Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: A Camping Trip… and My Orders Were Suddenly Exposed
════════════════════════
𐀪 Author: OffroadMouse
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:59:00 GMT
════════════════════════
⌗ Tags: #web_security #idor #cybersecurity #bug_bounty #vulnerability
Medium
去露個營，訂單怎麼被看光光了?
本文僅以提升資訊安全、教育與研究為目的，所有測試與描述皆以保護使用者與系統安全為優先。針對文中所揭露之漏洞，已由 HITCON ZeroDay 協助通報該組織。
13 views
Daily Writeups
⤷ Title: How Good Are AI Agents at Finding Web Vulnerabilities (Part 3)
════════════════════════
𐀪 Author: Tuomo Makkonen
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:44:27 GMT
════════════════════════
⌗ Tags: #ai_agent #cybersecurity #application_security #artificial_intelligence
Medium
How Good Are AI Agents at Finding Web Vulnerabilities (Part 3)
We gave two AI pentesting harnesses the same model, the same target, and the same vulnerabilities. They came back with very different…
15 views
Daily Writeups
⤷ Title: Ransomware Hit You？ Do These 5 Things Right Now.
════════════════════════
𐀪 Author: Ransomrestore
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:09:46 GMT
════════════════════════
⌗ Tags: #infosec #ransomware #hacking #cybersecurity #data_recovery
Medium
Ransomware Hit You？ Do These 5 Things Right Now.
Your screen just changed. There’s a message. Countdown timer. Bitcoin address. Files you can’t open.
15 views
Daily Writeups
⤷ Title: Part 6 — Real Attack Scenarios (Post-Lockdown Exploitation)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:59:18 GMT
════════════════════════
⌗ Tags: #security #cybersecurity #hacking #api #android
Medium
🔥 Part 6 — Real Attack Scenarios (Post-Lockdown Exploitation)
After everything we’ve covered, one thing should be clear:
14 views
Daily Writeups
⤷ Title: WaTF Bank Walkthrough (Part 4): Exploiting Android App Security Flaws
════════════════════════
𐀪 Author: George Petropoulos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:09:16 GMT
════════════════════════
⌗ Tags: #penetration_testing #android_development #technology #cybersecurity #hacking
Medium
WaTF Bank Walkthrough (Part 4): Exploiting Android App Security Flaws
Android Mobile Application Security Testing Write-Up
17 views
Daily Writeups
⤷ Title: ShellForge: Building a Constraint-Aware Shellcode Generator from Scratch
════════════════════════
𐀪 Author: Oderinde Toluwanimi
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:07:28 GMT
════════════════════════
⌗ Tags: #exploit_development #penetration_testing #programming #cybersecurity #hacking
Medium
ShellForge: Building a Constraint-Aware Shellcode Generator from Scratch
How I built a multi-architecture shellcode synthesiser in C that outperforms msfvenom on bad-char avoidance — and what I learned about…
15 views
Daily Writeups
⤷ Title: URL Anatomy & Encoding: Why Your Payloads Break
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:08:58 GMT
════════════════════════
⌗ Tags: #web_development #penetration_testing #ethical_hacking #cybersecurity #web_security
Medium
URL Anatomy & Encoding: Why Your Payloads Break
Your payload was correct. It just never arrived at the server that way.
15 views
Daily Writeups
⤷ Title: Steganography is Not Invisible: Mengungkap Blind Spot di SOC dari Perspektif Red & Blue Team
════════════════════════
𐀪 Author: Panggil Aku Paman
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:33:09 GMT
════════════════════════
⌗ Tags: #steganography #ethical_hacking #red_team #data_exfiltration #blue_team
Medium
Steganography is Not Invisible: Mengungkap Blind Spot di SOC dari Perspektif Red & Blue Team
Ada satu jenis alert yang jarang membuat SOC panik. Bukan malware, bukan credential theft, bukan exploit aktif. Hanya file gambar, tidak…
14 views
Daily Writeups
⤷ Title: Mapping Cyber Attacks to the OSI Layers
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:26:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #network_security #osi_model #networking
Medium
Mapping Cyber Attacks to the OSI Layers
Cyber-attacks do not happen randomly. Every attack targets a specific function in how systems communicate.
14 views
Daily Writeups
⤷ Title: AI System Reconnaissance — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Rotimi Ishola
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:38:52 GMT
════════════════════════
⌗ Tags: #system_architecture #api_security #security_misconfiguration #ai_systems #sensitive_data_exposure
Medium
AI System Reconnaissance — TryHackMe Walkthrough
29.04.2026
14 views
Daily Writeups
⤷ Title: Salesforce Security Isn’t Enough: Why Your Integration Layer Matters More
════════════════════════
𐀪 Author: Prevoyance IT Solutions
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:01:07 GMT
════════════════════════
⌗ Tags: #enterprise_architecture #cybersecurity #api_security #apigee #salesforce
Medium
Salesforce Security Isn’t Enough: Why Your Integration Layer Matters More
I’ve noticed something interesting in conversations with teams working on Salesforce security.
