Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: The $1.5M Purrlend Heist: Cross-Chain Chaos Signals a Brutal $800M Month for DeFi Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:23:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Crypto Trends #Cross_Chain Bridge #Crypto Security #DeFi Hack #Drift Protocol #HyperEVM #KelpDAO #Lazarus Group #MegaETH #NTLM Coercion #Purrlend #Smart Contract Audit
Penetration Testing Tools
The $1.5M Purrlend Heist: Cross-Chain Chaos Signals a Brutal $800M Month for DeFi Security
The cryptocurrency landscape has received yet another ominous signal as adversaries successfully breached yet another DeFi platform, leaving
9 views
Daily Writeups
⤷ Title: OpenAI’s GPT and Codex Models Officially Join Amazon Bedrock
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 08:30:27 +0000
════════════════════════
⌗ Tags: #Technology #Agentic AI #AI Agents #Amazon Bedrock #AWS #Cloud Computing #Codex #DevSecOps #enterprise AI #GPT_4 #machine_learning #OpenAI
Daily CyberSecurity
OpenAI’s GPT and Codex Models Officially Join Amazon Bedrock
AWS and OpenAI expand their alliance, bringing GPT models, Codex, and managed AI agents to Amazon Bedrock with enterprise-grade security and consolidated billing.
11 views
Daily Writeups
⤷ Title: AWS Launches “Amazon Quick” to Bridge the Gap Between Desktop and Cloud
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 08:06:58 +0000
════════════════════════
⌗ Tags: #Technology #Agentic AI #AI Desktop Assistant #Amazon Quick #AWS #Enterprise Productivity #Generative AI 2026 #Google Workspace #Long_Term Memory #Microsoft 365 #Multi_Platform Integration #Salesforce #Slack
Daily CyberSecurity
AWS Launches "Amazon Quick" to Bridge the Gap Between Desktop and Cloud
AWS unveils Amazon Quick, a "borderless" desktop AI assistant with long-term memory. It integrates local files with Slack, Teams, and Salesforce for proactive work.
12 views
Daily Writeups
⤷ Title: iOS 27 and Google Gemini are Turning the iPhone into an AI Powerhouse
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:45:49 +0000
════════════════════════
⌗ Tags: #Technology #Apple Intelligence #Apple Photos #Computational Photography #Generative AI #Google Gemini #iOS 27 #iPhone AI #Siri 2.0 #Spatial Photos #Vision Pro #WWDC 2026
Daily CyberSecurity
iOS 27 and Google Gemini are Turning the iPhone into an AI Powerhouse
Apple’s iOS 27 leaks reveal a massive AI pivot: a Gemini-powered Siri App and generative "Extend" and "Reframe" tools to rival Google’s Magic Editor.
9 views
Daily Writeups
⤷ Title: Silicon Valley’s Martial Pivot: Google Cedes “Veto Power” to the Pentagon in Classified AI Pact
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:06:28 +0000
════════════════════════
⌗ Tags: #Technology #2026 Tech News #AI Ethics #Anthropic #Department of Defense #Gemini AI #google #Military AI #national security #OpenAI #Pentagon #Project Maven 2.0 #Sundar Pichai #Trump Administration #xAI
Daily CyberSecurity
Silicon Valley’s Martial Pivot: Google Cedes "Veto Power" to the Pentagon in Classified AI Pact
Google signs a secret deal with the Pentagon, allowing Gemini AI use for "any lawful purpose." With no veto power, 600 employees revolt over ethics and safety.
12 views
Daily Writeups
⤷ Title: Tall Tales: China’s Private Contractors and the Global Hunt for Dissent
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:03:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #china #Citizen Lab #cyber_espionage #Digital Transnational Repression #DTR #GLITTER CARP #Human Rights #ICIJ #Military_Civil Fusion #phishing #Scilla Alecci #SEQUIN CARP #social engineering
Daily CyberSecurity
Tall Tales: China’s Private Contractors and the Global Hunt for Dissent
Citizen Lab reveals "Tall Tales," a PRC campaign using GLITTER CARP and SEQUIN CARP to hunt activists and ICIJ journalists via private contractors.
6 views
Daily Writeups
⤷ Title: Amazon Connect Reinvents the Enterprise as an AI-Powered “Operating Brain”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:03:10 +0000
════════════════════════
⌗ Tags: #Technology #Agent_as_a_Service #Agentic AI #AI Recruitment #Amazon Connect #Amazon Connect Health #AWS #Enterprise Automation #Generative AI #Humorphism #Supply Chain Optimization
Daily CyberSecurity
Amazon Connect Reinvents the Enterprise as an AI-Powered "Operating Brain"
Amazon Connect evolves into a suite of Agentic AI solutions for supply chain, hiring, and health. Discover how AWS is leading the shift to Agent-as-a-Service.
