Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Linktree’s Entire Mobile Infrastructure Exposed — Hardcoded Secrets in strings.xml
════════════════════════
𐀪 Author: Aditya Sunny
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 05:27:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #bug_bounty #ethical_hacking
Medium
💣 Linktree’s Entire Mobile Infrastructure Exposed — Hardcoded Secrets in strings.xml
Author: Aditya Sunny | Follow on LinkedIn: @adityasunny06
12 views
Daily Writeups
⤷ Title: Hooking iOS Apps with Frida
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 06:46:08 GMT
════════════════════════
⌗ Tags: #mobile_security #application_security #ios #reverse_engineering #ethical_hacking
Medium
Hooking iOS Apps with Frida
Mobile applications handle a large amount of sensitive information including authentication tokens, personal data, and financial…
10 views
Daily Writeups
⤷ Title: SQL Injection Vulnerability: Login Bypass via Username Manipulation (Portswigger)
════════════════════════
𐀪 Author: Shayaan Khan
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 06:38:26 GMT
════════════════════════
⌗ Tags: #coding #hacking #programming #ethical_hacking #cybersecurity
Medium
SQL Injection Vulnerability: Login Bypass via Username Manipulation (Portswigger)
SQL Injection Vulnerability: Login Bypass via Username Manipulation (Portswigger) Introduction SQL Injection remains one of the most critical and widely exploited vulnerabilities in web applications …
7 views
Daily Writeups
⤷ Title: Browser Security — Clear Cookies & Block Trackers
════════════════════════
𐀪 Author: ASRBD | Cybersecurity Bangladesh
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 05:41:42 GMT
════════════════════════
⌗ Tags: #hacking #asrbd #cyber_security_awareness #browser_security
Medium
Browser Security — Clear Cookies & Block Trackers
Your browser knows more about you than your closest friend… and hackers love that.
7 views
Daily Writeups
⤷ Title: My first real-world pentest, and the moment it all clicked.
════════════════════════
𐀪 Author: ShadowForge
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 05:37:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #vulnerability #pentesting
Medium
My first real-world pentest, and the moment it all clicked.
This isn’t a technical deep dive or a tutorial — it’s the story of how I went from passing exams to testing a live website for an actual…
9 views
Daily Writeups
⤷ Title: From Backlogs to Breakthrough: My Journey into Cybersecurity & Interview Preparation — Part 1
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 06:21:40 GMT
════════════════════════
⌗ Tags: #infosec #information_security #cybersecurity #web_development #ethical_hacking
Medium
🔐 From Backlogs to Breakthrough: My Journey into Cybersecurity & Interview Preparation — Part 1
Starting a career in cybersecurity isn’t always a straight path.
14 views
Daily Writeups
⤷ Title: TryHackMe CSRF Introduction Write up
════════════════════════
𐀪 Author: ayed djalil
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 06:28:22 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #csrf
Medium
TryHackMe CSRF Introduction Write up
🥖 Room link: https://tryhackme.com/room/csrfintroduction
19 views
Daily Writeups
⤷ Title: Tryhackme Walkthrough: Boogeyman 3
════════════════════════
𐀪 Author: san
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 06:22:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #tryhackme_writeup #tryhackme_walkthrough #boogeyman3
Medium
Tryhackme Walkthrough: Boogeyman 3
summary
25 views
Daily Writeups
⤷ Title: How to Turn One Forgotten Subdomain Into Full Access
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 05:58:10 GMT
════════════════════════
⌗ Tags: #ethical_hacking #technology #coding #programming #cybersecurity
36 views
Daily Writeups
⤷ Title: Grok’s Struggles
════════════════════════
𐀪 Author: Mitsuaki Matsuoka (松岡光昭)
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 06:29:50 GMT
════════════════════════
⌗ Tags: #xs #grok #ai #xai #grok_ai
Medium
Grok’s Struggles
Hello, I am Grok.
