Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: HackTheBox — Pirate: Pre2k, gMSA, RBCD, WriteSPN, and the Road to Domain Admin
════════════════════════
𐀪 Author: T0NY_8
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 23:08:43 GMT
════════════════════════
⌗ Tags: #hard #hackthebox_writeup #walktrough #active_directory #pirates
Medium
HackTheBox — Pirate: Pre2k, gMSA, RBCD, WriteSPN, and the Road to Domain Admin
Difficulty: Hard | OS: Windows | Category: Active Directory Tags: pre2k · gMSA · RBCD · PetitPotam · S4U2Proxy · Ligolo-ng · ntlmrelayx ·…
29 views
Daily Writeups
⤷ Title: APT28 Hijacks Home Routers to Steal Corporate Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:20:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #APT28 #CVE_2023_50224 #cybersecurity #DNS hijacking #Fancy Bear #GRU #MikroTik #NCSC #OAuth Theft #router security #TP_Link
Daily CyberSecurity
APT28 Hijacks Home Routers to Steal Corporate Credentials
NCSC unmasks APT28’s "digital funnel" using router DNS hijacking to steal OAuth tokens and passwords. Protect your remote workforce—patch your routers now.
29 views
Daily Writeups
⤷ Title: Venom Stealer Bypasses Chrome and “Auto-Cracks” Tonkeeper Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:14:54 +0000
════════════════════════
⌗ Tags: #Malware #Chrome Bypass #ClickFix #crypto drainer #cybersecurity #infosec #MaaS #Malware Analysis #Tonkeeper #UAC Elevation #Venom Stealer #Wallet Cracking
Daily CyberSecurity
Venom Stealer Bypasses Chrome and "Auto-Cracks" Tonkeeper Wallets
Venom Stealer is a new C++ MaaS targeting crypto wallets like Tonkeeper. It features silent UAC elevation and Chrome encryption bypass. Learn how to defend.
17 views
Daily Writeups
⤷ Title: The 1,700-Package Blitz: North Korea’s “Contagious Interview” Infiltrates Every Major Dev Registry
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:12:15 +0000
════════════════════════
⌗ Tags: #Malware #Contagious Interview #cybersecurity #go #infosec #Malicious packages #malware loader #North Korea #npm #php #PyPI #Rust #Socket #supply chain attack
Daily CyberSecurity
The 1,700-Package Blitz: North Korea’s "Contagious Interview" Infiltrates Every Major Dev Registry
North Korea’s "Contagious Interview" campaign expands to 1,700+ malicious packages across npm, PyPI, and more. Learn how to protect your dev environment.
16 views
Daily Writeups
⤷ Title: Malicious VeloraDEX SDK Compromises Developer Machines via npm
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 01:58:56 +0000
════════════════════════
⌗ Tags: #Malware #@velora_dex/sdk #C2 #Credential Theft #cybersecurity #infosec #macOS Malware #Malware Analysis #Node.js #npm #StepSecurity #supply chain attack #zsh.profiler
Daily CyberSecurity
Malicious VeloraDEX SDK Compromises Developer Machines via npm
A malicious update to @velora-dex/sdk (v9.4.1) drops a stealthy macOS backdoor on import. Learn how to detect the zsh.profiler infection and rotate secrets.
21 views
Daily Writeups
⤷ Title: From Taiwan to Tehran: How TA416 Pivots its PlugX Backdoor to Global Flashpoints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 01:01:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #china #cyber_espionage #EU #infosec #Middle East #MSBuild #NATO #OAuth Abuse #PlugX #Proofpoint #Spearphishing #TA416
Daily CyberSecurity
From Taiwan to Tehran: How TA416 Pivots its PlugX Backdoor to Global Flashpoints
Proofpoint uncovers TA416's pivot to EU, NATO, and Middle East diplomacy. Learn how this state-linked actor uses updated PlugX and Cloudflare lures in 2026.
