Daily Writeups
@Daily_Writeups
3.58K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.58K subscribers
Daily Writeups
⤷ Title: The AI Multiplier: How North Korea’s “HexagonalRodent” Turned ChatGPT into a $12M Crypto Heist
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:52:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ChatGPT #Cryptocurrency Theft #Cursor AI #Cybercrime 2026 #Expel #Famous Chollima #HexagonalRodent #malware analysis #North Korea #Social Engineering #Web3 Security
Penetration Testing Tools
The AI Multiplier: How North Korea’s "HexagonalRodent" Turned ChatGPT into a $12M Crypto Heist
Inexperienced North Korean cyber operatives have successfully exfiltrated millions of dollars in cryptocurrency over a span of several
13 views
Daily Writeups
⤷ Title: Digital Siege: The “Midnight Hammer” and Iran’s 52-Day Descent into Absolute Isolation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:49:52 +0000
════════════════════════
⌗ Tags: #Cyber Security #Cisco #cyber warfare 2026 #Internet Pro #Iran Internet Blackout #MikroTik #National Information Network #Operation Midnight Hammer #US Cyber Command #Volt Typhoon #White SIMs
Penetration Testing Tools
Digital Siege: The "Midnight Hammer" and Iran's 52-Day Descent into Absolute Isolation
While Iran remains sequestered from the global digital commons, a distinct narrative is gaining momentum within its borders:
14 views
Daily Writeups
⤷ Title: Ancient D-Link Routers Hijacked by New “Tuxnokill” Mirai Botnet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:46:49 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #Akamai SIRT #CVE_2025_29635 #D_Link DIR_823X #DDOS attack #End of Life Hardware #IoT Malware #Mirai botnet #router security #TP_Link CVE_2023_1389 #Tuxnokill #ZTE RCE
Penetration Testing Tools
Ancient D-Link Routers Hijacked by New "Tuxnokill" Mirai Botnet
Routers that have long been decommissioned from official support have suddenly become the epicenter of a resurgent wave
14 views
Daily Writeups
⤷ Title: Apple Issues Emergency Fix for iPhone Notification “Leaks” Exploited by Forensics
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:45:08 +0000
════════════════════════
⌗ Tags: #Apple #Vulnerability #CVE_2026_28950 #Data Security #Encryption #FBI #Forensics #iOS 26.4.2 #iPhone Update #Notification Database #privacy #Signal Messenger
Penetration Testing Tools
Apple Issues Emergency Fix for iPhone Notification "Leaks" Exploited by Forensics
Apple has expeditiously addressed a critical vulnerability within the iPhone and iPad architecture, wherein notifications designated for deletion
17 views
Daily Writeups
⤷ Title: The Critical 9.1 Flaw in ASP.NET Core that Turns Cookies into Master Keys
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:44:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #.NET 10 #ASP.NET Core #cryptography #CVE_2026_40372 #Cybersecurity 2026 #Data Protection #Infosec #Microsoft #Patch Tuesday #privilege escalation #web security
Penetration Testing Tools
The Critical 9.1 Flaw in ASP.NET Core that Turns Cookies into Master Keys
An unforeseen regression within a software update has inadvertently caused a security mechanism to serve as a gateway
16 views
Daily Writeups
⤷ Title: The Global Surge in Modbus/TCP Probes Targeting Our Physical World
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:18:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cato Networks #Critical Infrastructure #Cyber Reconnaissance #ICS security #industrial control systems #infosec #Manufacturing Security #Modbus #OT Security #PLC #SCADA
Daily CyberSecurity
The Global Surge in Modbus/TCP Probes Targeting Our Physical World
Cato Networks reveals 235,500+ Modbus probes on PLCs across 70 countries. Learn how attackers fingerprint and hijack industrial control systems. Patch now.
