Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Unmasking the Code: JS Analyzer Automates JavaScript Recon & Secret Discovery
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 04:44:55 +0000
════════════════════════
⌗ Tags: #Open Source Tool #API Discovery #bug bounty #Burp Suite #InfoSec 2026 #JavaScript #JS Analyzer #Pentesting #Recon #secret scanning #Static Analysis
Information Security News
Unmasking the Code: JS Analyzer Automates JavaScript Recon & Secret Discovery
JS Analyzer A powerful Burp Suite extension for JavaScript static analysis. Extracts API endpoints, URLs, secrets, and email addresses from JavaScript files with intelligent noise filtering. The g…
41 views
Daily Writeups
⤷ Title: Grid Sabotage: “Static Tundra” Hits Poland’s Energy Sector with DynoWiper
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:47:22 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Berserk Bear #CERT Polska #Critical Infrastructure #Cyber Sabotage #DynoWiper #energy sector #LazyWiper #Mikronika #Moxa NPort #OT Security #Poland #Static Tundra
Daily CyberSecurity
Grid Sabotage: "Static Tundra" Hits Poland's Energy Sector with DynoWiper
CERT Polska reveals destructive attacks on energy infrastructure. "Static Tundra" used DynoWiper and LazyWiper to brick OT devices. Read more.
14 views
Daily Writeups
⤷ Title: Statik Kod Analiz Metadolojisi ve Güvenlik Stratejileri
════════════════════════
𐀪 Author: suna ayaz
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 09:39:56 GMT
════════════════════════
⌗ Tags: #application_security #static_code_analysis
Medium
Statik Kod Analiz Metadolojisi ve Güvenlik Stratejileri
Yazılım geliştirme süreçlerinde ortaya çıkarılan uygulamalarının amaçlarına yönelik ve hatasız çalışabilmesi için bu uygulamanın…
14 views
Daily Writeups
⤷ Title: Beyond the Signature: Unveiling ThreatShield’s AI-Driven Malware Analysis Platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 16:21:06 +0000
════════════════════════
⌗ Tags: #Open Source Tool #behavioral analysis #cybersecurity tools #dynamic analysis #Infosec #machine learning #malware analysis #sandboxing #Static Analysis #Tech News 2026 #Threat Detection #ThreatShield
Penetration Testing Tools
Beyond the Signature: Unveiling ThreatShield’s AI-Driven Malware Analysis Platform
ThreatShield combines static, dynamic, and machine learning analysis to deliver deep, explainable insights into malicious files and suspicious behaviors.
41 views
Daily Writeups
⤷ Title: Understanding Modern Cybersecurity Practices for Scalable SaaS Protection
════════════════════════
𐀪 Author: Black Lock
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 11:25:59 GMT
════════════════════════
⌗ Tags: #sbom_scanner #penetration_testing #vulnerability_scanning #static_code_scanning
Medium
Understanding Modern Cybersecurity Practices for Scalable SaaS Protection
In the digital-first era, cybersecurity has become a foundational requirement for businesses operating in cloud and SaaS environments. As…
18 views
Daily Writeups
⤷ Title: WP-Hunter: Smarter WordPress Recon with Heuristic Scoring + Semgrep SAST
════════════════════════
𐀪 Author: Ali Sünbül (xeloxa)
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 09:23:38 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #wordpress #cybersecurity #static_code_analysis #ai
Medium
WP-Hunter: Smarter WordPress Recon with Heuristic Scoring + Semgrep SAST
Github: https://github.com/xeloxa/wp-hunter
60 views
Daily Writeups
⤷ Title: Inside the Iranian Arsenal: The Dutch Server Slip-Up that Exposed MuddyWater’s Global Spy Network
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 07 Mar 2026 02:15:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ArenaC2 #C2 Infrastructure #Ctrl_Alt_Intel #EgyptAir breach #Iran MOIS #KeyC2 #Mango Sandstorm #MuddyWater #PersianC2 #Static Kitten #Tech News 2026 #Tsundere Botnet #ZKTeco
Penetration Testing Tools
Inside the Iranian Arsenal: The Dutch Server Slip-Up that Exposed MuddyWater’s Global Spy Network
Cybersecurity sentinels at Ctrl-Alt-Intel have unearthed an exposed server inextricably tethered to the Iranian state-aligned threat syndicate, MuddyWater,
12 views
Daily Writeups
⤷ Title: Four Tools, Three Machines, One Question
════════════════════════
𐀪 Author: Andrew Kutuzov
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 16:31:00 GMT
════════════════════════
⌗ Tags: #ai #cursor #claude_code #application_security #static_code_analysis
Medium
Four Tools, Three Machines, One Question
There’s a lot of noise right now about AI replacing traditional SAST tools — and honestly, it’s hard to dismiss entirely. But it’s also…
23 views
Daily Writeups
⤷ Title: POSTURA: Graph-Based Security Analysis That Understands Context
════════════════════════
𐀪 Author: Arunabh Majumdar
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 18:44:33 GMT
════════════════════════
⌗ Tags: #application_security #llm_agent #static_analysis #neo4j #open_source
Medium
POSTURA: Graph-Based Security Analysis That Understands Context
Static scanners find vulnerabilities. They can’t tell you which ones matter.
