Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: JBoss 6 RCE Exploitation and Privilege Escalation via Misconfigured "sudo find" Command
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:22:22 GMT
════════════════════════
⌗ Tags: #rce #privilege_escalation #jboss_6_exploit #bug_bounty #jboss_6_rce
Medium
JBoss 6 RCE Exploitation and Privilege Escalation via Misconfigured "sudo find" Command
Chaining legacy JBoss vulnerabilities with Linux misconfigurations for full system compromise.
14 views
Daily Writeups
⤷ Title: Is Cyber Security Dead? — The Claude Mythos
════════════════════════
𐀪 Author: CYBER MIND SPACE
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:50:39 GMT
════════════════════════
⌗ Tags: #ai #hacking #technology #programming #cybersecurity
Medium
Is Cyber Security Dead? — The Claude Mythos
Everyone’s talking about AI replacing hackers. But nobody’s asking the real question.
15 views
Daily Writeups
⤷ Title: HackTheBox — TwoMillion: A Lesson in API Abuse and Privilege Escalation
════════════════════════
𐀪 Author: Shxdowz
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:51:37 GMT
════════════════════════
⌗ Tags: #hacking #ctf #hackthebox_walkthrough #hackthebox #bug_bounty_writeup
Medium
HackTheBox — TwoMillion: A Lesson in API Abuse and Privilege Escalation
Difficulty: Easy | OS: Linux | Tags: API, Command Injection, CVE-2023–0386, OverlayFS
20 views
Daily Writeups
⤷ Title: Nax
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:28:26 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #cybersecurity #tryhackme
Medium
Nax
Let’s run an nmap scan
11 views
Daily Writeups
⤷ Title: Binex
════════════════════════
𐀪 Author: Zuhaib Tariq
════════════════════════
ⴵ Time: Tue, 05 May 2026 05:28:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #tryhackme #ctf
Medium
Binex
Port Scan
15 views
Daily Writeups
⤷ Title: Web Güvenliği ve Bug Bounty için Keşif-Raporlama Süreci
════════════════════════
𐀪 Author: Emineero
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:51:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #linux #bug_bounty #web_security
Medium
Web Güvenliği ve Bug Bounty için Keşif-Raporlama Süreci
Web güvenliği ve bug bounty metodoloji eğitimi üzerine bahsetmek istiyorum. İlk olarak zafiyet nedir oradan başlayalım. Zafiyet; bir…
19 views
Daily Writeups
⤷ Title: Cookies Explained: How Websites Remember You, And How Attackers Exploit It
════════════════════════
𐀪 Author: Amarachi Onyekachi
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:42:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #cookies #web_security #session_management
Medium
Cookies Explained: How Websites Remember You, And How Attackers Exploit It
How cookies work, why they matter, and how attackers exploit them.
36 views
Daily Writeups
⤷ Title: The CIA Triad: The Three Invisible Pillars of the Internet
════════════════════════
𐀪 Author: Jijo Shibu
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:16:23 GMT
════════════════════════
⌗ Tags: #tech_education #information_security #beginners_guide #cybersecurity #ethical_hacking
Medium
The CIA Triad: The Three Invisible Pillars of the Internet
Before you can understand how data gets stolen, you have to understand the “museum rules” keeping it safe.
48 views
Daily Writeups
⤷ Title: Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 05 May 2026 13:07:00 +0530
════════════════════════
⌗ Tags: No_Tags
39 views
Daily Writeups
⤷ Title: Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 05 May 2026 12:05:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:24:29 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure DevOps #CI/CD Security #DevSecOps #GitHub Actions #GitLab CI #jenkins #JFrog #Pentesting Tools #supply chain attack #Taint Tracking #Trajan #WebAssembly
Penetration Testing Tools
Supply Chains in the Crosshairs: Scan and Simulate Multi-Stage Attacks with Trajan
Trajan isn't just a scanner. It maps dependency graphs and uses built-in attack plugins to simulate real-world CI/CD supply chain compromises.
