Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Russian Military Hackers Hijack Thousands of Home Routers for Global Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:13:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM Attack #cyber_espionage #DNS hijacking #Forest Blizzard #infosec #Microsoft 365 #Microsoft Threat Intelligence #router malware #Russian GRU #SOHO Security #Storm_2754
Daily CyberSecurity
Russian Military Hackers Hijack Thousands of Home Routers for Global Espionage
Microsoft exposes Forest Blizzard’s hijacking of 5,000+ SOHO routers for DNS spying and AiTM attacks on Microsoft 365 and governments. Patch your router now!
15 views
Daily Writeups
⤷ Title: North Korean State Actors Linked to Massive $285 Million Drift Protocol Heist
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:03:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CarbonVote Token #crypto security #CVT #DeFi Hack #Drift Protocol #Durable Nonce #JLP #North Korea #Smart Contract Exploit #social engineering #Solana #USDC
Daily CyberSecurity
North Korean State Actors Linked to Massive $285 Million Drift Protocol Heist
Attackers drained $285M from Drift Protocol in just 12 minutes using a fake token and pre-signed transactions. Learn how the 2026 DeFi heist went down.
14 views
Daily Writeups
⤷ Title: Critical Security Update: IBM Patches Multiple Vulnerabilities in Verify Identity and Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:16:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_1346 #CVE_2026_4101 #cybersecurity #IBM Security #IBM Verify #Identity Management #infosec #Root Privilege Escalation #Security Verify Access
Daily CyberSecurity
Critical Security Update: IBM Patches Multiple Vulnerabilities in Verify Identity and Access
IBM patches critical flaws in Verify Identity Access, including a 9.3 CVSS root escalation and 8.1 auth bypass. Secure your identity gateway—update now!
14 views
Daily Writeups
⤷ Title: Practical JavaScript Recon for Bug Bounty: A Real-World Passive-First Workflow
════════════════════════
𐀪 Author: WolfSec
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:46:11 GMT
════════════════════════
⌗ Tags: #hacking #web_security #bug_bounty #recon
Medium
Practical JavaScript Recon for Bug Bounty: A Real-World Passive-First Workflow
A field manual for ethical security researchers — from raw JS collection to reportable findings, step by step.
16 views
Daily Writeups
⤷ Title: The WAF Bypass Delusion: How @Ren Turned a Critical Perimeter Collapse into an ‘N/A’ Fairy Tale
════════════════════════
𐀪 Author: Xia0checkmate
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:27:50 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty #security #cybersecurity #iot
Medium
The WAF Bypass Delusion: How @Ren Turned a Critical Perimeter Collapse into an ‘N/A’ Fairy Tale
What is the point of a Web Application Firewall (WAF) if you can simply walk through the back door? In report #3631219, I exposed the…
13 views
Daily Writeups
⤷ Title: Mastering API Rate Limiting Bypasses: 10 Real-World Case Studies Every Pentester Should Know
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:35:54 GMT
════════════════════════
⌗ Tags: #hacking #coding #programming #cybersecurity #bug_bounty
Medium
Mastering API Rate Limiting Bypasses: 10 Real-World Case Studies Every Pentester Should Know
Ever reported a bug bounty only to hear, “Sorry, rate limiting is in place”? You’re not alone. Here’s the truth: API rate limits are…
16 views
Daily Writeups
⤷ Title: Sekolah Terbaik untuk Masa Depan di Industri Digital
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:27:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #education
Medium
Sekolah Terbaik untuk Masa Depan di Industri Digital
Dunia kerja sedang mengalami transformasi. Pekerjaan-pekerjaan yang dulu terkenal kini mulai tersisih, sementara sektor-sektor baru seperti…
13 views
Daily Writeups
⤷ Title: Man-in-the-Middle Attack using ARP Spoofing & Traffic Sniffing
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:44:03 GMT
════════════════════════
⌗ Tags: #red_team #hacking #mitm_attacks #information_security #cybersecurity
Medium
Man-in-the-Middle Attack using ARP Spoofing & Traffic Sniffing
Organization: ZeroDay Security Services
14 views
Daily Writeups
⤷ Title: Axios npm Supply Chain Attack: Inside the 3-Hour Compromise That Delivered a Cross-Platform RAT
════════════════════════
𐀪 Author: Ankit Mishra
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:25:21 GMT
════════════════════════
⌗ Tags: #npm #cybersecurity #infosec #supply_chain_security #javascript
16 views
Daily Writeups
⤷ Title: Building a SOC Tool From Scratch as a Cybersecurity Student
════════════════════════
𐀪 Author: Robert Perez
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:00:36 GMT
════════════════════════
