Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Web3 Security Careers: Smart Contract Auditors vs Security Researchers
════════════════════════
𐀪 Author: Abraham
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 21:21:14 GMT
════════════════════════
⌗ Tags: #blockchain #security_researchers #bug_bounty #smart_contract_auditors #cybersecurity
Medium
Web3 Security Careers: Smart Contract Auditors vs Security Researchers
Web3 security is one of the most important areas in blockchain today. Billions of dollars are locked in smart contracts, and any…
27 views
Daily Writeups
⤷ Title: Stop Watching Hacking Videos in 2026 and GET REAL
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 22:46:04 GMT
════════════════════════
⌗ Tags: #hacking #technology #cybersecurity #ethical_hacking #penetration_testing
Medium
Stop Watching Hacking Videos in 2026 and GET REAL
Most people who say they want to become hackers are lying.
20 views
Daily Writeups
⤷ Title: HTB Return: LDAP Credential Theft to Service Hijacking
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 22:53:13 GMT
════════════════════════
⌗ Tags: #active_directory #hackthebox #cybersecurity #penetration_testing #offensive_security
Medium
HTB Return: LDAP Credential Theft to Service Hijacking
Add the target IP address to /etc/hosts and bind it to onurcan.htb or whatever you want xD
15 views
Daily Writeups
⤷ Title: Try Hack Me- The Server From Hell CTF Walkthrough
════════════════════════
𐀪 Author: PulseEinher
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 21:24:34 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #tryhackme_writeup #cybersecurity #penetration_testing
Medium
Try Hack Me- The Server From Hell CTF Walkthrough
Hello, stranger — let’s begin.
25 views
Daily Writeups
⤷ Title: I Almost Got Hacked Without Entering My Password — Here’s How Consent Phishing Works
════════════════════════
𐀪 Author: Mohab Hassan
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 22:54:58 GMT
════════════════════════
⌗ Tags: #oauth2 #information_security #phishing #cybersecurity #ethical_hacking
Medium
I Almost Got Hacked Without Entering My Password — Here’s How Consent Phishing Works
A few days ago, I was reading about a cyberattack that genuinely surprised me. The attacker got full access to someone’s email account…
35 views
Daily Writeups
⤷ Title: CCTV — Technical Writeup
════════════════════════
𐀪 Author: Diablo
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 22:36:33 GMT
════════════════════════
⌗ Tags: #linux #zoneminder #privesc #hackthebox #sql_injection
Medium
CCTV — Technical Writeup
1. Introduction
38 views
Daily Writeups
⤷ Title: Iran-Linked Handala Hackers Claim Major Hacks on Stryker and Verifone
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 23:05:48 +0000
════════════════════════
⌗ Tags: #Data Breaches #Cyber Attacks #Security #Cyber Attack #Cybersecurity #data breach #Handala #Iran #Israel #Stryker #USA #Verifone
Hackread
Iran-Linked Handala Hackers Claim Major Hacks on Stryker and Verifone
Iran-linked Handala hackers claim cyberattacks on Stryker and Verifone. Stryker confirms network disruption while Verifone says no breach evidence found.
34 views
Daily Writeups
⤷ Title: Operation False Siren: The Weaponization of Israel’s Red Alert App for Geo-Fenced Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:12:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android Malware #cybersecurity #Geo_Fencing #infosec #Mobile Espionage #Operation False Siren #Red Alert Spyware #smishing #threat intelligence #Trojan
Daily CyberSecurity
Operation False Siren: The Weaponization of Israel's Red Alert App for Geo-Fenced Espionage
Discover how Operation False Siren weaponizes Israel's Red Alert app via smishing, deploying advanced Android spyware for geo-fenced mobile espionage.
22 views
Daily Writeups
⤷ Title: Gaslighting Android: How the ‘Digital Lutera’ Attack Uses LSPosed to Bypass UPI SIM-Binding
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:06:27 +0000
════════════════════════
⌗ Tags: #Malware #Android security #CloudSEK #cybersecurity #Digital Lutera #infosec #LSPosed Framework #Malware Analysis #Mobile Banking Fraud #threat intelligence #UPI SIM_Binding Bypass
Daily CyberSecurity
Gaslighting Android: How the 'Digital Lutera' Attack Uses LSPosed to Bypass UPI SIM-Binding
CloudSEK reveals how attackers use LSPosed and the "Digital Lutera" module to bypass Android UPI SIM-binding, gaslighting payment apps for remote fraud.
❤1
22 views
Daily Writeups
⤷ Title: The Sleeper in Your Toolbar: How a “Featured” Chrome Extension Turned Into a Full-Scale Infostealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:01:41 +0000
════════════════════════
⌗ Tags: #Malware #Browser Extension Malware #Chrome Web Store #Credential Theft #cybersecurity #ownership transfer #PowerShell Malware #QuickLens #ShotBird #social engineering #StealC #Tech News 2026 #Vibecoding
Daily CyberSecurity
The Sleeper in Your Toolbar: How a "Featured" Chrome Extension Turned Into a Full-Scale Infostealer
Once a "Featured" tool, the ShotBird extension now delivers malware via "vibecoded" scripts and fake updates. Remove it now to protect your passwords and data.
