 0xSmit
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:45:27 GMT
════════════════════════
⌗ Tags: #cybersecurity_careers #cyber_security_awareness #cybersecurity #infosec #web_development
Medium
Cybersecurity Certifications vs Real Skills: What Matters More?
In 2026, cybersecurity is one of the fastest- growing career fields. With rising cybercrime, AI-driven attacks, and stricter comliance…
16 views
Daily Writeups
⤷ Title: Everything You Need to Know About the DPDPA Act
════════════════════════
𐀪 Author: Aditya Sawant
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:08:15 GMT
════════════════════════
⌗ Tags: #infosec #risk_assessment #information_security #cybersecurity
Medium
Everything You Need to Know About the DPDPA Act
Everything You Need to Know About the DPDPA Act The landscape for data handling in India has shifted. Compliance is no longer a “check-the-box” exercise of posting a privacy policy on your …
13 views
Daily Writeups
⤷ Title: Magician — Full Exploitation Walkthrough
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:32:47 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #tryhackme #offensive_security #ctf
Medium
Magician — Full Exploitation Walkthrough
Magician is one of those boxes that looks simple at first glance but quickly turns into a layered exercise in chaining weaknesses together…
26 views
Daily Writeups
⤷ Title: Backtrack — From Foothold to Root: A Step-by-Step Exploitation Walkthrough
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:18:27 GMT
════════════════════════
⌗ Tags: #tryhackme #offensive_security #ctf #cybersecurity #pentesting
Medium
Backtrack — From Foothold to Root: A Step-by-Step Exploitation Walkthrough
Exploring multi-layered vulnerabilities, privilege-escalation paths, and defensive takeaways through a realistic, chained-attack scenario.
20 views
Daily Writeups
⤷ Title: TryHackMe — Security Principles (Walkthrough)
════════════════════════
𐀪 Author: Hudson Lois Marcus
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 03:03:31 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #security_principles #cybersecurity
Medium
TryHackMe — Security Principles (Walkthrough)
In this room, we will learn about the fundamental of security principles and understand the difference between Confidentiality, Integrity…
25 views