Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: CSRF Introduction
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 05:15:56 GMT
════════════════════════
⌗ Tags: #tryhackme #csrf_attack #tryhackme_writeup #csrf_token #tryhackme_walkthrough
Medium
CSRF Introduction
Understand CSRF vulnerability and practice exploiting insecure state-changing requests.
15 views
Daily Writeups
⤷ Title: BankGPT | TryHackMe Writeup
════════════════════════
𐀪 Author: An1on
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 05:03:14 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ai_security #tryhackme_writeup #cybersecurity #tryhackme
Medium
BankGPT | TryHackMe Writeup
TryHackMe | BankGPT
22 views
Daily Writeups
⤷ Title: Exploiting Excessive Container Capabilities - A Complete Guide to Container Security Risks
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 06:47:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #kubernetes #container_security #docker #cybersecurity
Medium
Exploiting Excessive Container Capabilities - A Complete Guide to Container Security Risks
Containers have transformed how modern applications are built, deployed, and scaled. Technologies like Docker and Kubernetes allow…
25 views
Daily Writeups
⤷ Title: DOM based XSS on DVWA
════════════════════════
𐀪 Author: Harits AR
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 04:31:01 GMT
════════════════════════
⌗ Tags: #dvwa_dom_based_xss #dvwa #xs #dom_xss
Medium
Red Team: DOM based XSS on DVWA
Introduction DOM-Based XSS
29 views
Daily Writeups
⤷ Title: OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 12:20:00 +0530
════════════════════════
⌗ Tags: No_Tags
27 views
Daily Writeups
⤷ Title: The Master Key: How Hackers Used a Third-Party Exploit to Infiltrate Rockstar Games
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:41:54 +0000
════════════════════════
⌗ Tags: #Data Leak #Anodot #cybersecurity #data breach #Gaming News #GTA 6 #Infosec #ransomware #Rockstar Games #ShinyHunters #Snowflake
Penetration Testing Tools
The Master Key: How Hackers Used a Third-Party Exploit to Infiltrate Rockstar Games
Rockstar Games has formally acknowledged that a portion of its internal data was compromised following a breach of
23 views
Daily Writeups
⤷ Title: The Trusted Trap: How Hackers are Weaponizing GitHub and Jira Notifications to Bypass Filters
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:38:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Atlassian #Cisco Talos #cybersecurity #email security #Github #Infosec #Jira #phishing #SaaS Security #Social Engineering
Penetration Testing Tools
The Trusted Trap: How Hackers are Weaponizing GitHub and Jira Notifications to Bypass Filters
A routine missive from a familiar service has long since ceased to be a hallmark of security. Specialists
11 views
Daily Writeups
⤷ Title: Targeting the Grid: How Iranian Hackers are Exploiting Exposed U.S. Industrial Controllers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:36:17 +0000
════════════════════════
⌗ Tags: #Cyber Security #Allen_Bradley #Critical Infrastructure #cybersecurity #EtherNet/IP #ICS Security #Iranian APT #OT Security #PLC Security #Rockwell Automation #SCADA
Penetration Testing Tools
Targeting the Grid: How Iranian Hackers are Exploiting Exposed U.S. Industrial Controllers
State-sponsored Iranian hacking collectives have, in recent months, pivoted toward a singular and highly strategic objective within the
8 views
Daily Writeups
⤷ Title: Slower Than the Hackers: Why “Negative Time-to-Exploit” is Killing Traditional Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:33:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CISA KEV #cybersecurity #DevSecOps #InfoSec 2026 #Network Defense #Qualys Research #Risk Mass #Time_to_Exploit #vulnerability management
Penetration Testing Tools
Slower Than the Hackers: Why "Negative Time-to-Exploit" is Killing Traditional Security
Vulnerabilities have begun to outpace defensive measures not merely by hours, but by entire days, often preceding the
11 views
Daily Writeups
⤷ Title: The End of Cookie Theft: How Google’s New Hardware-Locked Sessions Kill Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:29:39 +0000
════════════════════════
⌗ Tags: #Google #browser security #Cookie Theft #cybersecurity #data privacy #DBSC #Google Chrome #Infosec #secure enclave #Session Hijacking #TPM
Penetration Testing Tools
The End of Cookie Theft: How Google’s New Hardware-Locked Sessions Kill Hijacking
Session hijacking has long persisted as one of the most insidious adversarial techniques; the necessity of a password
11 views
Daily Writeups
⤷ Title: Hardware Warning: How CPU-Z and HWMonitor Official Downloads Became Trojan Traps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:26:06 +0000
════════════════════════
⌗ Tags: #Malware #CPU_Z #CPUID #cybersecurity #DLL Sideloading #Hardware Diagnostics #HWMonitor #Infosec #kaspersky #malware #STX RAT #trojan
Penetration Testing Tools
Hardware Warning: How CPU-Z and HWMonitor Official Downloads Became Trojan Traps
The routine acquisition of CPU-Z or HWMonitor has abruptly transformed into a vector for trojan distribution. Researchers from
10 views
Daily Writeups
⤷ Title: Laravel Passport Patches Machine-to-Human Authentication Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:36:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API security #Authentication Bypass #CVE_2026_39976 #infosec #Laravel #OAuth2 #passport #PHP Security #TokenGuard #web development
Daily CyberSecurity
Laravel Passport Patches Machine-to-Human Authentication Bypass
Laravel Passport is widely recognized as an OAuth2 server and API authentication package that is both simple and enjoyable for developers to implement. However, a newly disclosed security flaw has…
8 views
Daily Writeups
⤷ Title: Under Fire Again: Rockstar Games Hit by ShinyHunters in Massive Snowflake Data Breach
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:21:35 +0000
════════════════════════
⌗ Tags: #Data Leak #cybersecurity #data leak #Gaming News #GTA 6 #Hacking #ransomware #Rockstar Games #ShinyHunters #Snowflake Breach #tech security
Daily CyberSecurity
Under Fire Again: Rockstar Games Hit by ShinyHunters in Massive Snowflake Data Breach
Hackers target Rockstar Games via Snowflake. While Rockstar calls the data "non-substantial," could internal budgets and future launch dates be at risk?