29 views
Daily Writeups
⤷ Title: Membedah Celah Keamanan SQL Injection pada Form Login dan Panduan Mitigasiny
════════════════════════
𐀪 Author: Reginald Petrus Silaban
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 05:31:07 GMT
════════════════════════
⌗ Tags: #sql_injection
Medium
Membedah Celah Keamanan SQL Injection pada Form Login dan Panduan Mitigasiny
Pendahuluan
38 views
Daily Writeups
⤷ Title: CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:16:00 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 08:33:45 +0000
════════════════════════
⌗ Tags: #Technology #Artificial Intelligence #AI #Cybersecurity #data breach #SaaS #Vulnerability
Hackread
Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026
Top AI-powered vendor risk platforms for SaaS companies in 2026, compare tools, features, and how to choose the right TPRM solution fast.
32 views
Daily Writeups
⤷ Title: Peering into the Cloud: Decode Windows Defender’s MAPS Protocol with the MAPS Cloud Scanner
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:41:37 +0000
════════════════════════
⌗ Tags: #Open Source Tool #API Fuzzing #Bond Protocol #cybersecurity research #malware analysis #MAPS Cloud Scanner #Microsoft Active Protection Service #reverse engineering #SHA_256 Lookup #threat intelligence #Windows Defender
Penetration Testing Tools
Peering into the Cloud: Decode Windows Defender’s MAPS Protocol with the MAPS Cloud Scanner
Interact directly with Microsoft’s MAPS backend. Use this research tool to analyze file reputations, reverse the Bond protocol, and fuzz Defender's cloud API.
21 views
Daily Writeups
⤷ Title: Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:35:39 +0000
════════════════════════
⌗ Tags: #Data Leak #Checkmarx #CVE_2026_33634 #data leak #GitHub Breach #KICS #LAPSUS$ #Mandiant #Open VSX #supply chain attack #TeamPCP #Trivy #VS Code extensions
Penetration Testing Tools
Supply Chain Fallout: LAPSUS$ Leaks 96GB of Stolen Checkmarx Data Following TeamPCP Breach
Checkmarx is grappling with a distressing sequel to its March security breach, as data exfiltrated from a private
14 views
Daily Writeups
⤷ Title: The “Snow” Storm: How UNC6692 Uses Microsoft Teams and Email Bombing to Breach Corporate Fortresses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:34:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #browser extension malware #Credential Harvesting #Cyber Security 2026 #Email Bombing #Google Threat Intelligence #Mandiant #Microsoft Teams phishing #SnowBasin #SnowBelt #SnowGlaze #Social Engineering #UNC6692
Penetration Testing Tools
The "Snow" Storm: How UNC6692 Uses Microsoft Teams and Email Bombing to Breach Corporate Fortresses
Corporate correspondence has once again emerged as a convenient portal for adversaries. In this nascent campaign, the assailants
10 views
Daily Writeups
⤷ Title: The Trojan Update: How “GlassWorm” Developers are Using Sleeper Extensions to Hijack Workspaces
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:32:31 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #Developer Security #extension security #GlassWorm #malware #OpenVSX #Socket #supply chain attack #Trojan Update #Visual Studio Code #VS Code
Penetration Testing Tools
The Trojan Update: How "GlassWorm" Developers are Using Sleeper Extensions to Hijack Workspaces
The GlassWorm campaign has resurfaced within the developer community, though the adversaries have adopted a more surreptitious operational
6 views
Daily Writeups
⤷ Title: The Poisoned Pipeline: How a GitHub Actions Flaw Infiltrated the Popular “Elementary-Data” Library
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:30:10 +0000
════════════════════════
⌗ Tags: #Malware #2026 Tech News #cloud security #Credential Stealer #Data Engineering #dbt #Docker #Elementary_data #GitHub Actions #GITHUB_TOKEN #PyPI #Python Security #supply chain attack
Penetration Testing Tools
The Poisoned Pipeline: How a GitHub Actions Flaw Infiltrated the Popular "Elementary-Data" Library
The ubiquitous Python library elementary-data has emerged as a conduit for the exfiltration of sensitive developer telemetry. The
5 views
Daily Writeups
⤷ Title: The PDF Trap: How the Anatsa Banking Trojan Infiltrated Google Play’s Top 200 Tools
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:26:56 +0000
════════════════════════
⌗ Tags: #Malware #Anatsa #Android malware #banking trojan #Cyber Espionage #Dropper App #Google Play Store #HEUR:Trojan_Downloader.AndroidOS.Anatsa.a #kaspersky #mobile security #Russian Cyber Threats
Penetration Testing Tools
The PDF Trap: How the Anatsa Banking Trojan Infiltrated Google Play’s Top 200 Tools
A clandestine Android dropper, masquerading as a mundane PDF reader, has once again infiltrated the Google Play Store.
8 views
Daily Writeups
⤷ Title: The $1.5M Purrlend Heist: Cross-Chain Chaos Signals a Brutal $800M Month for DeFi Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:23:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Crypto Trends #Cross_Chain Bridge #Crypto Security #DeFi Hack #Drift Protocol #HyperEVM #KelpDAO #Lazarus Group #MegaETH #NTLM Coercion #Purrlend #Smart Contract Audit
Penetration Testing Tools
The $1.5M Purrlend Heist: Cross-Chain Chaos Signals a Brutal $800M Month for DeFi Security
The cryptocurrency landscape has received yet another ominous signal as adversaries successfully breached yet another DeFi platform, leaving
10 views