Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Cmess — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Abdallah_samir
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 00:38:46 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #cybersecurity #ctf #tryhackme
Medium
Cmess — TryHackMe Walkthrough
Hosts File Configuration
15 views
Daily Writeups
⤷ Title: Why Anthropic’s Claude Mythos Is Not Fearmongering but a Force Reshaping Cybersecurity
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 00:15:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai #artificial_intelligence #hacking #anthropic_claude
Medium
Why Anthropic’s Claude Mythos Is Not Fearmongering but a Force Reshaping Cybersecurity
Why Anthropic’s Claude Mythos Is Not Fearmongering but a Force Reshaping Cybersecurity Claude has become the most consequential AI system in cybersecurity, simultaneously the best tool defenders …
20 views
Daily Writeups
⤷ Title: BlueHammer Isn’t a Defender Bug — It’s a Windows Design Flaw. Here’s the Real Fix.
════════════════════════
𐀪 Author: AndrewCharalambous
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 00:31:08 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #microsoft #windows #zero_day
Medium
BlueHammer Isn’t a Defender Bug — It’s a Windows Design Flaw. Here’s the Real Fix.
Why detection rules won’t save you, and what Microsoft should actually do.
28 views
Daily Writeups
⤷ Title: The Church of Malware Presents: The Most Braindead Python Botnet We’ve Ever Seen
════════════════════════
𐀪 Author: ekomsSavior
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 23:40:21 GMT
════════════════════════
⌗ Tags: #python #cybersecurity #infosec #hacker #malware
Medium
The Church of Malware Presents: The Most Braindead Python Botnet We’ve Ever Seen
┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼
┼┼┼┼┼┼┼┼██┼┼┼┼┼┼┼┼┼┼┼┼┼┼┼██┼┼┼┼┼┼┼┼┼
┼┼┼┼┼┼████▄┼┼┼▄▄▄▄▄▄▄┼┼┼▄████┼┼┼┼┼┼┼…
26 views
Daily Writeups
⤷ Title: Active SharePoint Spoofing and Legacy Office RCE: CISA Alerts on New KEV Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 02:34:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #CVE_2009_0238 #CVE_2026_32201 #cybersecurity #Federal Directive #infosec #Known Exploited Vulnerabilities #microsoft office #Microsoft SharePoint #rce #spoofing
Daily CyberSecurity
Active SharePoint Spoofing and Legacy Office RCE: CISA Alerts on New KEV Exploits
CISA adds Microsoft SharePoint spoofing (CVE-2026-32201) and legacy Office RCE (CVE-2009-0238) to its KEV Catalog. Remediation deadline: April 28, 2026.
21 views
Daily Writeups
⤷ Title: 25 Million Users at Risk: Fastify Publicly Discloses PoC Exploit for Single-Space Security Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 02:15:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #25 Million Downloads #CVE_2026_33806 #Exploit Disclosure #Fastify #infosec #JavaScript Security #Node.js Security #Public PoC #Schema Validation Bypass #Web Framework Vulnerability
Daily CyberSecurity
25 Million Users at Risk: Fastify Publicly Discloses PoC Exploit for Single-Space Security Bypass
Fastify (25M+ downloads) reveals CVE-2026-33806. A public PoC exploit shows how a single space bypasses schema validation. Upgrade to v5.8.5 now to stay safe.
15 views
Daily Writeups
⤷ Title: JUMPSEC Unmasks Iranian ‘Muddy Water’ Using Russian ‘CastleRAT’ Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 02:05:45 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #browser hijacking #CastleRAT #ChainShell #cyber_espionage #Ethereum C2 #HVNC #Iranian APT #JUMPSEC #Malware_as_a_Service #MFA Bypass #Muddy Water
Daily CyberSecurity
JUMPSEC Unmasks Iranian 'Muddy Water' Using Russian 'CastleRAT' Malware
Iranian state actor Muddy Water adopts CastleRAT and ChainShell to hijack browsers and bypass MFA invisibly. A professional-grade shift in APT strategy.
14 views
Daily Writeups
⤷ Title: OpenStack Keystone Flaw Grants Access to Disabled LDAP Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 01:57:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Cloud Security #Dalmatian #Epoxy #Flamingo #Gazpacho #Identity Management #Keystone #LDAP #OpenStack #Patch Alert
Daily CyberSecurity
OpenStack Keystone Flaw Grants Access to Disabled LDAP Users
OpenStack Keystone vulnerability allows disabled LDAP users to authenticate. Logic flaw in attribute mapping affects releases up to 2026.1. Patch now!
13 views
Daily Writeups
⤷ Title: Urgent Patch Alert: SharePoint Spoofing Under Active Attack as Microsoft Releases April 2026 Updates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 01:42:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #April 2026 #CISA KEV #CVE_2026_32201 #infosec #Microsoft #Patch Tuesday #rce #Sharepoint #Windows Security #zero_day
Daily CyberSecurity
Urgent Patch Alert: SharePoint Spoofing Under Active Attack as Microsoft Releases April 2026 Updates
Microsoft’s April 2026 Patch Tuesday fixes 163 flaws, including an exploited SharePoint spoofing bug (CVE-2026-32201). Patch by April 28 per CISA mandate.