9 views
Daily Writeups
⤷ Title: ⚙️ 08. — JWT authentication bypass via algorithm confusion with no exposed key
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 08:21:01 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #web_security #cybersecurity
Medium
⚙️ 08. — JWT authentication bypass via algorithm confusion with no exposed key
Difficulty: 🔴 Expert
13 views
Daily Writeups
⤷ Title: ⚙️ 07. — JWT authentication bypass via algorithm confusion
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 08:11:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #portswigger #cybersecurity #web_security
Medium
⚙️ 07. — JWT authentication bypass via algorithm confusion
Difficulty: 🔴 Expert
7 views
Daily Writeups
⤷ Title: ⚙️ 06. — JWT Authentication Bypass via kid Header Path Traversal
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 08:01:02 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #web_security #cybersecurity
Medium
⚙️ 06. — JWT Authentication Bypass via kid Header Path Traversal
Difficulty: 🟡 Practitioner
11 views
Daily Writeups
⤷ Title: ⚙️ 05. — JWT Authentication Bypass via JKU Header Injection
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:51:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #portswigger
Medium
⚙️ 05. — JWT Authentication Bypass via JKU Header Injection
Difficulty: 🟡 Practitioner
7 views
Daily Writeups
⤷ Title: ⚙️ 04. — JWT Authentication Bypass via JWK Header Injection
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:41:01 GMT
════════════════════════
⌗ Tags: #portswigger #bug_bounty #web_security #cybersecurity
Medium
⚙️ 04. — JWT Authentication Bypass via JWK Header Injection
Difficulty: 🟡 Practitioner
7 views
Daily Writeups
⤷ Title: ⚙️ 03. — JWT Authentication Bypass via Weak Signing Key
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:31:01 GMT
════════════════════════
⌗ Tags: #web_security #portswigger #cybersecurity #bug_bounty
Medium
⚙️ 03. — JWT Authentication Bypass via Weak Signing Key
Difficulty: 🟡 Practitioner
7 views
Daily Writeups
⤷ Title: ⚙️ 02. — JWT Authentication Bypass via Flawed Signature Verification
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:21:01 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #portswigger #bug_bounty
Medium
⚙️ 02. — JWT Authentication Bypass via Flawed Signature Verification
Difficulty: 🟢 Apprentice
5 views
Daily Writeups
⤷ Title: ⚙️ 01. — JWT Authentication Bypass via Unverified Signature
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:11:01 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #portswigger #cybersecurity
Medium
⚙️ 01. — JWT Authentication Bypass via Unverified Signature
Difficulty: 🟢 Apprentice
5 views
Daily Writeups
⤷ Title: JWT Vulnerabilities
════════════════════════
𐀪 Author: The4v1
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #portswigger #web_security #cybersecurity
Medium
🪙 JWT Vulnerabilities
🧠 What are JSON Web Tokens (JWT) ?
4 views
Daily Writeups
⤷ Title: Hacking Buku Tamu: Eksperimen Sederhana Membedah Celah XSS
════════════════════════
𐀪 Author: Arfiandafirsta
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:27:12 GMT
════════════════════════
⌗ Tags: #xss_attack #vulnerability #hacking #website_development #web_security
Medium
Hacking Buku Tamu: Eksperimen Sederhana Membedah Celah XSS
Pernah dengar akun orang tiba-tiba kena hack cuma gara-gara ngeklik sebuah link? Atau lagi asyik buka web, eh malah dibombardir pop-up…
5 views
Daily Writeups
⤷ Title: Small Office Cybersecurity Checklist Every Business Should Follow in 2026
════════════════════════
𐀪 Author: mrwhite18
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 08:11:01 GMT
════════════════════════
⌗ Tags: #it_support #cybersecurity #info_sec_writeups #cybersecurity_checklist #infosec
Medium
Small Office Cybersecurity Checklist Every Business Should Follow in 2026
Most cyber attacks don’t start with large enterprises.
10 views
Daily Writeups
⤷ Title: Understanding Vulnerability Databases — THM WriteUp
════════════════════════
𐀪 Author: Sumit Shrestha
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:46:11 GMT
════════════════════════
⌗ Tags: #thm_writeup #tryhackme_walkthrough #tryhackme #database #tryhackme_writeup
Medium
Understanding Vulnerability Databases — THM WriteUp
Task 1: Introduction
11 views
Daily Writeups
⤷ Title: TryHackMe h4cked Part 2 Walkthrough | FTP Brute Force, Reverse Shell & Root via sudo
════════════════════════
𐀪 Author: Arun1x
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 06:58:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #reverse_shell #privilege_escalation #ethical_hacking #tryhackme
Medium
TryHackMe: h4cked — Someone Was Already Inside
TryHackMe: h4cked — Someone Was Already Inside A .pcap file tells the whole story. All you have to do is read it. Most rooms ask you to break in. This one hands you the evidence and asks: can you …
27 views
Daily Writeups
⤷ Title: step by step reverse engineering in allsafe finding the deep link vulnerability
════════════════════════
𐀪 Author: Naufal Al-Qhifari
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:45:51 GMT
════════════════════════
⌗ Tags: #android_development #ethical_hacking #pentesting #cybersecurity #reverse_engineering
Medium
step by step reverse engineering in allsafe finding the deep link vulnerability
Here, I learned how to find a deep link vulnerability in AllSafe, which is . AllSafe (an intentionally vulnerable Android app)
This app is…
17 views