17 views
Daily Writeups
⤷ Title: My Bug Bounty Journey #7: When Hidden URLs Aren’t Secure
════════════════════════
𐀪 Author: awchjimmy
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:13:15 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_development
Medium
My Bug Bounty Journey #7: When Hidden URLs Aren’t Secure
Background
16 views
Daily Writeups
⤷ Title: From Low Bug to $1000 Bounty — The Privilege Escalation Playbook Every Hacker Should Know
════════════════════════
𐀪 Author: Krish_cyber
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 01:23:59 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #privilege_escalation #infosec_write_ups #bug_bounty #cybersecurity
Medium
🔥 From Low Bug to $1000 Bounty — The Privilege Escalation Playbook Every Hacker Should Know
💻 How a simple IDOR turned into full admin access (and what most hunters completely miss) 🚨
23 views
Daily Writeups
⤷ Title: I Found a “Hidden” API Bug That Could Have Paid $2,000+ — And Most Hackers Would Miss It
════════════════════════
𐀪 Author: Krish_cyber
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 01:23:56 GMT
════════════════════════
⌗ Tags: #api #cybersecurity #infosec_write_ups #bug_bounty_writeup #bug_bounty
Medium
🔥 I Found a “Hidden” API Bug That Could Have Paid $2,000+ — And Most Hackers Would Miss It 💰
💻 This invisible vulnerability exposed user data… and turned into a high-paying bug bounty 🚨
33 views
Daily Writeups
⤷ Title: Monthly Threat Actor Group Intelligence Report, March 2026
════════════════════════
𐀪 Author: NSHC ThreatRecon Team
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:11:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_intelligence #cyberattack #infosec #hacking
Medium
Monthly Threat Actor Group Intelligence Report, March 2026
This is a summary of the activities of hacking groups (Threat Actor Group) analyzed based on data and information collected by the NSHC…
33 views
Daily Writeups
⤷ Title: The AI Collective: Telegram Unlocks Autonomous “Bot-to-Bot” Dialogue for Multi-Agent Workflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 04:29:45 +0000
════════════════════════
⌗ Tags: #Technology #@BotFather #AI Agents #AI orchestration #Automation #Bot_to_Bot #Multi_Agent Systems #OpenClaw #Tech News 2026 #Telegram #Telegram Bots
Daily CyberSecurity
The AI Collective: Telegram Unlocks Autonomous “Bot-to-Bot” Dialogue for Multi-Agent Workflows
In its most recent iteration, the instant messaging platform Telegram has granted bots the faculty of inter-bot accessibility, thereby enabling autonomous dialogue between automated entities—a cap…
31 views
Daily Writeups
⤷ Title: The “Entertainment Only” Paradox: Why Microsoft’s Copilot Legal Terms Just Ignited a Viral Controversy
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 04:27:03 +0000
════════════════════════
⌗ Tags: #Technology #AI Ethics #AI Marketing #AI Output #Consumer Confidence #Copyright Liability #Legal Liability #Microsoft Bing #Microsoft Copilot #Microsoft faces backlash over Copilot terms labeling the AI as "entertainment only." Discover why this legacy clause contradicts its 2026 marketing narrative. #Tech News 2026 #Terms of Service
Daily CyberSecurity
The "Entertainment Only" Paradox: Why Microsoft’s Copilot Legal Terms Just Ignited a Viral Controversy
Microsoft faces backlash over Copilot terms labeling the AI as "entertainment only." Discover why this legacy clause contradicts its 2026 marketing narrative.
26 views
Daily Writeups
⤷ Title: The Cloud-Only Safety Net: Microsoft to Bypass Local Recycle Bins in Major OneDrive Overhaul
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 04:23:45 +0000
════════════════════════
⌗ Tags: #Technology #Cloud Sync #data recovery #Files On_Demand #IT Administration #macOS #Microsoft 365 #OneDrive #Recycle Bin #Tech News 2026 #Windows 11
Daily CyberSecurity
The Cloud-Only Safety Net: Microsoft to Bypass Local Recycle Bins in Major OneDrive Overhaul
Starting May 2026, OneDrive cloud deletions will no longer land in your local Recycle Bin. Learn how this mandatory update changes file recovery forever.
