Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: Wall Street’s VIP Mandate: Why OpenAI and Anthropic are Using Private Equity to Force AI into the “Real Economy”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:00:07 +0000
════════════════════════
⌗ Tags: #Technology #Agentic AI #AI Distribution #Anthropic #B2B AI #Bain Capital #BlackStone #Digital Labor #Goldman Sachs #Joint Ventures #OpenAI #Private Equity #Silicon Valley #TPG #Wall Street
Daily CyberSecurity
Wall Street’s VIP Mandate: Why OpenAI and Anthropic are Using Private Equity to Force AI into the "Real Economy"
OpenAI and Anthropic are pivoting from API sales to $10B private equity alliances. Discover how Wall Street is becoming the ultimate AI system integrator.
38 views
Daily Writeups
⤷ Title: The AI-Powered Cybercrime Factory: Unmasking the Bluekit “All-in-One” Phishing Revolution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:30:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Phishing #Bluekit #Credential Theft #cybersecurity #infosec #Phishing_as_a_Service #Quishing #Session Hijacking #social engineering #Threat Intel #Varonis
Daily CyberSecurity
The AI-Powered Cybercrime Factory: Unmasking the Bluekit "All-in-One" Phishing Revolution
Varonis uncovers Bluekit, a new phishing-as-a-service kit using AI and 40+ templates to automate session hijacking and credential theft. See how it works.
27 views
Daily Writeups
⤷ Title: They Rejected My Bugs. I Came Back Same Day With 9 More.
════════════════════════
𐀪 Author: Ubaid Ur Rehman
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:15:31 GMT
════════════════════════
⌗ Tags: #ec_council #certification #vulnerability #bugs #bug_bounty
Medium
They Rejected My Bugs. I Came Back Same Day With 9 More.
I’m 17. I’m from Karachi. I study Electronics, not Computer Science. And somehow I ended up on EC-Council’s Hall of Fame — the organization…
17 views
Daily Writeups
⤷ Title: Failed a CTF but learned JWT (JSON web token)
════════════════════════
𐀪 Author: CosmicByte
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:01:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #jwt #infosec #ctf
Medium
Failed a CTF but learned JWT (JSON web token)
Recently saw a LinkedIn post from an AI security company saying “solve the CTF and job is yours”. I was on a high of just submitting my…
15 views
Daily Writeups
⤷ Title: JBoss 6 RCE Exploitation and Privilege Escalation via Misconfigured "sudo find" Command
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:22:22 GMT
════════════════════════
⌗ Tags: #rce #privilege_escalation #jboss_6_exploit #bug_bounty #jboss_6_rce
Medium
JBoss 6 RCE Exploitation and Privilege Escalation via Misconfigured "sudo find" Command
Chaining legacy JBoss vulnerabilities with Linux misconfigurations for full system compromise.
14 views
Daily Writeups
⤷ Title: Is Cyber Security Dead? — The Claude Mythos
════════════════════════
𐀪 Author: CYBER MIND SPACE
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:50:39 GMT
════════════════════════
⌗ Tags: #ai #hacking #technology #programming #cybersecurity
Medium
Is Cyber Security Dead? — The Claude Mythos
Everyone’s talking about AI replacing hackers. But nobody’s asking the real question.
15 views
Daily Writeups
⤷ Title: HackTheBox — TwoMillion: A Lesson in API Abuse and Privilege Escalation
════════════════════════
𐀪 Author: Shxdowz
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:51:37 GMT
════════════════════════
⌗ Tags: #hacking #ctf #hackthebox_walkthrough #hackthebox #bug_bounty_writeup
Medium
HackTheBox — TwoMillion: A Lesson in API Abuse and Privilege Escalation
Difficulty: Easy | OS: Linux | Tags: API, Command Injection, CVE-2023–0386, OverlayFS
20 views
Daily Writeups
⤷ Title: Nax
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:28:26 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #cybersecurity #tryhackme
Medium
Nax
Let’s run an nmap scan
11 views
Daily Writeups
⤷ Title: Binex
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:28:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #tryhackme #ctf
Medium
Binex
Port Scan
15 views
Daily Writeups
⤷ Title: Web Güvenliği ve Bug Bounty için Keşif-Raporlama Süreci
════════════════════════
𐀪 Author: Emineero
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:51:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #linux #bug_bounty #web_security
Medium
Web Güvenliği ve Bug Bounty için Keşif-Raporlama Süreci
Web güvenliği ve bug bounty metodoloji eğitimi üzerine bahsetmek istiyorum. İlk olarak zafiyet nedir oradan başlayalım. Zafiyet; bir…
19 views
Daily Writeups
⤷ Title: Cookies Explained: How Websites Remember You, And How Attackers Exploit It
════════════════════════
𐀪 Author: Amarachi Onyekachi
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:42:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #cookies #web_security #session_management
Medium
Cookies Explained: How Websites Remember You, And How Attackers Exploit It
How cookies work, why they matter, and how attackers exploit them.
