Daily Writeups
@Daily_Writeups
3.58K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.58K subscribers
Daily Writeups
⤷ Title: Apple Ups Bounty to $5 Million for Zero-Click Spyware Exploits
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Oct 2025 02:59:24 +0000
════════════════════════
⌗ Tags: #Apple #$5 Million #iOS Security #Lockdown Mode #RCE #Security Bounty #Spyware #Zero_Click
Penetration Testing Tools
Apple Ups Bounty to $5 Million for Zero-Click Spyware Exploits
Apple doubled its top reward to $2M (up to $5M with bonuses) for zero-click exploits that mimic mercenary spyware and bypass Lockdown Mode protections. The new rules take effect in November.
20 views
Daily Writeups
⤷ Title: Silent Threat: How Malicious Calendars & ‘Promptware’ Target 4M+ Devices Daily
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 01:52:12 +0000
════════════════════════
⌗ Tags: #Malware #AI security #Bitsight TRACE #Calendar Phishing #iOS security #mobile security #Prompt injection #Promptware #social engineering
Daily CyberSecurity
Silent Threat: How Malicious Calendars & 'Promptware' Target 4M+ Devices Daily
Bitsight TRACE exposes a massive calendar phishing network targeting 4M+ devices. Learn how "Promptware" exploits AI assistants via malicious calendar events.
16 views
Daily Writeups
⤷ Title: 4 Million iOS Users at Risk: Abandoned Domains Weaponized for iCalendar Phishing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 04:33:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Attack Vector #Balada Injector #Bitsight #Calendar Phishing #Domain Abuse #iCalendar #iOS Security #macos #Social Engineering
Penetration Testing Tools
4 Million iOS Users at Risk: Abandoned Domains Weaponized for iCalendar Phishing
Digital calendars have long been a convenient way to stay organized amid daily routines, yet new research from
5 views
Daily Writeups
⤷ Title: “Sophisticated” Zero-Day Demystified: Public Exploit Drop Blows Cover on Critical Apple WebKit Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 00:22:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apple #Google TAG #iOS security #iphone #macOS #WebKit #zero_day
Daily CyberSecurity
“Sophisticated” Zero-Day Demystified: Public Exploit Drop Blows Cover on Critical Apple WebKit Flaw
The “black box” of a highly sophisticated Apple zero-day has just been cracked open. Security researcher jir4vv1t has publicly dissected CVE-2025-43529, a critical WebKit vulnerability…
22 views
Daily Writeups
⤷ Title: The Proxy Trap: Single Click on Telegram Can Unmask Your Real IP Address
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 03:51:36 +0000
════════════════════════
⌗ Tags: #Vulnerability #Android Security #Cybernews #De_anonymization #InfoSec 2026 #iOS Security #IP Leak #Messaging App Security #privacy #Proxy Vulnerability #Telegram
Penetration Testing Tools
The Proxy Trap: Single Click on Telegram Can Unmask Your Real IP Address
A cursory engagement with a hyperlink in Telegram can result in the inadvertent exfiltration of one’s authentic IP
14 views
Daily Writeups
⤷ Title: Jailbreak Detection Bypass Using LLDB: No Escape—iOS Jailbreak Detection Challenge
════════════════════════
𐀪 Author: Kyrillos nady
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 17:32:42 GMT
════════════════════════
⌗ Tags: #mobile_security #bug_bounty #ios #mobile_pentesting #ios_security
Medium
Jailbreak Detection Bypass Using LLDB: No Escape—iOS Jailbreak Detection Challenge
First, I’d like to point out that this lab can be solved using easier approaches such as Frida scripts or patching the Mach‑O binary and…
39 views
Daily Writeups
⤷ Title: The Anonymity Trap: New Telegram Flaw Leaks Real IPs via Proxy Links
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 03:19:13 +0000
════════════════════════
⌗ Tags: #Data Leak #Android security #Anonymity #cybersecurity #iOS security #IP Leak #MTProto #Privacy Leak #Proxy Link #Telegram #Vulnerability 2026
Daily CyberSecurity
The Anonymity Trap: New Telegram Flaw Leaks Real IPs via Proxy Links