18 views
Daily Writeups
⤷ Title: “Bug Bounty Bootcamp #35: SSRF — Turning the Server Into Your Personal Proxy to Hack Internal…
════════════════════════
𐀪 Author: Aman Sharma
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:07:15 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #bug_bounty #cybersecurity #technology
Medium
“Bug Bounty Bootcamp #35: SSRF — Turning the Server Into Your Personal Proxy to Hack Internal Networks”
Imagine if you could trick a web server into visiting internal websites, reading local files, and even scanning private IP ranges on your…
17 views
Daily Writeups
⤷ Title: How a Newline Injection in Folder Names Broke Access Revocation: 750$ Bug
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:04:48 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #injection #infosec #cybersecurity
Medium
How a Newline Injection in Folder Names Broke Access Revocation: 750$ Bug
Sometimes the smallest input validation issues can snowball into serious business logic flaws. This bug is a great example — a simple…
17 views
Daily Writeups
⤷ Title: Wapiti Deep Dive | Web App Security Testing Tool
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:05:46 GMT
════════════════════════
⌗ Tags: #web3 #writing #hacking #cybersecurity #web_development
Medium
Wapiti Deep Dive | Web App Security Testing Tool
Web Application Security Testing Tool Explained
10 views
Daily Writeups
⤷ Title: Mythos and the cyberhacking panic — what this means for crypto
════════════════════════
𐀪 Author: Steven Boykey Sidley
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:10:45 GMT
════════════════════════
⌗ Tags: #claude_mythos #cybersecurity #hacking #cryptocurrency
Medium
Mythos and the cyberhacking panic — what this means for crypto
(Image: via Currrency News)
18 views
Daily Writeups
⤷ Title: Active Directory Pentest Lab Report — SOUPEDECODE.LOCAL
════════════════════════
𐀪 Author: ZeroDay-Security-Services
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:04:13 GMT
════════════════════════
⌗ Tags: #information_security #red_team #ethical_hacking #cybersecurity #hacking
Medium
Active Directory Pentest Lab Report — SOUPEDECODE.LOCAL
Author: Vijay Ishan Chowdhury Organization: ZeroDay Security Services Lab Type: Active Directory Exploitation (Red Team Simulation)
15 views
Daily Writeups
⤷ Title: The Shadow Chain (Part II): PowerShell, SSL/TLS, and the Art of Bypassing Corporate Firewalls
════════════════════════
𐀪 Author: Frank Mccausland
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:11:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #powershell #blue_team #infosec #red_team
Medium
The Shadow Chain (Part II): PowerShell, SSL/TLS, and the Art of Bypassing Corporate Firewalls
Introduction
18 views
Daily Writeups
⤷ Title: Spring — Spring Boot Actuator RCE + Symlink Arbitrary Write to Root | TryHackMe
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:04:02 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #penetration_testing #pentesting #ethical_hacking
Medium
Spring — Spring Boot Actuator RCE + Symlink Arbitrary Write to Root | TryHackMe
This machine presents a deliberately misconfigured Spring Boot application sitting behind HTTPS on port 443. The attack surface opened…
12 views
Daily Writeups
⤷ Title: Is Penetration Testing Becoming a Complex Process
════════════════════════
𐀪 Author: Reema K.R
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:53:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #penetration_testing #software_testing #software_development
Medium
Is Penetration Testing Becoming a Complex Process
Penetration testing, often called pentesting, is a part of modern cybersecurity. It has helped organisations identify vulnerabilities…
18 views
Daily Writeups
⤷ Title: AI Forensics | TryHackMe
════════════════════════
𐀪 Author: Binish Alamgir
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:33:03 GMT
════════════════════════
⌗ Tags: #tryhackme #programming #cybersecurity #tryhackme_walkthrough #technology
Medium
AI Forensics | TryHackMe
Task 1 Introduction:
13 views
Daily Writeups
⤷ Title: AI/ML Security Threats | TryHackMe
════════════════════════
𐀪 Author: Binish Alamgir
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:14:37 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #tryhackme #programming #tryhackme_walkthrough
Medium
AI/ML Security Threats | TryHackMe
Task 1 Introduction:
13 views
Daily Writeups
⤷ Title: OSINT REHBERİ: Sadece Bir Kullanıcı Adıyla Seni Takip Ettim
════════════════════════
𐀪 Author: CASSANDRA
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:35:46 GMT
════════════════════════
⌗ Tags: #osint_tool #cassandra #tryhackme
Medium
OSINT REHBERİ: Sadece Bir Kullanıcı Adıyla Seni Takip Ettim
Herkese Merhaba! Bugün sizinle bir “dijital ayak izini” takip edeceğiz. Değerli üyemiz İrem Kılıçer’in yazısını sizlerle paylaşıyoruz. Peki…
19 views
Daily Writeups
⤷ Title: Evil-GPT | TryHackMe Write-up
════════════════════════
𐀪 Author: iIyas
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:31:01 GMT
════════════════════════
⌗ Tags: #ai #llm #ctf #ctf_writeup #tryhackme
Medium
Evil-GPT | TryHackMe Write-up
Hello everyone, today we’ll solve the Evil GPT room where a rogue AI has taken control of a system and is using a natural language…
17 views
Daily Writeups
⤷ Title: TryHackMe (THM) Blue Walkthrough + Answer
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 09:10:38 GMT
════════════════════════
⌗ Tags: #eternalblue #tryhackme_walkthrough #tryhackme
Medium
TryHackMe (THM) Blue Walkthrough + Answer
🔗Room Link : https://tryhackme.com/room/blue
31 views
Daily Writeups
⤷ Title: Attack Campaign: Tunisian Gov Database Breached,French Healthcare Data Stolen
════════════════════════
𐀪 Author: PhatomCandle
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 10:35:43 GMT
════════════════════════
⌗ Tags: #threat_intelligence #apt #sql_injection #cybersecurity
Medium
Attack Campaign: Tunisian Gov Database Breached,French Healthcare Data Stolen
Attacker's server reveals SQLi breaches of Tunisian gov databases and theft of many French patient records in a suspected APT campaign
40 views
Daily Writeups
⤷ Title: Bridging the AI Agent Authority Gap: Continuous Observability as the Decision Engine
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 17:19:00 +0530
════════════════════════
⌗ Tags: No_Tags
32 views