Daily Writeups
@Daily_Writeups
4.05K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.05K subscribers
Daily Writeups
⤷ Title: Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:49:11 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #Cyber Security 2026 #ghostsurf #IIS Security #Kernel_Mode Auth #NTLM Auth #NTLM Relay #Penetration Testing #red teaming #Session Hijacking #SOCKS5 Proxy
Penetration Testing Tools
Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
Master NTLM relay with ghostsurf. Use a SOCKS5 proxy to hijack browser sessions, bypass kernel-mode auth, and impersonate users on IIS and HTTPS targets.
19 views
Daily Writeups
⤷ Title: LinkedIn Job Seekers Targeted by Sophisticated “PXA Stealer” Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 01:00:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto theft #cybersecurity #DLL Sideloading #infosec #Job Phishing #LinkedIn Scam #malware #MFA Bypass #PXA Stealer #Session Hijacking #Vietnam Threat Actor
Daily CyberSecurity
LinkedIn Job Seekers Targeted by Sophisticated "PXA Stealer" Campaign
LinkedIn job seekers are being targeted by a sophisticated Vietnam-based group using PXA Stealer. This 100MB malware bypasses MFA and drains crypto wallets.
14 views
Daily Writeups
⤷ Title: The End of Cookie Theft: How Google’s New Hardware-Locked Sessions Kill Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:29:39 +0000
════════════════════════
⌗ Tags: #Google #browser security #Cookie Theft #cybersecurity #data privacy #DBSC #Google Chrome #Infosec #secure enclave #Session Hijacking #TPM
Penetration Testing Tools
The End of Cookie Theft: How Google’s New Hardware-Locked Sessions Kill Hijacking
Session hijacking has long persisted as one of the most insidious adversarial techniques; the necessity of a password
12 views
Daily Writeups
⤷ Title: The Billion-Dollar Invite: How UNC1069’s Fake Meetings Hijack Crypto Fortunes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 02:14:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlueNoroff #Cryptocurrency Security #cyber_espionage #macOS Malware #North Korea APT #phishing #Session Hijacking #social engineering #UNC1069 #Web3
Daily CyberSecurity
The Billion-Dollar Invite: How UNC1069’s Fake Meetings Hijack Crypto Fortunes
North Korean group UNC1069 (BlueNoroff) targets Web3 with fake Zoom/Teams links. 164 domains blocked. Secure your crypto assets and browser extensions now!
14 views
Daily Writeups
⤷ Title: Hardware-Locked: How Chrome’s New DBSC Makes Stolen Cookies Worthless
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 07:18:14 +0000
════════════════════════
⌗ Tags: #Technology #Chrome 146 #cybersecurity #DBSC #Device Bound Credentials #google chrome #infosec #InfoStealer malware #Secure Enclave #Session Hijacking #TPM #Web Security
Daily CyberSecurity
Hardware-Locked: How Chrome’s New DBSC Makes Stolen Cookies Worthless
Google launches DBSC in Chrome 146, binding session cookies to hardware like TPM. Neutralize infostealers and stop session hijacking with this new standard.
12 views
Daily Writeups
⤷ Title: 108 Coordinated Chrome Extensions Hijack Your Private Telegram Sessions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 01:00:22 +0000
════════════════════════
⌗ Tags: #Malware #browser security #C2 Infrastructure #Chrome extensions #cybersecurity #Google OAuth #infosec #malware #Session Hijacking #Socket Research #Telegram
Daily CyberSecurity
108 Coordinated Chrome Extensions Hijack Your Private Telegram Sessions
Socket identifies 108 malicious Chrome extensions stealing Telegram sessions and Google IDs. 20,000 installs hit—audit your browser extensions immediately!
25 views
Daily Writeups
⤷ Title: FBI and Indonesian Authorities Dismantle Prolific “W3LL” Phishing Empire
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 04:25:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime Takedown #FBI Atlanta #Indonesian National Police #MaaS #Malware_as_a_Service #MFA Bypass #Phishing_as_a_Service #Session Hijacking #W3LL Phishing Kit #W3LLSTORE
Daily CyberSecurity
FBI and Indonesian Authorities Dismantle Prolific "W3LL" Phishing Empire
The FBI and Indonesia dismantle W3LL, a $20M phishing kit that bypassed MFA and hijacked live sessions. Learn about the takedown of this MaaS powerhouse.
19 views
Daily Writeups
⤷ Title: JanelaRAT Uses Fake Windows Updates to Empty LATAM Bank Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 08:35:42 +0000
════════════════════════
⌗ Tags: #Malware #Banking Trojan #Brazil #DLL Sideloading #infosec #JanelaRAT #kaspersky #LATAM Cybercrime #Malware Analysis #Mexico #MFA Bypass #Session Hijacking
Daily CyberSecurity
JanelaRAT Uses Fake Windows Updates to Empty LATAM Bank Accounts
JanelaRAT targets banking users in Brazil and Mexico using window monitoring and fake updates. Learn how this 2026 threat bypasses MFA to hijack sessions.
18 views
Daily Writeups
⤷ Title: GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 12:30:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_4922 #CVE_2026_5816 #DevSecOps #gitlab #GraphQL API #infosec #Patch Alert #security update #Session Hijacking #Web IDE
Daily CyberSecurity
GitLab Security Update: High-Severity Vulnerabilities Patched in April Release
GitLab fixes high-severity GraphQL CSRF and Web IDE vulnerabilities in versions 18.11.1, 18.10.4, and 18.9.6. Protect your sessions and projects—patch now!
22 views
Daily Writeups
⤷ Title: ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 01:11:34 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript #ClickFix #Crypto theft #cybersecurity #Infostealer #macOS #macOS Tahoe #malware #Netskope #phishing #Session Hijacking #social engineering
Daily CyberSecurity
ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords
Netskope uncovers a ClickFix macOS campaign that holds the UI hostage to steal system passwords, Keychains, and 200+ browser extensions.
11 views