The Telegram development team has responded to security researchers’ reports concerning a vulnerability that facilitates the exfiltration of authentic IP addresses via maliciously crafted hy…
21 views
Daily Writeups
⤷ Title: Extracting IPA from a Non-Jailbroken iOS Device with Apple Configurator
════════════════════════
𐀪 Author: Serhat ÇİÇEK
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 15:39:15 GMT
════════════════════════
⌗ Tags: #ios_security #hacking #mobile_pentesting #reverse_engineering #cybersecurity
Medium
Extracting IPA from a Non-Jailbroken iOS Device with Apple Configurator
Hello everyone. During mobile application assessments, we often need the IPA file for static analysis. However, on iOS 18+ devices, many…
9 views
Daily Writeups
⤷ Title: iOS 9.3.5 Security Research & Penetration Testing
════════════════════════
𐀪 Author: aadhil m
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 09:01:54 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ios_security #legacy_apple_devices #penetration_testing #jailbreaking
Medium
iOS 9.3.5 Security Research & Penetration Testing
Platform: Legacy iOS
Focus: Security Research & Jailbreak Issues
⚠️ Authorized Testing Only
Lab Use: Security Research · PenTesting ·…
28 views
Daily Writeups
⤷ Title: The Excise Erasure: Why Belgian Customs is Now Using GrayKey to Crack Into Private Smartphones
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 03:52:22 +0000
════════════════════════
⌗ Tags: #Information Security #Android encryption #Belgium #data privacy #Federal Public Service Finance #GrayKey #iOS Security #Jan Jambon #Magnet Forensics #Mobile Forensics #Surveillance #Tax Fraud #Tech News 2026
Penetration Testing Tools
The Excise Erasure: Why Belgian Customs is Now Using GrayKey to Crack Into Private Smartphones
The smartphone has long since metamorphosed into an intimate personal archive, a financial repository, a ledger, and a
12 views
Daily Writeups
⤷ Title: From IPA to Exploit: The Complete Offensive Methodology for iOS Application Testing — Part 2
════════════════════════
𐀪 Author: Shubham Gupta
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 22:31:01 GMT
════════════════════════
⌗ Tags: #ios_security #cybersecurity #penetration_testing #hacking #security
Medium
From IPA to Exploit: The Complete Offensive Methodology for iOS Application Testing — Part 2
Runtime Exploitation, Instrumentation & Offensive Execution
24 views
Daily Writeups
⤷ Title: The Unbreakable Vault: Why Apple’s Lockdown Mode Has Never Been Cracked by State-Sponsored Spyware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:07:39 +0000
════════════════════════
⌗ Tags: #Apple #Vulnerability #Cybersecurity 2026 #Infosec #iOS Security #iphone #Lockdown Mode #Mobile Privacy #NSO Group #Pegasus #Pegasus malware #Spyware #Tech News
Penetration Testing Tools
The Unbreakable Vault: Why Apple’s Lockdown Mode Has Never Been Cracked by State-Sponsored Spyware
Throughout the nearly four-year tenure of Lockdown Mode, not a single iPhone fortified by this defensive posture has
11 views
Daily Writeups
⤷ Title: Jailbreak-Type Characteristics in iOS: Behavior, Risks, and Security Insights
════════════════════════
𐀪 Author: Tandelpruthvi
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 06:47:52 GMT
════════════════════════
⌗ Tags: #penetration_testing #ios_security #vapt #cybersecurity #jailbreaking
Medium
Jailbreak-Type Characteristics in iOS: Behavior, Risks, and Security Insights
Introduction
16 views
Daily Writeups
⤷ Title: The Encryption Ghost: How the FBI Recovers “Deleted” Signal Messages from iPhone Caches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:44:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #App Privacy #cybersecurity #Data Privacy #Digital Security #encryption #fbi #forensics #iOS security #iphone #Signal
Daily CyberSecurity
The Encryption Ghost: How the FBI Recovers "Deleted" Signal Messages from iPhone Caches
Signal's encryption is solid, but iOS is leaking your data. Learn how the FBI uses notification caches to recover deleted messages and how to stop it.