14 views
Daily Writeups
⤷ Title: When Static Analysis Turns Dangerous: Command Injection in NASA’s Cobra Tool
════════════════════════
𐀪 Author: dark-haxor
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 19:20:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #cobra #static_code_analyzer #penetration_testing #static_code_analysis
Medium
🐍 When Static Analysis Turns Dangerous: Command Injection in NASA’s Cobra Tool
What is Cobra?
32 views
Daily Writeups
⤷ Title: Binary to Behavior: Decode Threats with the Unified “Malware-Check” Analysis Engine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:26:41 +0000
════════════════════════
⌗ Tags: #Open Source Tool #binary analyzer #cybersecurity tools #DevSecOps #Docker sandbox #dynamic analysis #malware analysis #malware_check #MobSF #reverse engineering #SARIF #Static Analysis #YARA
Penetration Testing Tools
Binary to Behavior: Decode Threats with the Unified "Malware-Check" Analysis Engine
Detect backdoors, ransomware, and privacy leaks. Malware-Check combines YARA rules, Docker sandboxing, and MobSF for deep static and dynamic analysis.
35 views
Daily Writeups
⤷ Title: How to Build a World-Class SAST Program from Scratch
════════════════════════
𐀪 Author: Vikrant Waghmode
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:44:00 GMT
════════════════════════
⌗ Tags: #semgrep #application_security #cybersecurity #static_code_analysis
Medium
How to Build a World-Class SAST Program from Scratch
A practitioner’s guide to transforming static analysis security testing — from creating the vision to selecting the right tools through…
12 views
Daily Writeups
⤷ Title: From Deep Link to Shell: Easy $3000 Android Crits.
════════════════════════
𐀪 Author: tinopreter
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 23:19:13 GMT
════════════════════════
⌗ Tags: #android #hackerone #static_code_analysis #rce #deeplink
Medium
From Deep Link to Shell: Easy $3000 Android Crits.
Akwaaba! gang, another part of my Static Android App Hacking series, today our focus is on exploiting Deep Links to achieve RCE. An easy…
31 views
Daily Writeups
⤷ Title: Cloudflare Launches Drop for Temporary and Permanent Static Site Hosting
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 03:17:10 +0000
════════════════════════
⌗ Tags: #Technology #cloudflare #Cloudflare Drop #Static Website #Web Hosting
Daily CyberSecurity
Cloudflare Launches Drop for Temporary and Permanent Static Site Hosting
Network service provider Cloudflare recently introduced an innovative feature named Drop. This capability allows users to host purely static websites effortlessly. According to its core design log…
25 views
Daily Writeups
⤷ Title: Intro to Malware…… | THM Walkthrough | by Dharavath Nagaraju
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:40:16 GMT
════════════════════════
⌗ Tags: #sandboxing #static_and_dynamic #malware_analysis #cybersecurity #tryhackme
Medium
Intro to Malware…… | THM Walkthrough | by Dharavath Nagaraju
This room introduces the fundamentals of malware analysis and the techniques used to safely investigate malicious software. It covers the…
38 views
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
21 views
Daily Writeups
⤷ Title: Cisco FMC Flaw CVE-2026-20316 Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 21:43:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Actively Exploited #Cisco FMC #Cisco Secure Firewall #CVE_2026_20316 #Known Exploited Vulnerability #Static Credentials
Daily CyberSecurity
Cisco FMC Flaw CVE-2026-20316 Exploited in the Wild
TL;DR Cisco is warning about a Cisco FMC vulnerability under active attack. Tracked as CVE-2026-20316, it lets a remote attacker log in using a hidden static account. Cisco confirms exploitation, …
23 views
Daily Writeups
⤷ Title: Day 26: Cross-Site Scripting (XSS) - Hacker Sidekick Certified Vibe Hacker CTF Walkthrough
════════════════════════
𐀪 Author: Sofia Batala
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 04:08:16 GMT
════════════════════════
⌗ Tags: #xss_attack #xss_vulnerability #hacker_sidekick #static_code_analysis #ctf
Medium
Day 26: Cross-Site Scripting (XSS) - Hacker Sidekick Certified Vibe Hacker CTF Walkthrough
## Challenge: User-provided data is rendered in HTML templates without proper encoding, allowing JavaScript injection attacks. What…
28 views
Daily Writeups
⤷ Title: Build Self-Hosted SAST with pipeline DefectDojo
════════════════════════
𐀪 Author: Rizqi Ramadhan Andriono
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 13:41:47 GMT
════════════════════════
⌗ Tags: #defectdojo #static_code_analysis #security #penetration_testing #sonarqube
Medium
Build Self-Hosted SAST with pipeline DefectDojo
Static application security testing with DefectDojo as main dashboard using open source tools; SonarQube Community version, , OSV, Semgrep…
9 views