Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Gaslighting Android: How the ‘Digital Lutera’ Attack Uses LSPosed to Bypass UPI SIM-Binding
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:06:27 +0000
════════════════════════
⌗ Tags: #Malware #Android security #CloudSEK #cybersecurity #Digital Lutera #infosec #LSPosed Framework #Malware Analysis #Mobile Banking Fraud #threat intelligence #UPI SIM_Binding Bypass
Daily CyberSecurity
Gaslighting Android: How the 'Digital Lutera' Attack Uses LSPosed to Bypass UPI SIM-Binding
CloudSEK reveals how attackers use LSPosed and the "Digital Lutera" module to bypass Android UPI SIM-binding, gaslighting payment apps for remote fraud.
❤1
22 views
Daily Writeups
⤷ Title: The Sleeper in Your Toolbar: How a “Featured” Chrome Extension Turned Into a Full-Scale Infostealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:01:41 +0000
════════════════════════
⌗ Tags: #Malware #Browser Extension Malware #Chrome Web Store #Credential Theft #cybersecurity #ownership transfer #PowerShell Malware #QuickLens #ShotBird #social engineering #StealC #Tech News 2026 #Vibecoding
Daily CyberSecurity
The Sleeper in Your Toolbar: How a "Featured" Chrome Extension Turned Into a Full-Scale Infostealer
Once a "Featured" tool, the ShotBird extension now delivers malware via "vibecoded" scripts and fake updates. Remove it now to protect your passwords and data.
17 views
Daily Writeups
⤷ Title: The Cyber Kill Chain Explained for Everyone
════════════════════════
𐀪 Author: Armansyah hakim
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:44:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_kill_chain #data_security #technology #hacking
Medium
The Cyber Kill Chain Explained for Everyone
How Hackers Plan and Execute Attacks
21 views
Daily Writeups
⤷ Title: Making a Wifi Pineapple for $8
════════════════════════
𐀪 Author: Alex Gonzales
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:13:51 GMT
════════════════════════
⌗ Tags: #wifihacking #router #wireless #cybersecurity #hacking
Medium
Making a Wifi Pineapple for $8
The Wifi Pineapple is a portable wireless hacking tool designed and developed by Hak5. It is capable of mounting a number of conventional…
20 views
Daily Writeups
⤷ Title: Why Public Wi-Fi Can Be Dangerous
════════════════════════
𐀪 Author: Armansyah hakim
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:05:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #technology #data_security #online_safety
Medium
Why Public Wi-Fi Can Be Dangerous
The Hidden Risks of Public Networks
28 views
Daily Writeups
⤷ Title: HTTP/2 request smuggling via CRLF injection
════════════════════════
𐀪 Author: Ⓥ
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:24:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #pentesting #cybersecurity #vulnerability #http_request_smuggling
Medium
HTTP/2 request smuggling via CRLF injection
HTTP/2 request smuggling can arise when a front-end server downgrades HTTP/2 traffic to HTTP/1.1 without properly sanitizing user-supplied…
32 views
Daily Writeups
⤷ Title: TryHackMe: Active Directory Basic Enumeration
════════════════════════
𐀪 Author: Ipingsleeping
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 23:27:57 GMT
════════════════════════
⌗ Tags: #active_directory #tryhackme
Medium
TryHackMe: Active Directory Basic Enumeration
I want to share my walkthrough for the Active Directory Basic Enumeration room on TryHackMe. This lab is excellent for understanding how…
38 views
Daily Writeups
⤷ Title: High-Privilege Havoc: Splunk Patches RCE Flaw Lurking in File Previews
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:55:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_20163 #cybersecurity #infosec #Patch Alert #RCE vulnerability #Remote Command Execution #REST API #Splunk #Splunk Enterprise #threat intelligence
Daily CyberSecurity
High-Privilege Havoc: Splunk Patches RCE Flaw Lurking in File Previews
Splunk warns of a high-severity RCE flaw (CVE-2026-20163) in its REST API. Attackers with edit_cmd rights can execute arbitrary commands. Patch immediately.
28 views
Daily Writeups
⤷ Title: Cyber Escalation in the Middle East: Disruption, Deception, and the Quest for Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:41:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #CVE_2026_1281 #cyber_espionage #cybersecurity #ddos #Hacktivism #infosec #MuddyWater #Rapid7 Labs #threat intelligence #zero_day vulnerabilities
Daily CyberSecurity
Cyber Escalation in the Middle East: Disruption, Deception, and the Quest for Data
Rapid7 reveals a surge in state-directed cyber espionage and noisy hacktivism. Learn how actors like MuddyWater exploit critical CVEs to breach networks.
24 views
Daily Writeups
⤷ Title: Root Access via CLI: Cisco Patches Critical IOS XR Privilege Escalation Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:13:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco IOS XR #Command Line Interface #CVE_2026_20040 #CVE_2026_20046 #cybersecurity #infosec #network_security #Patch Alert #privilege escalation #router security
Daily CyberSecurity
Root Access via CLI: Cisco Patches Critical IOS XR Privilege Escalation Flaws
Cisco patches critical privilege escalation flaws (CVE-2026-20040, CVE-2026-20046) in IOS XR software that allow local attackers to gain full root access.