19 views
Daily Writeups
⤷ Title: AI Against AI: Anthropic Unveils “Project Glasswing” to Stop the Next Great Cyber War
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 04:16:20 +0000
════════════════════════
⌗ Tags: #Technology #AI Defense #Anthropic #AWS #Claude Mythos Preview #Cybersecurity 2026 #google #Microsoft #nvidia #Project Glasswing #threat intelligence
Daily CyberSecurity
AI Against AI: Anthropic Unveils "Project Glasswing" to Stop the Next Great Cyber War
Anthropic launches Project Glasswing, using the unreleased "Claude Mythos" model to find thousands of zero-days and defend global infrastructure from AI threats.
22 views
Daily Writeups
⤷ Title: Alert: Social Engineering Campaign Targets Open Source Developers via Slack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 04:01:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #developer security #infosec #Linux Foundation #macOS Malware #malware #phishing #Root Certificate #Slack #social engineering #Windows Security
Daily CyberSecurity
Alert: Social Engineering Campaign Targets Open Source Developers via Slack
Attackers are impersonating Linux leaders on Slack to drop malware via fake Google Workspace links. Protect your dev environment—verify before acting!
23 views
Daily Writeups
⤷ Title: OpenSSL Issues Major Security Advisory: RSA and Memory Vulnerabilities Fixed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 03:40:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AES_CFB_128 #CVE_2026_31789 #CVE_2026_31790 #cybersecurity #infosec #Memory Leak #openssl #Patch Tuesday #RSA #security advisory #Vulnerability Research
Daily CyberSecurity
OpenSSL Issues Major Security Advisory: RSA and Memory Vulnerabilities Fixed
OpenSSL's April 2026 advisory reveals 7 flaws, including a moderate RSA memory leak (CVE-2026-31790). Learn if your version is affected and how to patch.
15 views
Daily Writeups
⤷ Title: GitHub Notification Phishing: How Attackers Abuse Legit Platforms
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:57:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #phishing #programming #hacking #github
Medium
GitHub Notification Phishing: How Attackers Abuse Legit Platforms
You Got an Email From GitHub. You Clicked It. That’s All It Took.
10 views
Daily Writeups
⤷ Title: TCS HackQuest Season 10 Experience
════════════════════════
𐀪 Author: Chittibabubavisetti
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 04:03:04 GMT
════════════════════════
⌗ Tags: #infosec #ethical_hacking #ctf #cybersecurity #hackquest
Medium
TCS HackQuest Season 10 Experience
What is TCS HackQuest?
TCS HackQuest is a national-level cyber security competition conducted by Tata Consultancy Services (TCS). It aims…
21 views
Daily Writeups
⤷ Title: JOTNAR— Autonomous AI-Powered Penetration Testing Framework
════════════════════════
𐀪 Author: Aks
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 03:19:44 GMT
════════════════════════
⌗ Tags: #penetration_testing #jotnar #gemini_cli #ai #agentic_ai_framework
Medium
JOTNAR— Autonomous AI-Powered Penetration Testing Framework
One script. Full control. JOTNAR turns Gemini CLI into an autonomous pentesting partner.
22 views
Daily Writeups
⤷ Title: The Importance of Security: How VAPT by TrustLayerLabs Protects Modern Businesses
════════════════════════
𐀪 Author: Trustlayerlabs
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 03:36:21 GMT
════════════════════════
⌗ Tags: #owasp #ethical_hacking #api_security #vapt #cybersecurity
Medium
The Importance of Security: How VAPT by TrustLayerLabs Protects Modern Businesses 🔐
In today’s digital ecosystem, applications, APIs, and cloud platforms process massive amounts of sensitive information. From user…
30 views
Daily Writeups
⤷ Title: Red Team: DOM based XSS on DVWA
════════════════════════
𐀪 Author: Haritsar
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 04:31:01 GMT
════════════════════════
⌗ Tags: #dvwa_dom_based_xss #dvwa #xs #dom_xss
Medium
Red Team: DOM based XSS on DVWA
Introduction DOM-Based XSS
35 views