24 views
Daily Writeups
⤷ Title: Two Strikes, Half a Billion: How North Korean Hackers Seized 76% of All Stolen Crypto in Just 120 Days
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:46:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bridge Exploit #Crypto Theft #Cybersecurity 2026 #DPRK #Drift Protocol #KelpDAO #LayerZero #Lazarus Group #North Korea #Solana #TraderTraitor #TRM Labs
Penetration Testing Tools
Two Strikes, Half a Billion: How North Korean Hackers Seized 76% of All Stolen Crypto in Just 120 Days
North Korean cyber-operatives have once again demonstrated how a handful of precision strikes can fundamentally reshape annual cryptocurrency
15 views
Daily Writeups
⤷ Title: The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:42:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_22679 #Debugging API #enterprise security #Java Vulnerability #Office Automation Security #Patch Management #RCE #remote code execution #Tomcat #Vega Research #Weaver E_cology
Penetration Testing Tools
The Five-Day Race: Hackers Weaponize Critical Weaver E-cology RCE via Exposed Debugging API
Adversaries commenced the exploitation of a critical vulnerability within Weaver E-cology a mere few days following the release
10 views
Daily Writeups
⤷ Title: The Support Chat Trap: How a “Customer Screenshot” Led to a Critical Code-Signing Breach at DigiCert
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:36:49 +0000
════════════════════════
⌗ Tags: #Malware #Certificate Revocation #Code Signing #Cyber Security 2026 #DigiCert #endpoint security #malware #security breach #Social Engineering #Support Portal Exploit #Zhong Stealer
Penetration Testing Tools
The Support Chat Trap: How a "Customer Screenshot" Led to a Critical Code-Signing Breach at DigiCert
A seemingly innocuous file transmitted via a support chat escalated into a significant crisis for DigiCert. An adversary
13 views
Daily Writeups
⤷ Title: The Billion-Dollar Blunder: How Hackers Inadvertently Sent Rockstar Games Stock Soaring with GTA Revenue Leaks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:27:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybersecurity 2026 #GTA Online #GTA VI #Market Capitalization #Microtransactions #Revenue Leak #Rockstar Games #Shark Cards #ShinyHunters #Take_Two Interactive
Penetration Testing Tools
The Billion-Dollar Blunder: How Hackers Inadvertently Sent Rockstar Games Stock Soaring with GTA Revenue Leaks
In an ironic twist of fate, hackers attempted to coerce the architects of Grand Theft Auto, only to
8 views
Daily Writeups
⤷ Title: Zero Delay, Total Loss: How a Compromised Key and a Disabled Timelock Cost Wasabi Protocol $5 Million
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:24:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Admin Key Compromise #Blockaid #CertiK #Cryptocurrency Theft #Cyvers #DeFi Exploit #Ethereum #Governance Failure #Liquidity Provider #Smart Contract Security #Tornado Cash #Wasabi Protocol
Penetration Testing Tools
Zero Delay, Total Loss: How a Compromised Key and a Disabled Timelock Cost Wasabi Protocol $5 Million
The Wasabi Protocol was divested of millions of dollars within mere minutes, a catastrophe precipitated not by a
7 views
Daily Writeups
⤷ Title: Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:32:06 +0000
════════════════════════
⌗ Tags: #Malware #Browser Error #cyber security 2026 #DigiCert #EV Code Signing #false positive #Microsoft Defender #Root Certificate #SSL/TLS #Trojan:Win32/Cerdigicert.A!dha #Windows 10 #Windows 11 Security
Daily CyberSecurity
Microsoft Defender Flaw Erased DigiCert Root Certificates and Paralyzed Windows Systems
Microsoft Defender erroneously flagged DigiCert root certificates as "Cerdigicert" malware. Discover the fix and how to restore your system's trusted root store.
7 views
Daily Writeups
⤷ Title: The $1.5 Million Truce: Elon Musk Settles SEC Lawsuit Over “Hidden” Twitter Stake and Acquisition Gamesmanship
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:27:41 +0000
════════════════════════
⌗ Tags: #Technology #Civil Penalty #Disclosure Violation #Elon Musk #Financial News #Gary Gensler #Regulatory Compliance #SEC #Securities Law #Settlement #Tesla #twitter #X
Daily CyberSecurity
The $1.5 Million Truce: Elon Musk Settles SEC Lawsuit Over "Hidden" Twitter Stake and Acquisition Gamesmanship
Elon Musk settles with the SEC for $1.5M over his delayed 2022 Twitter stake disclosure. The record-breaking fine ends years of legal "harassment" and litigation.
7 views
Daily Writeups
⤷ Title: Scammers Weaponize Amazon SES to Bypass Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:15:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amazon SES #aws security #BEC #Cloud Security #Credential Theft #DKIM #DMARC #Email Security #IAM Keys #infosec #kaspersky #phishing #SPF
Daily CyberSecurity
Scammers Weaponize Amazon SES to Bypass Security
Scammers are leveraging Amazon SES and leaked IAM keys to bypass security filters. Learn how to protect your organization from this high-trust phishing surge.
6 views
Daily Writeups
⤷ Title: Apple Unveils End-to-End Encryption for iPhone-to-Android RCS Messaging
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:06:17 +0000
════════════════════════
⌗ Tags: #Technology #android #Apple #cyber security 2026 #Digital Markets Act #E2EE #End_to_End Encryption #Google Messages #GSMA #iMessage #iOS 26.5 #Mobile Privacy #RCS
Daily CyberSecurity
Apple Unveils End-to-End Encryption for iPhone-to-Android RCS Messaging
Privacy without borders: Apple’s iOS 26.5 beta finally brings End-to-End Encryption to RCS. enjoy iMessage-level security when texting Android users.
11 views
Daily Writeups
⤷ Title: The New Wall: How the FCC’s Ban on Chinese Testing Labs will Inflate Flagship Phone Prices and Delay Launches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:02:59 +0000
════════════════════════
⌗ Tags: #Technology #Apple #china #FCC #Google Pixel #Hardware Engineering #MRA #national security #Radio Frequency Testing #samsung #Smartphone Certification #Supply Chain #Time to Market
Daily CyberSecurity
The New Wall: How the FCC’s Ban on Chinese Testing Labs will Inflate Flagship Phone Prices and Delay Launches
The FCC is banning equipment testing data from China. Discover how this "security" mandate will force Apple, Google, and Samsung to hike prices and delay US launches.
13 views