Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Unmasking the Phoenix System’s Rogue BTS Smishing Empire
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 08:29:36 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Group_IB #infosec #Live_Phishing #MFA Bypass #Mouse System #OTP Interception #Phishing_as_a_Service #Phoenix System #Rogue BTS #smishing #Telegram fraud
Daily CyberSecurity
Unmasking the Phoenix System’s Rogue BTS Smishing Empire
Group-IB unmasks the Phoenix System: a PhaaS platform using rogue cell towers and live-dashboards to bypass MFA across 2,500+ domains. Read the full report.
23 views
Daily Writeups
⤷ Title: PromptMink Tricked AI Agents into Planting Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:02:27 +0000
════════════════════════
⌗ Tags: #Malware #AI security #Claude Opus #crypto drainer #Famous Chollima #infosec #LLMO Abuse #npm malware #PromptMink #ReversingLabs #supply chain attack #Vibe Coding
Daily CyberSecurity
PromptMink Tricked AI Agents into Planting Malware
ReversingLabs uncovers PromptMink: A DPRK campaign using LLM-generated npm packages to trick AI coding agents into installing crypto-stealing malware.
17 views
Daily Writeups
⤷ Title: Advanced Exploit Chains — Real Bug Bounty Scenarios (Part 3)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 01 May 2026 08:21:47 GMT
════════════════════════
⌗ Tags: #hacking #linux #security #bug_bounty #cybersecurity
Medium
🔥 Advanced Exploit Chains — Real Bug Bounty Scenarios (Part 3)
From “one bug” → “full system compromise”
13 views
Daily Writeups
⤷ Title: Stop Fuzzing WAFs: How I Used AI Noise & Trust Decay to Bypass Enterprise Firewalls (And…
════════════════════════
𐀪 Author: Kakashi
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:30:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #zero_day #red_team #bug_bounty #infosec
Medium
Stop Fuzzing WAFs: How I Used AI Noise & Trust Decay to Bypass Enterprise Firewalls (And Exfiltrated 390KB)
By kakashi4kx as Abhijith S
16 views
Daily Writeups
⤷ Title: eCPPT Powershell for Pentesters INE’s CTF 1 : A Practical Attack Story
════════════════════════
𐀪 Author: The.Flying.Wolf
════════════════════════
ⴵ Time: Fri, 01 May 2026 08:53:31 GMT
════════════════════════
⌗ Tags: #ethical_hacking_tools #powershell #penetration_testing #hacking #red_team
Medium
eCPPT Powershell for Pentesters INE’s CTF 1 : A Practical Attack Story
This wasn’t just another lab. It felt like walking into a poorly guarded building, where every unlocked door revealed something more…
15 views
Daily Writeups
⤷ Title: Understanding Vulnerability Databases | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 01 May 2026 08:59:40 GMT
════════════════════════
⌗ Tags: #vulnerability #database #cybersecurity #tryhackme
Medium
Understanding Vulnerability Databases | TryHackMe
Explore vulnerability databases, their importance, and practical usage during pentesting.
14 views
Daily Writeups
⤷ Title: Basic Vulnerability Identification Techniques | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 01 May 2026 08:53:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability #tryhackme
Medium
Basic Vulnerability Identification Techniques | TryHackMe
Learn the basics of vulnerability identification techniques.
19 views
Daily Writeups
⤷ Title: Team Walkthrough THM
════════════════════════
𐀪 Author: Darkman
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:16:14 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ctf #tryhackme
Medium
Team Walkthrough THM
Enumeration
15 views
Daily Writeups
⤷ Title: Res — THM Walkthrough
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:12:10 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #cybersecurity #ctf_writeup
Medium
Res — THM Walkthrough
This challenges seems to be related to redis. Let’s get to know about it a little bit.