36 views
Daily Writeups
⤷ Title: The CIA Triad: The Three Invisible Pillars of the Internet
════════════════════════
𐀪 Author: Jijo Shibu
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:16:23 GMT
════════════════════════
⌗ Tags: #tech_education #information_security #beginners_guide #cybersecurity #ethical_hacking
Medium
The CIA Triad: The Three Invisible Pillars of the Internet
Before you can understand how data gets stolen, you have to understand the “museum rules” keeping it safe.
48 views
Daily Writeups
⤷ Title: Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 05 May 2026 13:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 05 May 2026 12:05:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:24:29 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure DevOps #CI/CD Security #DevSecOps #GitHub Actions #GitLab CI #jenkins #JFrog #Pentesting Tools #supply chain attack #Taint Tracking #Trajan #WebAssembly
Penetration Testing Tools
Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
Trajan isn't just a scanner. It maps dependency graphs and uses built-in attack plugins to simulate real-world CI/CD supply chain compromises.
24 views
Daily Writeups
⤷ Title: Two Strikes, Half a Billion: How North Korean Hackers Seized 76% of All Stolen Crypto in Just 120 Days
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:46:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bridge Exploit #Crypto Theft #Cybersecurity 2026 #DPRK #Drift Protocol #KelpDAO #LayerZero #Lazarus Group #North Korea #Solana #TraderTraitor #TRM Labs
Penetration Testing Tools
Two Strikes, Half a Billion: How North Korean Hackers Seized 76% of All Stolen Crypto in Just 120 Days
North Korean cyber-operatives have once again demonstrated how a handful of precision strikes can fundamentally reshape annual cryptocurrency
15 views
Daily Writeups
⤷ Title: The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:42:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_22679 #Debugging API #enterprise security #Java Vulnerability #Office Automation Security #Patch Management #RCE #remote code execution #Tomcat #Vega Research #Weaver E_cology
Penetration Testing Tools
The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
Adversaries commenced the exploitation of a critical vulnerability within Weaver E-cology a mere few days following the release
10 views
Daily Writeups
⤷ Title: The Support Chat Trap: How a “Customer Screenshot” Led to a Critical Code-Signing Breach at DigiCert
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:36:49 +0000
════════════════════════
⌗ Tags: #Malware #Certificate Revocation #Code Signing #Cyber Security 2026 #DigiCert #endpoint security #malware #security breach #Social Engineering #Support Portal Exploit #Zhong Stealer
Penetration Testing Tools
The Support Chat Trap: How a "Customer Screenshot" Led to a Critical Code-Signing Breach at DigiCert
A seemingly innocuous file transmitted via a support chat escalated into a significant crisis for DigiCert. An adversary
13 views
Daily Writeups
⤷ Title: The Billion-Dollar Blunder: How Hackers Inadvertently Sent Rockstar Games Stock Soaring with GTA Revenue Leaks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:27:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybersecurity 2026 #GTA Online #GTA VI #Market Capitalization #Microtransactions #Revenue Leak #Rockstar Games #Shark Cards #ShinyHunters #Take_Two Interactive
Penetration Testing Tools
The Billion-Dollar Blunder: How Hackers Inadvertently Sent Rockstar Games Stock Soaring with GTA Revenue Leaks
In an ironic twist of fate, hackers attempted to coerce the architects of Grand Theft Auto, only to
8 views
Daily Writeups
⤷ Title: Zero Delay, Total Loss: How a Compromised Key and a Disabled Timelock Cost Wasabi Protocol $5 Million
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:24:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Admin Key Compromise #Blockaid #CertiK #Cryptocurrency Theft #Cyvers #DeFi Exploit #Ethereum #Governance Failure #Liquidity Provider #Smart Contract Security #Tornado Cash #Wasabi Protocol
Penetration Testing Tools
Zero Delay, Total Loss: How a Compromised Key and a Disabled Timelock Cost Wasabi Protocol $5 Million
The Wasabi Protocol was divested of millions of dollars within mere minutes, a catastrophe precipitated not by a
7 views
Daily Writeups
⤷ Title: Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:32:06 +0000
════════════════════════
⌗ Tags: #Malware #Browser Error #cyber security 2026 #DigiCert #EV Code Signing #false positive #Microsoft Defender #Root Certificate #SSL/TLS #Trojan:Win32/Cerdigicert.A!dha #Windows 10 #Windows 11 Security
Daily CyberSecurity
Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
Microsoft Defender erroneously flagged DigiCert root certificates as "Cerdigicert" malware. Discover the fix and how to restore your system's trusted root store.
7 views