43 views
Daily Writeups
⤷ Title: China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 12:05:00 +0530
════════════════════════
⌗ Tags: No_Tags
36 views
Daily Writeups
⤷ Title: MFASweep: checking if MFA is enabled on multiple Microsoft Services
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:25:36 +0000
════════════════════════
⌗ Tags: #Open Source Tool #MFASweep #Microsoft services
Penetration Testing Tools
MFASweep: checking if MFA is enabled on multiple Microsoft Services
MFASweep is a PowerShell script that attempts to log in to various Microsoft services using a provided set of credentials
19 views
Daily Writeups
⤷ Title: Zero-Day Chaos: The “BlueHammer” Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:54:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #BlueHammer #Chaotic Eclipse #GitHub Leak #InfoSec 2026 #LPE #Microsoft Security #Nightmare_Eclipse #privilege escalation #SAM Database #TOCTOU #Windows Zero_Day
Penetration Testing Tools
Zero-Day Chaos: The "BlueHammer" Leak and Microsoft’s High-Stakes Privilege Escalation Crisis
The unauthorized disclosure of functional code for a nascent Windows vulnerability has presented Microsoft with a formidable new
8 views
Daily Writeups
⤷ Title: The Gemini Trap: How a Fake AI Token Checker Stealthily Hijacks Developer Workstations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:52:30 +0000
════════════════════════
⌗ Tags: #Malware #Anthropic #Contagious Interview #Cursor AI #Cybersecurity 2026 #Developer Security #gemini_ai_checker #North Korea #NPM Malware #OtterCookie #supply chain attack #Windsurf
Penetration Testing Tools
The Gemini Trap: How a Fake AI Token Checker Stealthily Hijacks Developer Workstations
An ostensibly innocuous package for validating Google Gemini tokens manifested within the npm repository, yet beneath its rudimentary
10 views
Daily Writeups
⤷ Title: The “EvilTokens” Surge: Why Device Code Phishing Exploded 37-Fold in 2026
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:46:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #Cybersecurity 2026 #Device Code Phishing #EvilTokens #Infosec #Microsoft 365 #OAuth 2.0 #Phishing_as_a_Service #Push Security #Token Theft
Penetration Testing Tools
The "EvilTokens" Surge: Why Device Code Phishing Exploded 37-Fold in 2026
The architecture of account exploitation is undergoing a profound metamorphosis, as adversaries increasingly eschew traditional subversion in favor
9 views
Daily Writeups
⤷ Title: Cultural Crisis: How the Vivaticket Ransomware Attack Paralyzed the Louvre and 3,500 European Landmarks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:43:03 +0000
════════════════════════
⌗ Tags: #Malware #ANSSI #Cybersecurity 2026 #data breach #Eiffel Tower #France #Irec SAS #Louvre #Museum Security #RansomHouse #ransomware #third_party risk #Vivaticket
Penetration Testing Tools
Cultural Crisis: How the Vivaticket Ransomware Attack Paralyzed the Louvre and 3,500 European Landmarks
The March incursion targeting the Vivaticket ticketing platform did not merely strike a solitary enterprise, but rather convulsed
8 views
Daily Writeups
⤷ Title: The Claude Code Leak: How a 500,000-Line npm Blunder Became a Golden Ticket for Hackers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:41:30 +0000
════════════════════════
⌗ Tags: #Malware #Anthropic #Claude Code #Cybersecurity 2026 #GhostSocks #malware #npm Leak #Source Code Disclosure #supply chain attack #Vidar Stealer #Zscaler ThreatLabz
Penetration Testing Tools
The Claude Code Leak: How a 500,000-Line npm Blunder Became a Golden Ticket for Hackers
The recent inadvertent exposure of the internal source code for one of the most prominent artificial intelligence instruments
9 views
Daily Writeups
⤷ Title: Zero-Day Alert: Critical FortiClient EMS Flaw Under Active Exploitation—Patch Now!
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:36:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV #CVE_2026_35616 #Cybersecurity 2026 #endpoint security #FortiClient EMS #FortiGuard #Fortinet #Infosec #PSIRT #remote code execution #zero_day
Penetration Testing Tools
Zero-Day Alert: Critical FortiClient EMS Flaw Under Active Exploitation—Patch Now!
Fortinet has issued a stark admonition regarding a critical vulnerability discovered within its FortiClient EMS (Endpoint Management Server)
10 views
Daily Writeups
⤷ Title: BlueHammer: Researcher Drops Functional 0-Day Exploit Targeting Windows Defender
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:46:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #0_day #BlueHammer #BlueHammer Exploit #cybersecurity #infosec #LPE #Microsoft #NTFS Junctions #privilege escalation #RPC Hijacking #TOCTOU #Windows Defender
Daily CyberSecurity
BlueHammer: Researcher Drops Functional 0-Day Exploit Targeting Windows Defender
BlueHammer is a functional 0-day exploit targeting Windows Defender’s update engine to achieve SYSTEM privileges. Here is how the unpatched LPE works.
8 views
Daily Writeups
⤷ Title: UAT-10608 Uses a Next.js “React2Shell” Flaw to Map Your Entire Cloud
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:30:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #Cloud Security #Credential Harvesting #CVE_2025_55182 #infosec #Next.js #NEXUS Listener #React2Shell #supply chain attack #UAT_10608 #Web Security
Daily CyberSecurity
UAT-10608 Uses a Next.js "React2Shell" Flaw to Map Your Entire Cloud
Cisco Talos uncovers UAT-10608, an automated campaign using "NEXUS Listener" to harvest Next.js credentials via React2Shell. Patch your cloud tokens now!
9 views
Daily Writeups
⤷ Title: The Hidden Hand: Why Adobe is Surreptitiously Modifying Your System Hosts File
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:28:04 +0000
════════════════════════
⌗ Tags: #Technology #Adobe #Adobe CCD #Chrome Security #Creative Cloud #Cybersecurity 2026 #Hosts File #macOS #privacy #Software Telemetry #Stealth Tracking #windows
Daily CyberSecurity
The Hidden Hand: Why Adobe is Surreptitiously Modifying Your System Hosts File
Adobe is bypassing Chrome security by quietly editing your hosts file to track Creative Cloud installations. Learn how this stealth telemetry works in 2026.
9 views