Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: You Were Never Hidden,You Were Just Unobserved
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 07:05:35 GMT
════════════════════════
⌗ Tags: #coding #technology #programming #ethical_hacking #cybersecurity
Medium
You Were Never Hidden,You Were Just Unobserved
What silent recon teaches us about the internet we think we control
34 views
Daily Writeups
⤷ Title: New CGrabber and Direct-Sys Malware Spread Through GitHub ZIP Files
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:25:45 +0000
════════════════════════
⌗ Tags: #Security #Malware #CGrabber #Cyber Attack #Cybersecurity #Developers #Direct_Sys #GitHub
Hackread
New CGrabber and Direct-Sys Malware Spread Through GitHub ZIP Files
Hackers spread CGrabber and Direct-Sys malware through GitHub ZIP files, bypassing security tools to steal passwords, crypto wallets, and user data.
26 views
Daily Writeups
⤷ Title: go-exploit: Go Exploit Framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:24:15 +0000
════════════════════════
⌗ Tags: #Open Source Tool #exploit framework
Penetration Testing Tools
go-exploit: Go Exploit Framework
go-exploit is an exploit development framework for Go. The framework helps exploit developers create small, self-contained, portable, and consistent exploits
17 views
Daily Writeups
⤷ Title: The “RedSun” Zero-Day That Turns Microsoft Defender into a Malware Installer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:15:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #EICAR #exploit #Microsoft Defender #privilege escalation #RedSun #SYSTEM privileges #Will Dormann #Windows 11 #Windows Server #zero_day
Penetration Testing Tools
The "RedSun" Zero-Day That Turns Microsoft Defender into a Malware Installer
A novel method to acquire total systemic hegemony over Windows has surfaced, and remarkably, it eschews complex kernel
9 views
Daily Writeups
⤷ Title: The 0APT “Doxxing” Campaign That’s Tearing the Ransomware Underworld Apart
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:11:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #0APT #Barricade Cyber Solutions #cyber extortion #Dark Web #Doxxing #DragonForce #Infosec News #Krybit #ransomware #threat intelligence
Penetration Testing Tools
The 0APT "Doxxing" Campaign That’s Tearing the Ransomware Underworld Apart
A rare internecine conflict has erupted within the dark web’s underbelly, as one ransomware syndicate has chosen to
7 views
Daily Writeups
⤷ Title: The Unstoppable Ghost: How Triad Nexus Uses “Infrastructure Laundering” to Bypass U.S. Sanctions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:07:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Brand Impersonation #cloud security #CNAME Chains #Cryptocurrency Fraud #cybercrime #FinSec #Infrastructure Laundering #Pig Butchering Scam #Silent Push #Triad Nexus
Penetration Testing Tools
The Unstoppable Ghost: How Triad Nexus Uses "Infrastructure Laundering" to Bypass U.S. Sanctions
Following the high-profile sanctions imposed by the United States against the Triad Nexus cybercriminal syndicate, it appeared that
6 views
Daily Writeups
⤷ Title: The Invisible ID: Why Chrome’s Failure to Block Fingerprinting is a Gift to Global Surveillance
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:05:27 +0000
════════════════════════
⌗ Tags: #Data Leak #AdTech #Alexander Hanff #Browser Fingerprinting #Citizen Lab #data privacy #Digital Surveillance #Google Chrome #privacy sandbox #Tracking Protection #web security
Penetration Testing Tools
The Invisible ID: Why Chrome’s Failure to Block Fingerprinting is a Gift to Global Surveillance
While Chrome has long been marketed as a bastion of digital security, Google’s efficacy in thwarting clandestine surveillance
6 views
Daily Writeups
⤷ Title: The Breaking Point: NIST Abandons Universal Data for the National Vulnerability Database
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:03:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Weaponization #CISA KEV #CVE #cybersecurity #Infosec News #NIST #NIST Backlog #NVD #Patch Management #vulnerability management
Penetration Testing Tools
The Breaking Point: NIST Abandons Universal Data for the National Vulnerability Database
The deluge of vulnerability reports has reached such an overwhelming crescendo that even governmental infrastructures struggle to maintain
8 views
Daily Writeups
⤷ Title: Opera’s “Browser Connector” Gives ChatGPT and Claude the Power to “See” Your Tabs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:34:45 +0000
════════════════════════
⌗ Tags: #Technology #AI #Browser Connector #ChatGPT #Claude #Multimodal AI #Opera #Opera GX #Productivity Tools #Tech News #web browser
Daily CyberSecurity
Opera’s "Browser Connector" Gives ChatGPT and Claude the Power to "See" Your Tabs
Opera shatters vendor lock-in with "Browser Connector." Now, ChatGPT and Claude can read your active tabs and summarize web content directly within Opera One.
