Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: How I Reproduced WannaCry in a Lab — And What It Taught Me About Ransomware Defense
════════════════════════
𐀪 Author: Sukansh
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:10:49 GMT
════════════════════════
⌗ Tags: #infosec #programming #cybersecurity #ethical_hacking #malware_analysis
Medium
How I Reproduced WannaCry in a Lab — And What It Taught Me About Ransomware Defense
A step-by-step walkthrough of simulating the EternalBlue exploit chain, observing file encryption behavior, and building detection rules…
9 views
Daily Writeups
⤷ Title: Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
════════════════════════
𐀪 Author: Cameron Bardin (MDVKG)
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:26:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #active_directory #kerberoasting #kerberos #penetration_testing
Medium
Kerberoasting in 2026: Why “We Didn’t Crack It” Is Still a Critical Active Directory Finding
And why “we ran the wordlist and got nothing” is the most dangerous sentence in a pentest debrief.
6 views
Daily Writeups
⤷ Title: Masquerade CTF Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 13:47:02 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #tryhackme_writeup #tryhackme #tryhackme_walkthrough #ctf_writeup
Medium
Masquerade CTF Notes | TryHackMe
Analyze malware traffic, decrypt payloads, and uncover attacker commands.
5 views
Daily Writeups
⤷ Title: The Dorking Manifesto: Uncovering the Hidden Web
════════════════════════
𐀪 Author: Ishant
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:47:41 GMT
════════════════════════
⌗ Tags: #ethical_hacking #osint #open_source #google_dorking #cybersecurity
Medium
The Dorking Manifesto: Uncovering the Hidden Web
“The internet forgets nothing. It only hides things badly.”
11 views
Daily Writeups
⤷ Title: Cyber Security: The First Line of Defense in a Connected World
════════════════════════
𐀪 Author: Arti Sandip Jadhav
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:39:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #online_safety #cybersecurity #data_security #technolo
Medium
🔐 Cyber Security: The First Line of Defense in a Connected World
Cybersecurity Is Now More Important Than Ever Before!
18 views
Daily Writeups
⤷ Title: Part 2 : Cross-Site Scripting (XSS)
════════════════════════
𐀪 Author: Protégé IGDTUW
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:14:58 GMT
════════════════════════
⌗ Tags: #xss_attack #web_attack #xss_vulnerability #xss_bypass
Medium
Part 2 : Cross-Site Scripting (XSS)
Real-World Web Attacks Explained
27 views
Daily Writeups
⤷ Title: Part 1 : SQL Injection Attacks
════════════════════════
𐀪 Author: Protégé IGDTUW
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 14:15:49 GMT
════════════════════════
⌗ Tags: #sql_server #web_attack #sql #sql_injection
Medium
Part 1 : SQL Injection Attacks
Real-World Web Attacks Explained
39 views
Daily Writeups
⤷ Title: Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 16:22:03 +0000
════════════════════════
⌗ Tags: #Data Breaches #Security #Cyber Attack #Cybersecurity #data breach #Polymarket #Vulnerability #Xorcat
Hackread
Polymarket Rejects Data Breach Claims as Hacker Alleges 300K Records Stolen
A hacker using the alias "Xorcat" claims to have breached Polymarket using API flaws, but research suggests the leak could be just data scraping incident.
31 views
Daily Writeups
⤷ Title: The “Mini Shai-Hulud” Attack Hijacking SAP Developer Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:04:51 +0000
════════════════════════
⌗ Tags: #Malware #@cap_js/sqlite #aws security #Azure #Bun runtime #CI/CD security #credential stealer #infosec #Kubernetes #mbt #Mini Shai_Hulud #npm malware #SAP #supply chain attack
Daily CyberSecurity
The "Mini Shai-Hulud" Attack Hijacking SAP Developer Pipelines
SAP developers are under attack. A surgical credential stealer hijacks CI/CD runners and cloud tokens via npm preinstall hooks. Rotate all secrets immediately.