16 views
Daily Writeups
⤷ Title: Iran-Aligned TA453 Weaponizes ‘Operation Epic Fury’ for Cyber Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:05:28 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT42 #Charming Kitten #Credential Phishing #cyber_espionage #Middle East Cyber Threats #Operation Epic Fury #Proofpoint #social engineering #TA453 #threat intelligence
Daily CyberSecurity
Iran-Aligned TA453 Weaponizes 'Operation Epic Fury' for Cyber Espionage
Proofpoint reveals Iran-aligned TA453 is exploiting Operation Epic Fury to launch targeted credential phishing campaigns against U.S. think tanks.
19 views
Daily Writeups
⤷ Title: The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:54:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #C2 Infrastructure #Cofense #Command and Control #cybersecurity #data exfiltration #infosec #malware #phishing #Telegram Bot API #threat intelligence
Daily CyberSecurity
The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration
A new Cofense report reveals how hackers abuse legitimate Telegram Bot APIs to create stealthy Command and Control (C2) centers for data exfiltration.
16 views
Daily Writeups
⤷ Title: Chrome 146 Arrives with 29 Security Fixes: Critical WebML Flaw Discovered
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:45:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #bug bounty #Chrome 146 #CVE_2026_3913 #cybersecurity #Google Chrome Update #Heap Buffer Overflow #infosec #Patch Alert #WebML Vulnerability
Daily CyberSecurity
Chrome 146 Arrives with 29 Security Fixes: Critical WebML Flaw Discovered
Google releases Chrome 146, fixing 29 vulnerabilities including a critical heap buffer overflow in WebML (CVE-2026-3913). Update your browser immediately.
13 views
Daily Writeups
⤷ Title: Code Red: GitLab’s Latest Security Update Patches High-Severity XSS and API DoS Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:37:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_1069 #CVE_2026_1090 #cybersecurity #Denial of Service #DevSecOps #GitLab security #infosec #Patch Alert #vulnerability management #XSS Vulnerability
Daily CyberSecurity
Code Red: GitLab's Latest Security Update Patches High-Severity XSS and API DoS Vulnerabilities
GitLab issues urgent security updates (18.9.2, 18.8.6, 18.7.6) fixing critical XSS (CVE-2026-1090) and DoS flaws. Patch self-managed instances today.
11 views
Daily Writeups
⤷ Title: Things I Always Check When Testing a Login Page
════════════════════════
𐀪 Author: loopXvedant
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:01:02 GMT
════════════════════════
⌗ Tags: #hacking #testing #penetration_testing #bug_bounty #cybersecurity
Medium
Things I Always Check When Testing a Login Page 🔐
Every login page is a potential goldmine. Here’s my exact checklist.
❤2
11 views
Daily Writeups
⤷ Title: How Hackers Actually Think: The Mindset Most Security Professionals Miss.
════════════════════════
𐀪 Author: Akwaeze Odera Gerald
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:37:59 GMT
════════════════════════
⌗ Tags: #penetration_testing #information_security #ethical_hacking #cybersecurity #bug_bounty
Medium
How Hackers Actually Think: The Mindset Most Security Professionals Miss.
Most security professionals search for vulnerabilities, attackers search for opportunities.
19 views
Daily Writeups
⤷ Title: Drone Technology and Wireless Security: The Overlooked Attack Surface
════════════════════════
𐀪 Author: Michael Preston
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:48:16 GMT
════════════════════════
⌗ Tags: #wireless #cybersecurity #hacking #radio
Medium
Drone Technology and Wireless Security: The Overlooked Attack Surface
Understanding How Radio Protocols, Telemetry Links, and Remote Control Systems Create New Opportunities for Security Testing
15 views
Daily Writeups
⤷ Title: Improper Access Control Leading to Administrative Privilege Escalation
════════════════════════
𐀪 Author: Kiteegti
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:45:30 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #cybersecurity
Medium
Improper Access Control Leading to Administrative Privilege Escalation
Pembukaan
16 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough: Linux Fundamentals Part 2
════════════════════════
𐀪 Author: Shubham Khirwadkar
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:31:23 GMT
════════════════════════
⌗ Tags: #tryhackme #infosec #linux_fundamentals #cybersecurity #linux
Medium
TryHackMe Walkthrough: Linux Fundamentals Part 2
A hands-on walkthrough of the Linux Fundamentals Part 2 room on TryHackMe.
18 views
Daily Writeups
⤷ Title: Empire Breakout VM — Walkthrough Structure | Step-by-Step Penetration Testing Guide
════════════════════════
𐀪 Author: Klsvppcspranjali
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:41:31 GMT
════════════════════════
⌗ Tags: #vulnhub #cybersecurity #penetration_testing #ethical_hacking #kali_linux
Medium
Empire Breakout VM — Walkthrough Structure | Step-by-Step Penetration Testing Guide
A detailed Cyber Security walkthrough demonstarting enumeration, exploitation, and privilege escalation to gain root access in the VM
18 views
Daily Writeups
⤷ Title: VulNyx — School Writeup
════════════════════════
𐀪 Author: _ATROX_
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 02:03:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #red_team #cybersecurity
Medium
VulNyx — School Writeup
Difficulty: Hard · OS: Windows 10 · Tags: LFI, Tomcat, WAR Upload, SeImpersonatePrivilege, PrintSpoofer
❤1
21 views