Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: AI in Penetration Testing (2026): What’s Actually New
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:58:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #red_team #penetration_testing #cyberattack #ethical_hacking
Medium
AI in Penetration Testing (2026): What’s Actually New
AI is no longer just assisting pentesters — it is actively performing offensive operations, reshaping how vulnerabilities are discovered…
12 views
Daily Writeups
⤷ Title: 10 Recent Exploits Every Cybersecurity Professional Should Know (Stay Ahead in 2026)
════════════════════════
𐀪 Author: Cybervolt
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:42:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ethical_hacking #bug_bounty_writeup #information_security
Medium
10 Recent Exploits Every Cybersecurity Professional Should Know (Stay Ahead in 2026)
In today’s rapidly evolving threat landscape, cybersecurity professionals must stay informed about the latest exploits shaping the digital…
16 views
Daily Writeups
⤷ Title: Active Directory Exploitation: NTLM Relay & AS-REP Roasting
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:19:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #active_directory #ethical_hacking #penetration_testing #red_team
Medium
Active Directory Exploitation: NTLM Relay & AS-REP Roasting
Organization: ZeroDay Security Services
17 views
Daily Writeups
⤷ Title: Ethical Hacking 45 Days Internship for Students — Build Real Skills
════════════════════════
𐀪 Author: cyber security Updates
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 08:20:45 GMT
════════════════════════
⌗ Tags: #internships #cybersecurity #ethical_hacking #education #summer_internships
Medium
Ethical Hacking 45 Days Internship for Students — Build Real Skills
The Ethical Hacking 45 Days Internship for Students — Build Real Skills is one of the most effective ways to start a career in…
32 views
Daily Writeups
⤷ Title: Introduction:
════════════════════════
𐀪 Author: Ilavarasan Lawrence
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 07:42:59 GMT
════════════════════════
⌗ Tags: #education #digital_literacy #cyber_security_awareness #ethical_hacking
Medium
Introduction:
Malware, short for malicious software, refers to any program or code designed to harm, exploit, or disrupt computer systems. In today’s…
34 views
Daily Writeups
⤷ Title: Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 14:46:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:15:51 +0000
════════════════════════
⌗ Tags: #Security #Malware #Scams and Fraud #ClickFix #Crypto #Cyber Attack #Cybersecurity #Node.js #RAT #Tor #Windows
Hackread
New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
Netskope Threat Labs report a new ClickFix attack using fake CAPTCHAs to deploy Tor-backed NodeJS malware and drain crypto wallets on Windows.
27 views
Daily Writeups
⤷ Title: Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:49:11 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #Cyber Security 2026 #ghostsurf #IIS Security #Kernel_Mode Auth #NTLM Auth #NTLM Relay #Penetration Testing #red teaming #Session Hijacking #SOCKS5 Proxy
Penetration Testing Tools
Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
Master NTLM relay with ghostsurf. Use a SOCKS5 proxy to hijack browser sessions, bypass kernel-mode auth, and impersonate users on IIS and HTTPS targets.
17 views
Daily Writeups
⤷ Title: Storage Reborn: The Massive 15-Year Leap to Bring DRBD 9 into the Linux Mainline
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:45:31 +0000
════════════════════════
⌗ Tags: #Linux #Cloud Infrastructure #Data Replication #Distributed Storage #DRBD 9 #High Availability #LINBIT #Linux 7.x #Linux Kernel #RDMA #Storage Subsystem
Penetration Testing Tools
Storage Reborn: The Massive 15-Year Leap to Bring DRBD 9 into the Linux Mainline
The Linux kernel is currently undergoing one of the most substantial overhauls of its storage subsystem in recent
15 views
Daily Writeups
⤷ Title: The Invisible Navy: SideWinder’s New Cloud-Based Strategy for Striking South Asian Defense Forces
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:42:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #Bangladesh Navy #cloud security #Credential Harvesting #Cybersecurity 2026 #Defense Contractors #Pakistan Air Force #phishing #Railway #SideWinder #Zeabur #Zimbra
Penetration Testing Tools
The Invisible Navy: SideWinder’s New Cloud-Based Strategy for Striking South Asian Defense Forces
The SideWinder threat actor has markedly pivoted its strategic methodology, forsaking traditional infrastructure in favor of a clandestine
9 views
Daily Writeups
⤷ Title: Disposable Code: Inside North Korea’s “Burn-on-Detection” Malware Assembly Line
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:40:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Andariel #Cyber Espionage #Infosec #Kimsuky #Lazarus Group #malware #North Korea #State_Sponsored Hacking #Supply Chain Security #threat intelligence 2026
Penetration Testing Tools
Disposable Code: Inside North Korea’s "Burn-on-Detection" Malware Assembly Line
North Korea has long since transmuted its malicious software development into a sophisticated assembly line, where each instrument
9 views