16 views
Daily Writeups
⤷ Title: 108 Coordinated Chrome Extensions Hijack Your Private Telegram Sessions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 01:00:22 +0000
════════════════════════
⌗ Tags: #Malware #browser security #C2 Infrastructure #Chrome extensions #cybersecurity #Google OAuth #infosec #malware #Session Hijacking #Socket Research #Telegram
Daily CyberSecurity
108 Coordinated Chrome Extensions Hijack Your Private Telegram Sessions
Socket identifies 108 malicious Chrome extensions stealing Telegram sessions and Google IDs. 20,000 installs hit—audit your browser extensions immediately!
24 views
Daily Writeups
⤷ Title: TryHackMe: Offensive Security Intro Writeup
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 01:23:24 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #tryhackme #cybersecurity #technology
Medium
TryHackMe: Offensive Security Intro Writeup
Introduction
25 views
Daily Writeups
⤷ Title: FBI and Indonesian Authorities Dismantle Prolific “W3LL” Phishing Empire
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 04:25:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime Takedown #FBI Atlanta #Indonesian National Police #MaaS #Malware_as_a_Service #MFA Bypass #Phishing_as_a_Service #Session Hijacking #W3LL Phishing Kit #W3LLSTORE
Daily CyberSecurity
FBI and Indonesian Authorities Dismantle Prolific "W3LL" Phishing Empire
The FBI and Indonesia dismantle W3LL, a $20M phishing kit that bypassed MFA and hijacked live sessions. Learn about the takedown of this MaaS powerhouse.
18 views
Daily Writeups
⤷ Title: Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:18:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adobe #ColdFusion #ColdFusion 2025 #CVE_2026_27304 #CVE_2026_27306 #cybersecurity #infosec #Patch Alert #Path Traversal #rce #Remote Code Execution
Daily CyberSecurity
Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses
Adobe patches critical RCE and security bypass flaws in ColdFusion 2023 & 2025. Protect your enterprise servers from takeover—update to the latest version now.
18 views
Daily Writeups
⤷ Title: Critical 9.1 Flaws Hit Fortinet FortiSandbox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:07:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_39808 #CVE_2026_39813 #cybersecurity #Fortinet #FortiSandbox #infosec #os command injection #Patch Alert #Path Traversal #rce
Daily CyberSecurity
Critical 9.1 Flaws Hit Fortinet FortiSandbox
Fortinet issues a critical 9.1 CVSS alert for FortiSandbox. Unauthenticated auth bypass and command injection risks. Patch to 5.0.6 or 4.4.9 immediately.
19 views
Daily Writeups
⤷ Title: Injection Attacks — From User Input to Full System Control
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 04:47:32 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #linux #security #cybersecurity
Medium
💉 Injection Attacks — From User Input to Full System Control
✍️ Introduction
16 views
Daily Writeups
⤷ Title: ⚙️ 13. — Referer — Based Access Control
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:03:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #portswigger #bug_bounty
Medium
⚙️ 13. — Referer — Based Access Control
⚙️ 13. — Referer — Based Access Control Difficulty: 🟡 Practitioner Goal: 🔍 Log in as administrator:admin → promote carlos → capture GET /admin-roles?username=carlos&action=upgrade …
18 views
Daily Writeups
⤷ Title: ⚙️ 12. — Multi-step process with no access control on one step
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:03:11 GMT
════════════════════════
⌗ Tags: #portswigger #web_security #bug_bounty #cybersecurity
Medium
⚙️ 12. — Multi-step process with no access control on one step
⚙️ 12. — Multi-step process with no access control on one step Difficulty: 🟡 Practitioner Goal: 🔍 Log in as administrator:admin → browse to /admin → promote carlos — observe the …
30 views
Daily Writeups
⤷ Title: AI Models & Data (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 03:35:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #artificial_intelligence #hacking #ai_security
Medium
AI Models & Data (THM) Tryhackme Walkthrough
Description : Explore how data is fundamental to AI security, and the models which power it.
42 views
Daily Writeups
⤷ Title: OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 10:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: The “Graphalgo” Evolution: How North Korea Built a Fake Florida LLC to Hack Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 06:24:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Blockchain security #github #Graphalgo #infosec #Job Scam #malware #North Korea #phishing #rat #ReversingLabs #social engineering #Typo_squatting
Daily CyberSecurity
The "Graphalgo" Evolution: How North Korea Built a Fake Florida LLC to Hack Developers
North Korea’s "graphalgo" campaign uses fake job interviews and real Florida LLCs to infect developers. Learn how to spot this sophisticated state-sponsored trap.
28 views
Daily Writeups
⤷ Title: Automated Pen Testing Writing Custom Burp Extensions with Python and Jython
════════════════════════
𐀪 Author: Shreyash Mall
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 19:50:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #automation #python #penetration_testing #bug_bounty
Medium
Automated Pen Testing: Writing Custom Burp Extensions with Python and Jython
If you do any serious bug bounty hunting or penetration testing, you already know the pain. You end up clicking through the exact same…
20 views