Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Silent Rotor: Targeted Rust Malware Infiltrates the 2026 Eurasian Unmanned Aviation Forum
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:01:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #Kleymarket.ru #Moscow Aviation Forum 2026 #Operation Silent Rotor #Rust Language Malware #Rust malware #Seqrite Labs #spear_phishing #UAV Security #Unmanned Aviation
Daily CyberSecurity
Silent Rotor: Targeted Rust Malware Infiltrates the 2026 Eurasian Unmanned Aviation Forum
SEQRITE Labs uncovers Operation Silent Rotor, a targeted Rust-based cyberattack on the Eurasian unmanned aviation sector ahead of the 2026 Moscow forum.
13 views
Daily Writeups
⤷ Title: Is Your React App Vulnerable to the CVE-2026-23870 DoS Attack?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:30:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_23870 #Denial of Service #dos #infosec #javascript #Patch Alert #React #React 19 #React Server Components #RSC #web development #Web Security
Daily CyberSecurity
Is Your React App Vulnerable to the CVE-2026-23870 DoS Attack?
Protect your app from CVE-2026-23870. Learn how this high-severity React Server Components DoS flaw crashes servers and how to patch your React 19 build today.
22 views
Daily Writeups
⤷ Title: The TOAD Trap: Why Scammers are Trading Malicious Links for VoIP Phone Numbers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:11:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #cybersecurity #E.164 #infosec #phishing #Sinch #Telephone_Oriented Attack Delivery #threat intelligence #TOAD #VoIP Infrastructure #VoIP Scams
Daily CyberSecurity
The TOAD Trap: Why Scammers are Trading Malicious Links for VoIP Phone Numbers
Cisco Talos reveals the rise of TOAD attacks. 55% of scam campaigns now use VoIP "anchors" to bypass email filters and trick victims into calling fraud centers.
19 views
Daily Writeups
⤷ Title: Reverse Engineering Web Apps & APIs 101
════════════════════════
𐀪 Author: jirosec
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:20:42 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #bug_bounty_tips #reverse_engineering #bug_bounty_writeup
Medium
Reverse Engineering Web Apps & APIs 101
Hello everyone, I am jirosec.I’m currently a university student, and in my free time I enjoy bug bounty hunting, breaking things, and…
18 views
Daily Writeups
⤷ Title: How a Bus That Left 2 Minutes Early Led Me to an IDOR Exposing Thousands of Personal Records
════════════════════════
𐀪 Author: Gombos Ákos-Roland
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:14:59 GMT
════════════════════════
⌗ Tags: #idor #bug_bounty #responsible_disclosure #web_security #cybersecurity
Medium
How a Bus That Left 2 Minutes Early Led Me to an IDOR Exposing Thousands of Personal Records
It was around the end of August, 2024. I was standing at the bus stop, watching my bus pull away — two minutes early. Two minutes. I’d been…
15 views
Daily Writeups
⤷ Title: Real Hunting & Operator Tactics — What This Series Will Actually Teach You
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:12:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #security #bug_bounty #hacking
Medium
🧠 Real Hunting & Operator Tactics — What This Series Will Actually Teach You
Read Here …
9 views
Daily Writeups
⤷ Title: Unauthenticated RCE via WebLogic WLS-WSAT (CVE-2019–2725)
════════════════════════
𐀪 Author: Sai
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:02:20 GMT
════════════════════════
⌗ Tags: #insecure_deserialization #oracle_weblogic_server #vulnerability #application_security #remote_code_execution
Medium
Unauthenticated RCE via WebLogic WLS-WSAT (CVE-2019–2725)
Overview
10 views
Daily Writeups
⤷ Title: Putin Never Wanted This to Leak: One of Russia’s Deepest Intelligence Secrets Just Cracked Open
════════════════════════
𐀪 Author: Emily Rhodes
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:48:52 GMT
════════════════════════
⌗ Tags: #war #hacking #ukraine_war #geopolitics
Medium
Putin Never Wanted This to Leak: One of Russia’s Deepest Intelligence Secrets Just Cracked Open
Russia’s Secret Hacker University Exposed
11 views
Daily Writeups
⤷ Title: Canvas LMS Hack 2026: Universities Worldwide Hit by Massive Cyberattack During Finals Week
════════════════════════
𐀪 Author: Biplove Yadav
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:21:30 GMT
════════════════════════
⌗ Tags: #canvas #edutech #cyberattack #technews #hacking
Medium
Canvas LMS Hack 2026: Universities Worldwide Hit by Massive Cyberattack During Finals Week
Students across the United States, Australia, Canada, and Europe woke up this week to a nightmare scenario: Canvas LMS was down.
11 views
Daily Writeups
⤷ Title: Two new Linux Privilege Escalation: Electric Boogaloo and Dirty Frag
════════════════════════
𐀪 Author: Stanislav Klevtsov
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:37:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #vulnerability #linux
Medium
Two new Linux Privilege Escalation: Electric Boogaloo and Dirty Frag
Security researchers found two more serious LPE vulnerabilities in Linux: Copy Fail 2: Electric Boogaloo and Dirty Frag.