Daily Writeups
⤷ Title: Open Gate: How a 9.8 Severity Flaw in Ninja Forms Grants Hackers Total Server Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:38:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_0740 #Cybersecurity 2026 #File Upload Vulnerability #Ninja Forms #PHP Malware #Plugin Exploit #RCE #Web Hardening #Wordfence #WordPress Security
Penetration Testing Tools
Open Gate: How a 9.8 Severity Flaw in Ninja Forms Grants Hackers Total Server Control
A widely utilized WordPress plugin has emerged as a precarious vulnerability for thousands of websites globally. According to
10 views
Daily Writeups
⤷ Title: The Unstoppable Phoenix: How the Phorpiex Botnet Reborn as a P2P Crypto-Thief
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:36:54 +0000
════════════════════════
⌗ Tags: #Malware #Bitsight Research #Crypto Clipper #Cybersecurity 2026 #Information Stealer #LockBit Black #P2P Malware #Phorpiex #ransomware #Sextortion #Twizt Botnet
Penetration Testing Tools
The Unstoppable Phoenix: How the Phorpiex Botnet Reborn as a P2P Crypto-Thief
An ancient botnet, long relegated to the periphery of collective memory, has re-emerged with a lethality far exceeding
9 views
Daily Writeups
⤷ Title: The Podcast Trap: How UNC1069’s AI Deepfakes Are Poisoning the Global npm Registry
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:35:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #axios #Deepfake #InfoSec 2026 #Node.js #North Korea #npm #open source security #SILENCELIFT #Social Engineering #supply chain attack #UNC1069 #WAVESHAPER
Penetration Testing Tools
The Podcast Trap: How UNC1069’s AI Deepfakes Are Poisoning the Global npm Registry
What begins as a mundane exchange—an invitation to a podcast or a routine professional briefing—may serve as the
10 views
Daily Writeups
⤷ Title: Exploited in the Wild: Critical 9.3 CVSS Flaw Turns Tianxin Systems into Hacker Gateways
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:24:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #Command Injection #CVE_2021_4473 #cybersecurity #infosec #network_security #rce #Shadowserver #Tianxin Internet Behavior Management #Vulnerability
Daily CyberSecurity
Exploited in the Wild: Critical 9.3 CVSS Flaw Turns Tianxin Systems into Hacker Gateways
Shadowserver warns of active exploitation of CVE-2021-4473 in Tianxin systems. This 9.3 CVSS flaw allows unauthenticated RCE. Patch your firmware immediately!
8 views
Daily Writeups
⤷ Title: Team Cymru Mapped the Yurei Ransomware Toolkit Before It Could Strike
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:20:15 +0000
════════════════════════
⌗ Tags: #Malware #Double Extortion #go programming #infosec #open_source malware #Prince ransomware #Ransomware Tool Matrix #SatanLockv2 #Team Cymru #threat intelligence #Yurei ransomware
Daily CyberSecurity
Team Cymru Mapped the Yurei Ransomware Toolkit Before It Could Strike
Team Cymru unmasks Yurei ransomware, a "Stranger Things" themed operation built on open-source code. Learn how proactive telemetry mapped their toolkit.
9 views
Daily Writeups
⤷ Title: Post 11: CSRF, CORS & Open Redirects (Manipulating User Actions)
════════════════════════
𐀪 Author: Dasiel Ramirez Hernandez
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 10:52:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #ethical_hacking #web_hacking #beginner
Medium
🐛Post 11: CSRF, CORS & Open Redirects (Manipulating User Actions)
In our previous post, we explored Cross-Site Scripting (XSS), where an attacker injects malicious scripts to execute within a victim’s…
12 views
Daily Writeups
⤷ Title: RustScan: The Ultimate Modern Port Scanner for Bug Bounty Hunters! ⚡
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 10:52:02 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #bug_bounty #hacking #scanning
Medium
RustScan: The Ultimate Modern Port Scanner for Bug Bounty Hunters! 🚀⚡
Introduction
14 views
Daily Writeups
⤷ Title: The Shortcut Nobody Told You About Url parameters
════════════════════════
𐀪 Author: Fx03
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 06:37:39 GMT
════════════════════════
⌗ Tags: #technology #hacking #cybersecurity #linux #bug_bounty
Medium
A Cheat‑Sheet to Finding Hidden Paths
A Cheat‑Sheet to Finding Hidden Paths Hay hii hackers 👋💕 My name is kiran (FX03) and I am Ethical hacker and bug hunter welcome back to the new write-up let me show you where the real bugs …
16 views
Daily Writeups
⤷ Title: 10 Reasons to Join an Ethical Hacking Course in West Delhi Right Now (2026)
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 10:11:18 GMT
════════════════════════
⌗ Tags: #hacker #hacking #ethical_hacking #cybersecurity
Medium
10 Reasons to Join an Ethical Hacking Course in West Delhi Right Now (2026)
With an ever–increasing prevalence of online crimes and incidents where individuals‘ personal data were compromised, those required to…
11 views
Daily Writeups
⤷ Title: What is Claude Mythos? (The AI So Powerful Anthropic Won’t Release It)
════════════════════════
𐀪 Author: Ai studio
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:43:09 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #technology #hacking #claude
Medium
What is Claude Mythos? (The AI So Powerful Anthropic Won’t Release It)
This is bigger than you think.
10 views