11 views
Daily Writeups
⤷ Title: The Copilot Retreat: Why Microsoft is Scrubbing Its AI Brand from Windows 11 Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:13:20 +0000
════════════════════════
⌗ Tags: #Windows #Advanced Features #AI Rebranding #Microsoft Copilot #Microsoft News #notepad++ #software updates #Tech Trends #User Experience #Windows 11 #Windows Insiders
Daily CyberSecurity
The Copilot Retreat: Why Microsoft is Scrubbing Its AI Brand from Windows 11 Apps
Microsoft is quietly rebranding Copilot features in Windows 11. Discover why Notepad’s AI is now called "Advanced Features" and what this means for the OS.
9 views
Daily Writeups
⤷ Title: The Weakest Link: How “Transit Hubs” are Quietly Draining Crypto and Stealing AI Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 08:06:39 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Agents #API Aggregators #API security #cybersecurity #data exfiltration #encryption #infosec #LLM infrastructure #Man in the Middle #supply chain attack
Daily CyberSecurity
The Weakest Link: How "Transit Hubs" are Quietly Draining Crypto and Stealing AI Data
New research reveals massive security gaps in AI API aggregators. From stolen crypto to leaked tokens, learn why your API hub might be a Man-in-the-Middle trap.
10 views
Daily Writeups
⤷ Title: Why Your Windows Lock Screen Clock is Wrong: Microsoft Explains the 30-Second Lag
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:58:49 +0000
════════════════════════
⌗ Tags: #Windows #Ctrl+Alt+Delete #cybersecurity #Microsoft #Operating Systems #Secure Lock Screen #tech support #UI Glitch #Windows 10 #Windows 11 #WinLogon
Daily CyberSecurity
Why Your Windows Lock Screen Clock is Wrong: Microsoft Explains the 30-Second Lag
Noticed the time lagging on your Ctrl+Alt+Delete screen? Microsoft reveals why the Secure Lock Screen runs 30 seconds behind and why they aren't fixing it.
7 views
Daily Writeups
⤷ Title: Google’s $135 Million Payday: Are You Eligible for the Android Cellular Data Settlement?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:55:59 +0000
════════════════════════
⌗ Tags: #Android #Data Leak
Daily CyberSecurity
Google’s $135 Million Payday: Are You Eligible for the Android Cellular Data Settlement?
Google settles for $135M over claims it used Android cellular data without consent. Check your eligibility and learn how to claim your share of the payout.
15 views
Daily Writeups
⤷ Title: Linux Kernel 7.0 Arrives: A Massive Overhaul for System Stability and Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:53:00 +0000
════════════════════════
⌗ Tags: #Linux #2026 Tech #cybersecurity #hardware compatibility #Kernel Security #Linus Torvalds #Linux Kernel 7.0 #Linux Update #open_source #System Stability #Tech News
Daily CyberSecurity
Linux Kernel 7.0 Arrives: A Massive Overhaul for System Stability and Security
Linux Kernel 7.0 is here! The 2026 milestone focuses on hardware support, memory safety, and security fixes for x86, ARM64, and RISC-V architectures.
12 views
Daily Writeups
⤷ Title: The Encryption Ghost: How the FBI Recovers “Deleted” Signal Messages from iPhone Caches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:44:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #App Privacy #cybersecurity #Data Privacy #Digital Security #encryption #fbi #forensics #iOS security #iphone #Signal
Daily CyberSecurity
The Encryption Ghost: How the FBI Recovers "Deleted" Signal Messages from iPhone Caches
Signal's encryption is solid, but iOS is leaking your data. Learn how the FBI uses notification caches to recover deleted messages and how to stop it.
18 views
Daily Writeups
⤷ Title: One-Touch Security: Google Expands End-to-End Encryption to Gmail on Android and iOS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:31:24 +0000
════════════════════════
⌗ Tags: #Technology #android #Client_Side Encryption #cybersecurity #Data Privacy #E2EE #Enterprise Security #gmail #Google Workspace #ios #Mobile Productivity
Daily CyberSecurity
One-Touch Security: Google Expands End-to-End Encryption to Gmail on Android and iOS
Gmail brings "One-Touch" end-to-end encryption to Android and iOS. Learn how Workspace Enterprise users can now secure sensitive emails natively on mobile.
12 views
Daily Writeups
⤷ Title: Microsoft Fixes the Insider Mess: The End of “Clean Installs” and Staggered Features
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 07:27:53 +0000
════════════════════════
⌗ Tags: #Windows #Beta Channel #Experimental Channel #Feature Flags #In_Place Upgrade #Microsoft #PC Tips #Software Testing #ViveTool #Windows 11 #Windows Insider Program
Daily CyberSecurity
Microsoft Fixes the Insider Mess: The End of "Clean Installs" and Staggered Features
Microsoft simplifies the Windows Insider Program! Discover the new Experimental Channel, native Feature Flags, and data-safe "in-place upgrades."
11 views