15 views
Daily Writeups
⤷ Title: CISSP Chapter 2 — Part 1: People Are Not the Weakest Link. Unmanaged Trust Is.
════════════════════════
𐀪 Author: Atakan ATAK
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:05:11 GMT
════════════════════════
⌗ Tags: #cissp #cybersecurity #infosec #cyber_security_awareness #isc2
Medium
CISSP Chapter 2 — Part 1: People Are Not the Weakest Link. Unmanaged Trust Is.
Personnel security, role clarity, onboarding discipline, offboarding rigor, and the governance choices that shape human risk.
13 views
Daily Writeups
⤷ Title: Building a Modern SOC Automation Lab: Integrating Wazuh, TheHive, and Shuffle
════════════════════════
𐀪 Author: Farras Fauzan
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:40:27 GMT
════════════════════════
⌗ Tags: #infosec #soc #wazuh #automation #cybersecurity
Medium
Building a Modern SOC Automation Lab: Integrating Wazuh, TheHive, and Shuffle
Technical integration is only half the battle. Discover how to design targeted automation logic for a faster, smarter incident response
18 views
Daily Writeups
⤷ Title: Windows CLI Basics — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:24:47 GMT
════════════════════════
⌗ Tags: #tryhackme_pre_security #windows #tryhackme #tryhackme_writeup #tryhackme_walkthrough
Medium
Windows CLI Basics — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: Windows CLI Basics
Room URL: https://tryhackme.com/room/windowsclibasics
Difficulty: Easy
Please attempt the room…
18 views
Daily Writeups
⤷ Title: TryHackMe (THM) PickleRick Walkthrough
════════════════════════
𐀪 Author: Mann Diwani
════════════════════════
ⴵ Time: Fri, 08 May 2026 07:47:05 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #pickle_rick #tryhackme_walkthrough #rick_and_morty #tryhackme
Medium
TryHackMe (THM) PickleRick Walkthrough
🔗Room Link : https://tryhackme.com/room/picklerick
34 views
Daily Writeups
⤷ Title: Gaining Domain Admin: A Journey through LDAP, Kerberos, and Delegation Abuse.
════════════════════════
𐀪 Author: Yoel Yosief [ Orit01 ]
════════════════════════
ⴵ Time: Fri, 08 May 2026 08:28:09 GMT
════════════════════════
⌗ Tags: #ethical_hacking #windows_vulnerability #ldap #active_directory #kerberos_delegation
Medium
Gaining Domain Admin: A Journey through LDAP, Kerberos, and Delegation Abuse.
In penetration testing, the path to domain administrator privileges often involves a complex chain of exploitation, requiring a deep…
39 views
Daily Writeups
⤷ Title: One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 08 May 2026 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 08 May 2026 14:11:00 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: The Autonomous Blue Team: Build a Self-Healing SIEM with the AI Detection Engineering Lab
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:13:19 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI security #Blue Team Automation #Claude Code #Detection Engineering #DevSecOps #Elastic Security #Fawkes C2 #MITRE ATT&CK #SIEM #Sigma Rules #Splunk #Threat Intel
Penetration Testing Tools
The Autonomous Blue Team: Build a Self-Healing SIEM with the AI Detection Engineering Lab
Deploy an AI-powered detection pipeline using Claude Code. Automate the full SIEM lifecycle, from Sigma rule authoring to MITRE ATT&CK validation and tuning.
28 views
Daily Writeups
⤷ Title: Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:07:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #Device Code Flow #Graphish #M365 Hardening #Microsoft 365 #OAuth #Passwordless Security #phishing 2026 #Proofpoint #QR Code Phishing #SquarePhish2 #TA2723
Penetration Testing Tools
Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
Both fraudulent actors and state-sponsored syndicates have commenced the large-scale deployment of a novel stratagem to usurp Microsoft
13 views
Daily Writeups
⤷ Title: Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:04:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ABW #Critical Infrastructure #Cyber Espionage #Cyber War 2026 #ICS #Industrial Control Systems #Infrastructure Defense #Jabłonna Lacka #National Security #Poland #Szczytno #Water Treatment Security
Penetration Testing Tools
Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
Polish intelligence services have issued a somber warning regarding a succession of incursions targeting water treatment facilities, where,
12 views
Daily Writeups
⤷ Title: The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:03:26 +0000
════════════════════════
⌗ Tags: #Information Security #AI security #cyber threat intelligence #Defense Evasion #EDR Bypass #ICS Security #InfoSec 2026 #MITRE ATT&CK v19 #Mobile Threats #SOC Strategy #Social Engineering #T1682 #T1685
Penetration Testing Tools
The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
MITRE has unveiled ATT&CK v19, a monumental evolution of the framework utilized by security cohorts to delineate adversary
17 views