Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Social Media Account Hacking Methods: Common Attacks & How to Protect Yourself
════════════════════════
𐀪 Author: Manula Udyoga
════════════════════════
ⴵ Time: Tue, 05 May 2026 04:51:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #phishing #ethical_hacking #social_media_security #online_safety
Medium
🔐 Social Media Account Hacking Methods: Common Attacks & How to Protect Yourself
🚀 Introduction
40 views
Daily Writeups
⤷ Title: Wall Street’s VIP Mandate: Why OpenAI and Anthropic are Using Private Equity to Force AI into the “Real Economy”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:00:07 +0000
════════════════════════
⌗ Tags: #Technology #Agentic AI #AI Distribution #Anthropic #B2B AI #Bain Capital #BlackStone #Digital Labor #Goldman Sachs #Joint Ventures #OpenAI #Private Equity #Silicon Valley #TPG #Wall Street
Daily CyberSecurity
Wall Street’s VIP Mandate: Why OpenAI and Anthropic are Using Private Equity to Force AI into the "Real Economy"
OpenAI and Anthropic are pivoting from API sales to $10B private equity alliances. Discover how Wall Street is becoming the ultimate AI system integrator.
38 views
Daily Writeups
⤷ Title: The AI-Powered Cybercrime Factory: Unmasking the Bluekit “All-in-One” Phishing Revolution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:30:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Phishing #Bluekit #Credential Theft #cybersecurity #infosec #Phishing_as_a_Service #Quishing #Session Hijacking #social engineering #Threat Intel #Varonis
Daily CyberSecurity
The AI-Powered Cybercrime Factory: Unmasking the Bluekit "All-in-One" Phishing Revolution
Varonis uncovers Bluekit, a new phishing-as-a-service kit using AI and 40+ templates to automate session hijacking and credential theft. See how it works.
27 views
Daily Writeups
⤷ Title: They Rejected My Bugs. I Came Back Same Day With 9 More.
════════════════════════
𐀪 Author: Ubaid Ur Rehman
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:15:31 GMT
════════════════════════
⌗ Tags: #ec_council #certification #vulnerability #bugs #bug_bounty
Medium
They Rejected My Bugs. I Came Back Same Day With 9 More.
I’m 17. I’m from Karachi. I study Electronics, not Computer Science. And somehow I ended up on EC-Council’s Hall of Fame — the organization…
17 views
Daily Writeups
⤷ Title: Failed a CTF but learned JWT (JSON web token)
════════════════════════
𐀪 Author: CosmicByte
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:01:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #jwt #infosec #ctf
Medium
Failed a CTF but learned JWT (JSON web token)
Recently saw a LinkedIn post from an AI security company saying “solve the CTF and job is yours”. I was on a high of just submitting my…
15 views
Daily Writeups
⤷ Title: JBoss 6 RCE Exploitation and Privilege Escalation via Misconfigured "sudo find" Command
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:22:22 GMT
════════════════════════
⌗ Tags: #rce #privilege_escalation #jboss_6_exploit #bug_bounty #jboss_6_rce
Medium
JBoss 6 RCE Exploitation and Privilege Escalation via Misconfigured "sudo find" Command
Chaining legacy JBoss vulnerabilities with Linux misconfigurations for full system compromise.
14 views
Daily Writeups
⤷ Title: Is Cyber Security Dead? — The Claude Mythos
════════════════════════
𐀪 Author: CYBER MIND SPACE
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:50:39 GMT
════════════════════════
⌗ Tags: #ai #hacking #technology #programming #cybersecurity
Medium
Is Cyber Security Dead? — The Claude Mythos
Everyone’s talking about AI replacing hackers. But nobody’s asking the real question.
15 views
Daily Writeups
⤷ Title: HackTheBox — TwoMillion: A Lesson in API Abuse and Privilege Escalation
════════════════════════
𐀪 Author: Shxdowz
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:51:37 GMT
════════════════════════
⌗ Tags: #hacking #ctf #hackthebox_walkthrough #hackthebox #bug_bounty_writeup
Medium
HackTheBox — TwoMillion: A Lesson in API Abuse and Privilege Escalation
Difficulty: Easy | OS: Linux | Tags: API, Command Injection, CVE-2023–0386, OverlayFS
20 views
Daily Writeups
⤷ Title: Nax
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:28:26 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #cybersecurity #tryhackme
Medium
Nax
Let’s run an nmap scan
11 views
Daily Writeups
⤷ Title: Binex
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:28:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #tryhackme #ctf
Medium
Binex
Port Scan
15 views
Daily Writeups
⤷ Title: Web Güvenliği ve Bug Bounty için Keşif-Raporlama Süreci
════════════════════════
𐀪 Author: Emineero
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:51:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #linux #bug_bounty #web_security
Medium
Web Güvenliği ve Bug Bounty için Keşif-Raporlama Süreci
Web güvenliği ve bug bounty metodoloji eğitimi üzerine bahsetmek istiyorum. İlk olarak zafiyet nedir oradan başlayalım. Zafiyet; bir…
19 views
Daily Writeups
⤷ Title: Cookies Explained: How Websites Remember You, And How Attackers Exploit It
════════════════════════
𐀪 Author: Amarachi Onyekachi
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:42:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #cookies #web_security #session_management
Medium
Cookies Explained: How Websites Remember You, And How Attackers Exploit It
How cookies work, why they matter, and how attackers exploit them.