18 views
Daily Writeups
⤷ Title: The Kernel Ghost: How Predator Spyware Hijacks iPhone NEON Registers to Vanish into iOS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:16:34 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #iOS Security #iPhone XS #Jamf Threat Labs #JavaScriptCore #Kernel Exploit #Mobile Malware #NEON Registers #Pointer Authentication (PAC) #Predator Spyware
Penetration Testing Tools
The Kernel Ghost: How Predator Spyware Hijacks iPhone NEON Registers to Vanish into iOS
The commercial spyware Predator has proven far more ingenious than previously surmised. Rather than merely infiltrating the iPhone’s
17 views
Daily Writeups
⤷ Title: “FakeWallet” Trojan Masquerades as Crypto Wallets to Drain Assets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 08:09:18 +0000
════════════════════════
⌗ Tags: #Malware #Apple App Store #coinbase #Cold Wallet #crypto phishing #Enterprise Provisioning Profiles #FakeWallet #hot wallet #iOS security #kaspersky #Ledger #MetaMask #Seed Phrase Theft
Daily CyberSecurity
"FakeWallet" Trojan Masquerades as Crypto Wallets to Drain Assets
Kaspersky unmasks "FakeWallet," a Trojan on the Apple App Store using stubs & enterprise profiles to steal crypto seed phrases. Learn how to protect your keys.
16 views
Daily Writeups
⤷ Title: The “Vibe” vs. The Vault: Why Apple is Blocking the Next Wave of Generative AI Startups
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 07:16:56 +0000
════════════════════════
⌗ Tags: #Technology #AI Regulation #Antitrust #App Store #Apple #Apple Intelligence #Digital Markets Act #Generative AI #iOS security #Prompt injection #Startup News #Vibe Coding
Daily CyberSecurity
The "Vibe" vs. The Vault: Why Apple is Blocking the Next Wave of Generative AI Startups
Apple’s security protocols are colliding with "Vibe Coding" startups. Is the tech giant protecting users from AI exploits, or stifling a new era of innovation?
11 views
Daily Writeups
⤷ Title: WhatsApp Patches “NUL Byte” Flaw and AI Media Exploits Across Windows, iOS, and Android
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 08:02:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Android Security #bug bounty #CVE_2026_23863 #CVE_2026_23866 #Cybersecurity 2026 #File Spoofing #Instagram Reels #iOS Security #Meta #NUL Byte #WhatsApp #Windows Security
Penetration Testing Tools
WhatsApp Patches "NUL Byte" Flaw and AI Media Exploits Across Windows, iOS, and Android
WhatsApp remediates two key flaws: a file-type spoofing bug on Windows and a media URL validation error on mobile. Update now to block malicious attachments.
16 views
Daily Writeups
⤷ Title: iOS SSL Pinning Bypass: Every Technique Ranked in 2025
════════════════════════
𐀪 Author: Akifkhan
════════════════════════
ⴵ Time: Sun, 31 May 2026 06:36:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #ios_security #ctf
Medium
iOS SSL Pinning Bypass: Every Technique Ranked in 2025
Tags: ios-security ssl-pinning mobile-pentesting frida objection burp-suite ethical-hacking cybersecurity bug-bounty infosec
28 views
Daily Writeups
⤷ Title: TraceForge: A Browser-First Mobile Pentesting Lab for Static, Dynamic, and AI-Assisted Security…
════════════════════════
𐀪 Author: Ankits_pandey07
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 10:13:06 GMT
════════════════════════
⌗ Tags: #android_pentesting #ios_security #mobile_security #frida #bug_bounty
Medium
TraceForge: A Browser-First Mobile Pentesting Lab for Static, Dynamic, and AI-Assisted Security Testing
The Chaos Automation Solves
10 views