25 views
Daily Writeups
⤷ Title: When AI Coding Assistants Become Attack Vectors: Cursor Vulnerability Raises Developer Security…
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:00:54 GMT
════════════════════════
⌗ Tags: #application_security #ai_coding #devsecops #cybersecurity #ai
Medium
When AI Coding Assistants Become Attack Vectors: Cursor Vulnerability Raises Developer Security…
The rapid adoption of AI powered coding assistants is transforming software development, but it is also introducing new security risks. A…
15 views
Daily Writeups
⤷ Title: Most Hacked Businesses Do the Wrong Things First
════════════════════════
𐀪 Author: Jusjaesho
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:40:17 GMT
════════════════════════
⌗ Tags: #incident_response #hacking #data_breach #small_business #cybersecurity
Medium
Most Hacked Businesses Do the Wrong Things First
The instinct is to panic. That’s understandable. What’s less understandable is that most of the advice circulating about what to do after a…
19 views
Daily Writeups
⤷ Title: entry 003 · SOC journey
════════════════════════
𐀪 Author: Naana Sarkodie
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:33:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #cyber_security_awareness #infosec #data_privacy
Medium
entry 003 · SOC journey
Controls, categories and the data we are all protecting
13 views
Daily Writeups
⤷ Title: HTB Series — Facts (Easy Box)
════════════════════════
𐀪 Author: ScriptDieYou
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 16:18:46 GMT
════════════════════════
⌗ Tags: #hackthebox #cybersecurity #penetration_testing
Medium
HTB Series — Facts (Easy Box)
TLDR; Bypassed a User-Agent allowlist to reach a Camaleon CMS 2.9.0 instance, escalated to admin via a mass-assignment bug, looted AWS S3…
12 views
Daily Writeups
⤷ Title: Checkpoint room THM
════════════════════════
𐀪 Author: Napulitanka
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:40:53 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #tryhackme_writeup
Medium
Checkpoint room THM
Hey everyone reading this writeup!
21 views
Daily Writeups
⤷ Title: Website Anda Bisa Diretas dalam Hitungan Menit: Ini Penyebabnya!
════════════════════════
𐀪 Author: Diva
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 15:17:39 GMT
════════════════════════
⌗ Tags: #sql_injection #xs #keamanan_web
Medium
Website Anda Bisa Diretas dalam Hitungan Menit: Ini Penyebabnya!
Bayangkan ini: Anda baru saja selesai menyusun laporan keuangan bulanan, meninggalkan laptop sebentar untuk mengambil kopi. Dua menit…
29 views
Daily Writeups
⤷ Title: SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 21:56:00 +0530
════════════════════════
⌗ Tags: No_Tags
23 views
Daily Writeups
⤷ Title: New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 20:13:00 +0530
════════════════════════
⌗ Tags: No_Tags
23 views
Daily Writeups
⤷ Title: Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 17:32:00 +0530
════════════════════════
⌗ Tags: No_Tags
16 views
Daily Writeups
⤷ Title: New AI-Powered Bluekit Phishing Kit Targets Major Platforms with MFA Bypass Attacks
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 17:19:11 +0000
════════════════════════
⌗ Tags: #Security #Cyber Crime #Phishing Scam #Bluekit #Cybersecurity #Fraud #Phishing #Phishing Kit #Scam
Hackread
New AI-Powered Bluekit Phishing Kit Targets Major Platforms with MFA Bypass Attacks
Bluekit Phishing Kit is a new PhaaS tool that targets major platforms, using AiTM techniques to steal session data and bypass MFA protections.
13 views
Daily Writeups
⤷ Title: Beyond the Buy Button: Google and FIDO Alliance Launch AP2 to Power the Era of Autonomous AI Shopping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 18:16:30 +0000
════════════════════════
⌗ Tags: #Technology #Agent Payments Protocol #AI Agents #AP2 #Autonomous Commerce #FIDO Alliance #Fintech 2026 #Google Payments #Human Not Present #Mastercard #Passkeys #Verifiable Intent
Daily CyberSecurity
Beyond the Buy Button: Google and FIDO Alliance Launch AP2 to Power the Era of Autonomous AI Shopping
Google donates the AP2 protocol to the FIDO Alliance, launching v0.2 with "Human Not Present" payments. Secure your AI agents with the new Verifiable Intent standard.
13 views
Daily Writeups
⤷ Title: The Global Takedown: FBI and International Allies Dismantle Billion-Dollar Pig-Butchering Empires
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 17:36:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Fraud #Cybercrime #Dubai Police #fbi #Financial Crime #IC3 #infosec #Ko Thet Company #money laundering #Operation Level Up #Pig Butchering #Sanduo Group
Daily CyberSecurity
The Global Takedown: FBI and International Allies Dismantle Billion-Dollar Pig-Butchering Empires
FBI, Dubai, and China dismantle 9 "pig-butchering" centers and arrest 276. Operation Level Up saves victims $562M in massive crypto fraud crackdown.
17 views