36 views
Daily Writeups
⤷ Title: The CIA Triad: The Three Invisible Pillars of the Internet
════════════════════════
𐀪 Author: Jijo Shibu
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:16:23 GMT
════════════════════════
⌗ Tags: #tech_education #information_security #beginners_guide #cybersecurity #ethical_hacking
Medium
The CIA Triad: The Three Invisible Pillars of the Internet
Before you can understand how data gets stolen, you have to understand the “museum rules” keeping it safe.
48 views
Daily Writeups
⤷ Title: Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 05 May 2026 13:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 05 May 2026 12:05:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:24:29 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure DevOps #CI/CD Security #DevSecOps #GitHub Actions #GitLab CI #jenkins #JFrog #Pentesting Tools #supply chain attack #Taint Tracking #Trajan #WebAssembly
Penetration Testing Tools
Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
Trajan isn't just a scanner. It maps dependency graphs and uses built-in attack plugins to simulate real-world CI/CD supply chain compromises.
24 views
Daily Writeups
⤷ Title: Two Strikes, Half a Billion: How North Korean Hackers Seized 76% of All Stolen Crypto in Just 120 Days
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:46:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bridge Exploit #Crypto Theft #Cybersecurity 2026 #DPRK #Drift Protocol #KelpDAO #LayerZero #Lazarus Group #North Korea #Solana #TraderTraitor #TRM Labs
Penetration Testing Tools
Two Strikes, Half a Billion: How North Korean Hackers Seized 76% of All Stolen Crypto in Just 120 Days
North Korean cyber-operatives have once again demonstrated how a handful of precision strikes can fundamentally reshape annual cryptocurrency
15 views
Daily Writeups
⤷ Title: The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:42:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_22679 #Debugging API #enterprise security #Java Vulnerability #Office Automation Security #Patch Management #RCE #remote code execution #Tomcat #Vega Research #Weaver E_cology
Penetration Testing Tools
The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
Adversaries commenced the exploitation of a critical vulnerability within Weaver E-cology a mere few days following the release
10 views
Daily Writeups
⤷ Title: The Support Chat Trap: How a “Customer Screenshot” Led to a Critical Code-Signing Breach at DigiCert
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:36:49 +0000
════════════════════════
⌗ Tags: #Malware #Certificate Revocation #Code Signing #Cyber Security 2026 #DigiCert #endpoint security #malware #security breach #Social Engineering #Support Portal Exploit #Zhong Stealer
Penetration Testing Tools
The Support Chat Trap: How a "Customer Screenshot" Led to a Critical Code-Signing Breach at DigiCert
A seemingly innocuous file transmitted via a support chat escalated into a significant crisis for DigiCert. An adversary
13 views
Daily Writeups
⤷ Title: The Billion-Dollar Blunder: How Hackers Inadvertently Sent Rockstar Games Stock Soaring with GTA Revenue Leaks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:27:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybersecurity 2026 #GTA Online #GTA VI #Market Capitalization #Microtransactions #Revenue Leak #Rockstar Games #Shark Cards #ShinyHunters #Take_Two Interactive
Penetration Testing Tools
The Billion-Dollar Blunder: How Hackers Inadvertently Sent Rockstar Games Stock Soaring with GTA Revenue Leaks
In an ironic twist of fate, hackers attempted to coerce the architects of Grand Theft Auto, only to
8 views
Daily Writeups
⤷ Title: Zero Delay, Total Loss: How a Compromised Key and a Disabled Timelock Cost Wasabi Protocol $5 Million
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:24:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Admin Key Compromise #Blockaid #CertiK #Cryptocurrency Theft #Cyvers #DeFi Exploit #Ethereum #Governance Failure #Liquidity Provider #Smart Contract Security #Tornado Cash #Wasabi Protocol
Penetration Testing Tools
Zero Delay, Total Loss: How a Compromised Key and a Disabled Timelock Cost Wasabi Protocol $5 Million
The Wasabi Protocol was divested of millions of dollars within mere minutes, a catastrophe precipitated not by a
7 views