17 views
Daily Writeups
⤷ Title: The Cyber Kill Chain Explained for Everyone
════════════════════════
𐀪 Author: Armansyah hakim
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:44:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_kill_chain #data_security #technology #hacking
Medium
The Cyber Kill Chain Explained for Everyone
How Hackers Plan and Execute Attacks
21 views
Daily Writeups
⤷ Title: Making a Wifi Pineapple for $8
════════════════════════
𐀪 Author: Alex Gonzales
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:13:51 GMT
════════════════════════
⌗ Tags: #wifihacking #router #wireless #cybersecurity #hacking
Medium
Making a Wifi Pineapple for $8
The Wifi Pineapple is a portable wireless hacking tool designed and developed by Hak5. It is capable of mounting a number of conventional…
20 views
Daily Writeups
⤷ Title: Why Public Wi-Fi Can Be Dangerous
════════════════════════
𐀪 Author: Armansyah hakim
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:05:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #technology #data_security #online_safety
Medium
Why Public Wi-Fi Can Be Dangerous
The Hidden Risks of Public Networks
28 views
Daily Writeups
⤷ Title: HTTP/2 request smuggling via CRLF injection
════════════════════════
𐀪 Author: Ⓥ
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:24:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #pentesting #cybersecurity #vulnerability #http_request_smuggling
Medium
HTTP/2 request smuggling via CRLF injection
HTTP/2 request smuggling can arise when a front-end server downgrades HTTP/2 traffic to HTTP/1.1 without properly sanitizing user-supplied…
32 views
Daily Writeups
⤷ Title: TryHackMe: Active Directory Basic Enumeration
════════════════════════
𐀪 Author: Ipingsleeping
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 23:27:57 GMT
════════════════════════
⌗ Tags: #active_directory #tryhackme
Medium
TryHackMe: Active Directory Basic Enumeration
I want to share my walkthrough for the Active Directory Basic Enumeration room on TryHackMe. This lab is excellent for understanding how…
38 views
Daily Writeups
⤷ Title: High-Privilege Havoc: Splunk Patches RCE Flaw Lurking in File Previews
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:55:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_20163 #cybersecurity #infosec #Patch Alert #RCE vulnerability #Remote Command Execution #REST API #Splunk #Splunk Enterprise #threat intelligence
Daily CyberSecurity
High-Privilege Havoc: Splunk Patches RCE Flaw Lurking in File Previews
Splunk warns of a high-severity RCE flaw (CVE-2026-20163) in its REST API. Attackers with edit_cmd rights can execute arbitrary commands. Patch immediately.
28 views
Daily Writeups
⤷ Title: Cyber Escalation in the Middle East: Disruption, Deception, and the Quest for Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:41:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #CVE_2026_1281 #cyber_espionage #cybersecurity #ddos #Hacktivism #infosec #MuddyWater #Rapid7 Labs #threat intelligence #zero_day vulnerabilities
Daily CyberSecurity
Cyber Escalation in the Middle East: Disruption, Deception, and the Quest for Data
Rapid7 reveals a surge in state-directed cyber espionage and noisy hacktivism. Learn how actors like MuddyWater exploit critical CVEs to breach networks.
24 views
Daily Writeups
⤷ Title: Root Access via CLI: Cisco Patches Critical IOS XR Privilege Escalation Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:13:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco IOS XR #Command Line Interface #CVE_2026_20040 #CVE_2026_20046 #cybersecurity #infosec #network_security #Patch Alert #privilege escalation #router security
Daily CyberSecurity
Root Access via CLI: Cisco Patches Critical IOS XR Privilege Escalation Flaws
Cisco patches critical privilege escalation flaws (CVE-2026-20040, CVE-2026-20046) in IOS XR software that allow local attackers to gain full root access.
16 views
Daily Writeups
⤷ Title: Iran-Aligned TA453 Weaponizes ‘Operation Epic Fury’ for Cyber Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:05:28 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT42 #Charming Kitten #Credential Phishing #cyber_espionage #Middle East Cyber Threats #Operation Epic Fury #Proofpoint #social engineering #TA453 #threat intelligence
Daily CyberSecurity
Iran-Aligned TA453 Weaponizes 'Operation Epic Fury' for Cyber Espionage
Proofpoint reveals Iran-aligned TA453 is exploiting Operation Epic Fury to launch targeted credential phishing campaigns against U.S. think tanks.
19 views
Daily Writeups
⤷ Title: The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:54:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #C2 Infrastructure #Cofense #Command and Control #cybersecurity #data exfiltration #infosec #malware #phishing #Telegram Bot API #threat intelligence
Daily CyberSecurity
The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration
A new Cofense report reveals how hackers abuse legitimate Telegram Bot APIs to create stealthy Command and Control (C2) centers for data exfiltration.
16 views
Daily Writeups
⤷ Title: Chrome 146 Arrives with 29 Security Fixes: Critical WebML Flaw Discovered
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:45:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #bug bounty #Chrome 146 #CVE_2026_3913 #cybersecurity #Google Chrome Update #Heap Buffer Overflow #infosec #Patch Alert #WebML Vulnerability
Daily CyberSecurity
Chrome 146 Arrives with 29 Security Fixes: Critical WebML Flaw Discovered
Google releases Chrome 146, fixing 29 vulnerabilities including a critical heap buffer overflow in WebML (CVE-2026-3913). Update your browser immediately.
13 views