Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Practical JavaScript Recon for Bug Bounty: A Real-World Passive-First Workflow
════════════════════════
𐀪 Author: WolfSec
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:46:11 GMT
════════════════════════
⌗ Tags: #hacking #web_security #bug_bounty #recon
Medium
Practical JavaScript Recon for Bug Bounty: A Real-World Passive-First Workflow
A field manual for ethical security researchers — from raw JS collection to reportable findings, step by step.
16 views
Daily Writeups
⤷ Title: The WAF Bypass Delusion: How @Ren Turned a Critical Perimeter Collapse into an ‘N/A’ Fairy Tale
════════════════════════
𐀪 Author: Xia0checkmate
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:27:50 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty #security #cybersecurity #iot
Medium
The WAF Bypass Delusion: How @Ren Turned a Critical Perimeter Collapse into an ‘N/A’ Fairy Tale
What is the point of a Web Application Firewall (WAF) if you can simply walk through the back door? In report #3631219, I exposed the…
13 views
Daily Writeups
⤷ Title: Mastering API Rate Limiting Bypasses: 10 Real-World Case Studies Every Pentester Should Know
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:35:54 GMT
════════════════════════
⌗ Tags: #hacking #coding #programming #cybersecurity #bug_bounty
Medium
Mastering API Rate Limiting Bypasses: 10 Real-World Case Studies Every Pentester Should Know
Ever reported a bug bounty only to hear, “Sorry, rate limiting is in place”? You’re not alone. Here’s the truth: API rate limits are…
16 views
Daily Writeups
⤷ Title: Sekolah Terbaik untuk Masa Depan di Industri Digital
════════════════════════
𐀪 Author: Ali Ridlo
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:27:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #education
Medium
Sekolah Terbaik untuk Masa Depan di Industri Digital
Dunia kerja sedang mengalami transformasi. Pekerjaan-pekerjaan yang dulu terkenal kini mulai tersisih, sementara sektor-sektor baru seperti…
13 views
Daily Writeups
⤷ Title: Man-in-the-Middle Attack using ARP Spoofing & Traffic Sniffing
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:44:03 GMT
════════════════════════
⌗ Tags: #red_team #hacking #mitm_attacks #information_security #cybersecurity
Medium
Man-in-the-Middle Attack using ARP Spoofing & Traffic Sniffing
Organization: ZeroDay Security Services
14 views
Daily Writeups
⤷ Title: Axios npm Supply Chain Attack: Inside the 3-Hour Compromise That Delivered a Cross-Platform RAT
════════════════════════
𐀪 Author: Ankit Mishra
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:25:21 GMT
════════════════════════
⌗ Tags: #npm #cybersecurity #infosec #supply_chain_security #javascript
16 views
Daily Writeups
⤷ Title: Building a SOC Tool From Scratch as a Cybersecurity Student
════════════════════════
𐀪 Author: Robert Perez
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:00:36 GMT
════════════════════════
⌗ Tags: #python #cybersecurity_tools #cybersecurity #infosec #blue_team
Medium
Building a SOC Tool From Scratch as a Cybersecurity Student
Windows event logs are one of the most valuable sources of forensic data in any SOC environment. They record everything: failed logins, new…
23 views
Daily Writeups
⤷ Title: Token Theft: The Attack That Bypasses Login Completely
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:46:28 GMT
════════════════════════
⌗ Tags: #security_token #infosec #cybersecurity #web_security #authentication
Medium
Token Theft: The Attack That Bypasses Login Completely
Context
14 views
Daily Writeups
⤷ Title: What is CORS? Cross-Origin Resource Sharing Explained
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:15:29 GMT
════════════════════════
⌗ Tags: #web_development #information_security #ethical_hacking #infosec #cybersecurity
Medium
What is CORS? Cross-Origin Resource Sharing Explained
When building modern web apps, your front-end and back-end often run on different domains. But browsers don’t allow unrestricted…
13 views
Daily Writeups
⤷ Title: AI in Penetration Testing (2026): What’s Actually New
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:58:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #red_team #penetration_testing #cyberattack #ethical_hacking
Medium
AI in Penetration Testing (2026): What’s Actually New
AI is no longer just assisting pentesters — it is actively performing offensive operations, reshaping how vulnerabilities are discovered…
12 views
Daily Writeups
⤷ Title: 10 Recent Exploits Every Cybersecurity Professional Should Know (Stay Ahead in 2026)
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:42:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ethical_hacking #bug_bounty_writeup #information_security
Medium
10 Recent Exploits Every Cybersecurity Professional Should Know (Stay Ahead in 2026)