30 views
Daily Writeups
⤷ Title: Startup Walkthrough THM
════════════════════════
𐀪 Author: Darkman
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:11:11 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme
Medium
Startup Walkthrough THM
Reconnaissance & Enumeration
23 views
Daily Writeups
⤷ Title: Mr Robot CTF
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:09:57 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf #ctf_writeup #cybersecurity
Medium
Mr Robot CTF
Let’s trigger an nmap scan to detect services running on the target machine
26 views
Daily Writeups
⤷ Title: Ethical Hacking Career: Truth vs Myths
════════════════════════
𐀪 Author: Manjot
════════════════════════
ⴵ Time: Fri, 01 May 2026 08:47:02 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
Ethical Hacking Career: Truth vs Myths
Overview
24 views
Daily Writeups
⤷ Title: Building a Home SOC Lab — From Zero to Detection Engineering
════════════════════════
𐀪 Author: 0xJad
════════════════════════
ⴵ Time: Fri, 01 May 2026 08:44:05 GMT
════════════════════════
⌗ Tags: #writeup #ethical_hacking #cybersecurity #soc_analyst #homelab
Medium
Building a Home SOC Lab — From Zero to Detection Engineering
This is a hands-on guide to building a real SOC lab at home. I wrote this after going through the entire process myself as someone coming…
40 views
Daily Writeups
⤷ Title: Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 01 May 2026 15:13:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: New DDoS Botnet Exploits Jenkins to Target Gaming Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 09:10:36 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CI/CD security #cyber_espionage #Darktrace #ddos #Game Server Security #Gaming Industry #Groovy Script #infosec #Jenkins #rce #UDP flood
Daily CyberSecurity
New DDoS Botnet Exploits Jenkins to Target Gaming Servers
Darktrace uncovers a new DDoS botnet hijacking Jenkins servers to target game servers. Protect your CI/CD pipeline from specialized gaming-layer attacks.
30 views
Daily Writeups
⤷ Title: I Found a 67K-User Data Leak… and Got Paid $0 (Here’s What You Can Learn)
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:57:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacker #information_technology #bug_bounty
Medium
I Found a 67K-User Data Leak… and Got Paid $0 (Here’s What You Can Learn)
I thought I had it.
24 views
Daily Writeups
⤷ Title: From a Simple Image Upload to Account Takeover: Stored XSS via File Metadata
════════════════════════
𐀪 Author: Kanishkakhandelwal
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:41:06 GMT
════════════════════════
⌗ Tags: #bug_bounty #account_take_over #stored_xss #vapt #cookies
Medium
From a Simple Image Upload to Account Takeover: Stored XSS via File Metadata
Hi, let me introduce myself — I’m Kanishka Khandelwal. I’m currently working as an Associate Security Engineer, and apart from my day job…
17 views
Daily Writeups
⤷ Title: Open Redirect via redirect Parameter on Signup&Sign in Endpoint
════════════════════════
𐀪 Author: rozzen
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:06:52 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #bug_bounty
Medium
Open Redirect via redirect Parameter on Signup&Sign in Endpoint
I found a small but interesting issue on one of your assets — specifically on komunitas.example.com.
14 views
Daily Writeups
⤷ Title: How I Stole a Crypto Key from an Android App: A Deep Dive into WebView JavaScript Bridge Abuse
════════════════════════
𐀪 Author: @4b6o07
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:04:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #mobile_security #webview_vulnerabilities #cybersecurity
Medium
How I Stole a Crypto Key from an Android App: A Deep Dive into WebView JavaScript Bridge Abuse
Lab: Mobile Hacking Lab — Exchange
Package: com.mobilehackinglab.exchange
Platform: Android API 33, arm64 (Pixel 6 AVD)
18 views
Daily Writeups
⤷ Title: Excessive Data Exposure Leading to Unauthorized Access to Paid Features
════════════════════════
𐀪 Author: Kanishkakhandelwal
════════════════════════
ⴵ Time: Fri, 01 May 2026 09:40:56 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #vulnerability_disclosure #cyber_security_awareness #broken_access_control #bug_bounty
Medium
Excessive Data Exposure Leading to Unauthorized Access to Paid Features
How a Single API Response Led to Full Paid Access
24 views
Daily Writeups
⤷ Title: Alert Triage Process in SOC — TryhackMe
════════════════════════
𐀪 Author: Adithya Hettiarachchi
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:45:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #learn #news #hacking #soc
Medium
Alert Triage Process in SOC — TryhackMe
An alert is one of the most important parts of cybersecurity. Security teams use alerts to find suspicious or dangerous activity in a…
11 views