⌗ Tags: #python #cybersecurity_tools #cybersecurity #infosec #blue_team
Medium
Building a SOC Tool From Scratch as a Cybersecurity Student
Windows event logs are one of the most valuable sources of forensic data in any SOC environment. They record everything: failed logins, new…
23 views
Daily Writeups
⤷ Title: Token Theft: The Attack That Bypasses Login Completely
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:46:28 GMT
════════════════════════
⌗ Tags: #security_token #infosec #cybersecurity #web_security #authentication
Medium
Token Theft: The Attack That Bypasses Login Completely
Context
14 views
Daily Writeups
⤷ Title: What is CORS? Cross-Origin Resource Sharing Explained
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:15:29 GMT
════════════════════════
⌗ Tags: #web_development #information_security #ethical_hacking #infosec #cybersecurity
Medium
What is CORS? Cross-Origin Resource Sharing Explained
When building modern web apps, your front-end and back-end often run on different domains. But browsers don’t allow unrestricted…
13 views
Daily Writeups
⤷ Title: AI in Penetration Testing (2026): What’s Actually New
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:58:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #red_team #penetration_testing #cyberattack #ethical_hacking
Medium
AI in Penetration Testing (2026): What’s Actually New
AI is no longer just assisting pentesters — it is actively performing offensive operations, reshaping how vulnerabilities are discovered…
12 views
Daily Writeups
⤷ Title: 10 Recent Exploits Every Cybersecurity Professional Should Know (Stay Ahead in 2026)
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:42:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ethical_hacking #bug_bounty_writeup #information_security
Medium
10 Recent Exploits Every Cybersecurity Professional Should Know (Stay Ahead in 2026)
In today’s rapidly evolving threat landscape, cybersecurity professionals must stay informed about the latest exploits shaping the digital…
16 views
Daily Writeups
⤷ Title: Active Directory Exploitation: NTLM Relay & AS-REP Roasting
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:19:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #active_directory #ethical_hacking #penetration_testing #red_team
Medium
Active Directory Exploitation: NTLM Relay & AS-REP Roasting
Organization: ZeroDay Security Services
17 views
Daily Writeups
⤷ Title: Ethical Hacking 45 Days Internship for Students — Build Real Skills
════════════════════════
𐀪 Author: cyber security Updates
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:20:45 GMT
════════════════════════
⌗ Tags: #internships #cybersecurity #ethical_hacking #education #summer_internships
Medium
Ethical Hacking 45 Days Internship for Students — Build Real Skills
The Ethical Hacking 45 Days Internship for Students — Build Real Skills is one of the most effective ways to start a career in…
32 views
Daily Writeups
⤷ Title: Introduction:
════════════════════════
𐀪 Author: Ilavarasan Lawrence
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:42:59 GMT
════════════════════════
⌗ Tags: #education #digital_literacy #cyber_security_awareness #ethical_hacking
Medium
Introduction:
Malware, short for malicious software, refers to any program or code designed to harm, exploit, or disrupt computer systems. In today’s…
34 views
Daily Writeups
⤷ Title: Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 14:46:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:15:51 +0000
════════════════════════
⌗ Tags: #Security #Malware #Scams and Fraud #ClickFix #Crypto #Cyber Attack #Cybersecurity #Node.js #RAT #Tor #Windows
Hackread
New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows.
27 views
Daily Writeups
⤷ Title: Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:49:11 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #Cyber Security 2026 #ghostsurf #IIS Security #Kernel_Mode Auth #NTLM Auth #NTLM Relay #Penetration Testing #red teaming #Session Hijacking #SOCKS5 Proxy
Penetration Testing Tools
Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
Master NTLM relay with ghostsurf. Use a SOCKS5 proxy to hijack browser sessions, bypass kernel-mode auth, and impersonate users on IIS and HTTPS targets.
17 views
Daily Writeups
⤷ Title: Storage Reborn: The Massive 15-Year Leap to Bring DRBD 9 into the Linux Mainline
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:45:31 +0000
════════════════════════
⌗ Tags: #Linux #Cloud Infrastructure #Data Replication #Distributed Storage #DRBD 9 #High Availability #LINBIT #Linux 7.x #Linux Kernel #RDMA #Storage Subsystem
Penetration Testing Tools
Storage Reborn: The Massive 15-Year Leap to Bring DRBD 9 into the Linux Mainline
The Linux kernel is currently undergoing one of the most substantial overhauls of its storage subsystem in recent
15 views