In today’s rapidly evolving threat landscape, cybersecurity professionals must stay informed about the latest exploits shaping the digital…
16 views
Daily Writeups
⤷ Title: Active Directory Exploitation: NTLM Relay & AS-REP Roasting
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:19:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #active_directory #ethical_hacking #penetration_testing #red_team
Medium
Active Directory Exploitation: NTLM Relay & AS-REP Roasting
Organization: ZeroDay Security Services
17 views
Daily Writeups
⤷ Title: Ethical Hacking 45 Days Internship for Students — Build Real Skills
════════════════════════
𐀪 Author: cyber security Updates
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:20:45 GMT
════════════════════════
⌗ Tags: #internships #cybersecurity #ethical_hacking #education #summer_internships
Medium
Ethical Hacking 45 Days Internship for Students — Build Real Skills
The Ethical Hacking 45 Days Internship for Students — Build Real Skills is one of the most effective ways to start a career in…
32 views
Daily Writeups
⤷ Title: Introduction:
════════════════════════
𐀪 Author: Ilavarasan Lawrence
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:42:59 GMT
════════════════════════
⌗ Tags: #education #digital_literacy #cyber_security_awareness #ethical_hacking
Medium
Introduction:
Malware, short for malicious software, refers to any program or code designed to harm, exploit, or disrupt computer systems. In today’s…
34 views
Daily Writeups
⤷ Title: Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 14:46:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:15:51 +0000
════════════════════════
⌗ Tags: #Security #Malware #Scams and Fraud #ClickFix #Crypto #Cyber Attack #Cybersecurity #Node.js #RAT #Tor #Windows
Hackread
New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows.
27 views
Daily Writeups
⤷ Title: Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:49:11 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #Cyber Security 2026 #ghostsurf #IIS Security #Kernel_Mode Auth #NTLM Auth #NTLM Relay #Penetration Testing #red teaming #Session Hijacking #SOCKS5 Proxy
Penetration Testing Tools
Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
Master NTLM relay with ghostsurf. Use a SOCKS5 proxy to hijack browser sessions, bypass kernel-mode auth, and impersonate users on IIS and HTTPS targets.
17 views
Daily Writeups
⤷ Title: Storage Reborn: The Massive 15-Year Leap to Bring DRBD 9 into the Linux Mainline
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:45:31 +0000
════════════════════════
⌗ Tags: #Linux #Cloud Infrastructure #Data Replication #Distributed Storage #DRBD 9 #High Availability #LINBIT #Linux 7.x #Linux Kernel #RDMA #Storage Subsystem
Penetration Testing Tools
Storage Reborn: The Massive 15-Year Leap to Bring DRBD 9 into the Linux Mainline
The Linux kernel is currently undergoing one of the most substantial overhauls of its storage subsystem in recent
15 views
Daily Writeups
⤷ Title: The Invisible Navy: SideWinder’s New Cloud-Based Strategy for Striking South Asian Defense Forces
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:42:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #Bangladesh Navy #cloud security #Credential Harvesting #Cybersecurity 2026 #Defense Contractors #Pakistan Air Force #phishing #Railway #SideWinder #Zeabur #Zimbra
Penetration Testing Tools
The Invisible Navy: SideWinder’s New Cloud-Based Strategy for Striking South Asian Defense Forces
The SideWinder threat actor has markedly pivoted its strategic methodology, forsaking traditional infrastructure in favor of a clandestine
9 views
Daily Writeups
⤷ Title: Disposable Code: Inside North Korea’s “Burn-on-Detection” Malware Assembly Line
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:40:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Andariel #Cyber Espionage #Infosec #Kimsuky #Lazarus Group #malware #North Korea #State_Sponsored Hacking #Supply Chain Security #threat intelligence 2026
Penetration Testing Tools
Disposable Code: Inside North Korea’s "Burn-on-Detection" Malware Assembly Line
North Korea has long since transmuted its malicious software development into a sophisticated assembly line, where each instrument
9 views
Daily Writeups
⤷ Title: Open Gate: How a 9.8 Severity Flaw in Ninja Forms Grants Hackers Total Server Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:38:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_0740 #Cybersecurity 2026 #File Upload Vulnerability #Ninja Forms #PHP Malware #Plugin Exploit #RCE #Web Hardening #Wordfence #WordPress Security
Penetration Testing Tools
Open Gate: How a 9.8 Severity Flaw in Ninja Forms Grants Hackers Total Server Control
A widely utilized WordPress plugin has emerged as a precarious vulnerability for thousands of websites globally. According to
10 views