7 views
Daily Writeups
⤷ Title: Gemini vs. GenAI Fraud: How Google Blocked 8.3 Billion Malicious Ads in 2025
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:31:41 +0000
════════════════════════
⌗ Tags: #Malware #Ad Fraud #Ads Safety Report 2025 #Cyber Security #digital advertising #Gemini AI #Generative AI #Google Ads #Keerat Sharma #machine_learning #Online Safety
Daily CyberSecurity
Gemini vs. GenAI Fraud: How Google Blocked 8.3 Billion Malicious Ads in 2025
Google’s 2025 Ads Safety Report reveals how Gemini AI intercepted 99% of bad ads and reduced false account suspensions by 80%. Read the full scale of the defense.
11 views
Daily Writeups
⤷ Title: Triad Nexus’ $300M “Infrastructure Laundering” Machine Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:01:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AS16509 #AS8075 #AWS #brand impersonation #Cloud Security #CNAME Mapping #cyber fraud #Google Cloud #infrastructure laundering #Pig Butchering #Silent Push #Triad Nexus
Daily CyberSecurity
Triad Nexus’ $300M "Infrastructure Laundering" Machine Exposed
Triad Nexus has built a $300M fraud engine using "Infrastructure Laundering" on AWS and Google. See how they use geo-fencing and CNAME chains to evade the law.
8 views
Daily Writeups
⤷ Title: Common misconceptions debugged!
════════════════════════
𐀪 Author: Greg Jenkins
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Business Insights
Intigriti
Common AI misconceptions debugged!
AI and the growing ecosystem of tools built around it have now moved beyond early experimentation and into everyday use across the bug bounty community.
5 views
Daily Writeups
⤷ Title: ⚙️ 11. — Method-based Access Control Can Be Circumvented
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:51:01 GMT
════════════════════════
⌗ Tags: #web_security #portswigger #cybersecurity #bug_bounty
Medium
⚙️ 11. — Method-based Access Control Can Be Circumvented
Difficulty: 🟡 Practitioner
17 views
Daily Writeups
⤷ Title: ⚙️ 10. — URL-based Access Control Can Be Circumvented — X -Original-URL
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:39:02 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #cybersecurity #web_security
Medium
⚙️ 10. — URL-based Access Control Can Be Circumvented — X -Original-URL
Difficulty: 🟡 Practitioner
12 views
Daily Writeups
⤷ Title: Tokenomics Exploits: When Design Becomes an Attack Vector
════════════════════════
𐀪 Author: Abraham
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:14:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #smart_contract_security #bug_bounty #smart_contracts #blockchain
Medium
Tokenomics Exploits: When Design Becomes an Attack Vector
Why the most dangerous crypto vulnerabilities aren’t in the code they’re in the incentives
14 views
Daily Writeups
⤷ Title: Never thought I’d hack it. How I found two XSS on a daily used web app?
════════════════════════
𐀪 Author: O iluminado_x86
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:55:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ethical_hacking #bug_bounty_tips #xss_attack
Medium
Never thought I’d hack it. How I found two XSS on a daily used web app?
I use this site almost every day. Never thought I’d hack it.
10 views
Daily Writeups
⤷ Title: Beginner Mistakes in Recon — And How Professionals Avoid Them
════════════════════════
𐀪 Author: Sunjid Ahmed Siyem
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:02:55 GMT
════════════════════════
⌗ Tags: #passive_reconnaissance #active_reconnaissance #reconnaissance #recon_mistakes #bug_bounty
Medium
Beginner Mistakes in Recon — And How Professionals Avoid Them
Reconnaissance is the foundation of bug hunting. Yet most beginners make their biggest mistakes at exactly this stage — which is why they…
14 views
Daily Writeups
⤷ Title: How to Run a Real-World Phishing Simulation (End-to-End Guide)-Part-1
════════════════════════
𐀪 Author: Kislay Kumar
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 08:43:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #phishing #bug_bounty
Medium
How to Run a Real-World Phishing Simulation (End-to-End Guide)-Part-1
Phishing simulations, when done correctly and ethically, are one of the most effective ways to measure and improve an organization’s…
12 views
Daily Writeups
⤷ Title: PortSwigger: DOM-based vulnerabilities Labs
════════════════════════
𐀪 Author: Abdelhamid Elbouz
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:52:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #portswigger #dom_based_xss #hacking
Medium
PortSwigger: DOM-based vulnerabilities Labs
Lab: DOM XSS using web messages
18 views
Daily Writeups
⤷ Title: The Hidden Art of Speedrunning Reality: Where Glitches Become Skill
════════════════════════
𐀪 Author: Franziska "Ziska" Fink
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 10:01:06 GMT
════════════════════════
⌗ Tags: #speedrunning #cybersecurity #hacking #reverse_engineering #gaming_culture
Medium
The Hidden Art of Speedrunning Reality: Where Glitches Become Skill
Speedrunners do not play games the way they were designed.
13 views
Daily Writeups
⤷ Title: Will Quantum Computers Really Break Bitcoin and Solana Wallets?
════════════════════════
𐀪 Author: Blockchain_Privacy
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 09:55:45 GMT
════════════════════════
⌗ Tags: #quantum_computing #crypto #hacking #cryptocurrency #finance
Medium
Will Quantum Computers Really Break Bitcoin and Solana Wallets?
Every few months, the same headline comes around again.
11 views