Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:04:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ABW #Critical Infrastructure #Cyber Espionage #Cyber War 2026 #ICS #Industrial Control Systems #Infrastructure Defense #Jabłonna Lacka #National Security #Poland #Szczytno #Water Treatment Security
Penetration Testing Tools
Polish Intelligence Warns of Rising Cyber Incursions Against Municipal Water Systems
Polish intelligence services have issued a somber warning regarding a succession of incursions targeting water treatment facilities, where,
12 views
Daily Writeups
⤷ Title: The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:03:26 +0000
════════════════════════
⌗ Tags: #Information Security #AI security #cyber threat intelligence #Defense Evasion #EDR Bypass #ICS Security #InfoSec 2026 #MITRE ATT&CK v19 #Mobile Threats #SOC Strategy #Social Engineering #T1682 #T1685
Penetration Testing Tools
The Great Split: How MITRE ATT&CK v19 Redefines Defense Evasion and Maps the AI Threat Landscape
MITRE has unveiled ATT&CK v19, a monumental evolution of the framework utilized by security cohorts to delineate adversary
17 views
Daily Writeups
⤷ Title: North Korean “Laptop Farms” Infiltrated 70 U.S. Companies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 10:13:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #corporate espionage #cybersecurity #DPRK #Erick Prince #fbi #Insider Threat #Justice Department #Laptop Farm #Matthew Knoot #North Korea #Remote Desktop #Stolen Identity
Daily CyberSecurity
North Korean "Laptop Farms" Infiltrated 70 U.S. Companies
DOJ sentences U.S. enablers for running North Korean "laptop farms." Learn how the DPRK breached 70 companies and funded weapons via stolen identities.
12 views
Daily Writeups
⤷ Title: Highly Evasive NuGet Supply Chain Attack Hijacks 65,000 .NET Build Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:04:59 +0000
════════════════════════
⌗ Tags: #Malware #.NET Security #AppBound Bypass #CI/CD security #cybersecurity #DevSecOps #infosec #IR.* Packages #malware #NuGet #supply chain attack
Daily CyberSecurity
Highly Evasive NuGet Supply Chain Attack Hijacks 65,000 .NET Build Servers
Critical alert: A stealth NuGet supply chain attack has hijacked 65,000 .NET workstations. Audit your CI/CD for malicious IR.* packages immediately.
17 views
Daily Writeups
⤷ Title: When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a Web Cache Poisoning Bug.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:52:18 GMT
════════════════════════
⌗ Tags: #web_cache_poisoning #documentation #bug_bounty #cloudflare
Medium
When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a Web Cache Poisoning Bug.
Bug bounty hunting is exciting.
15 views
Daily Writeups
⤷ Title: How a YouTube Recommendation Led Me to Claim Free Coins Twice
════════════════════════
𐀪 Author: Gombos Ákos-Roland
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:25:57 GMT
════════════════════════
⌗ Tags: #web_security #race_condition #penetration_testing #application_security #bug_bounty
Medium
How a YouTube Recommendation Led Me to Claim Free Coins Twice
It was a random Monday. Nothing special going on. YouTube decided to recommend me a video about abusing game economy endpoints and I…
21 views
Daily Writeups
⤷ Title: Broken Access Control / IDOR in Group Invitation Flow
════════════════════════
𐀪 Author: Ahmed Atef (0xMintsX)
════════════════════════
ⴵ Time: Fri, 08 May 2026 01:24:15 GMT
════════════════════════
⌗ Tags: #bug_bounty #access_control #cybersecurity #web_application_security #api_security
Medium
خلل في التحكم بالوصول / IDOR في تدفق دعوة المجموعة
{وَآتَاكُم م كُلِّ مَا سَأَلْتُمُوهُ ۚ وَإِن تَعُدُّوا نِعْمَتَ اللَّهِ لا تُحْصُوهُ ۗ }
21 views
Daily Writeups
⤷ Title: Rate Limit Bypass — Turbo Intruder Scripts
════════════════════════
𐀪 Author: Subhakreet
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:47:48 GMT
════════════════════════
⌗ Tags: #bypass #pentesting #burpsuite #hacking
Medium
Rate Limit Bypass — Turbo Intruder Scripts
Rate limiting is a control that restricts how many requests a client can make to an endpoint within a given timeframe. When implemented…
14 views
Daily Writeups
⤷ Title: OSINT Industries CTF writeup: Holehe and the secret email
════════════════════════
𐀪 Author: Robert Nyinge
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:05:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_penetration_testing #osint #osint_industries #hacking
Medium
OSINT Industries CTF writeup: Holehe and the secret email
HI, another OSINT writeup …the challenge is by OSINT Industries, titled “Holehe and the secret email”. Here is a brief description of the…
23 views
Daily Writeups
⤷ Title: Building a Modern SOC Automation Lab: Integrating Wazuh, TheHive, and Shuffle
════════════════════════
𐀪 Author: Farras Fauzan
════════════════════════
ⴵ Time: Fri, 08 May 2026 10:27:49 GMT
════════════════════════
⌗ Tags: #soc #automation #infosec #cybersecurity #wazuh
Medium
Building a Modern SOC Automation Lab: Integrating Wazuh, TheHive, and Shuffle
Welcome back, everyone.
24 views
Daily Writeups
⤷ Title: Panduan Expert Penggunaan Tools Nuclei dalam Penetration Testing
════════════════════════
𐀪 Author: Ahmat Prayoga Sembiring
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:28:14 GMT
════════════════════════
⌗ Tags: #ethical_hacking #penetration_testing #nucleus
Medium
Panduan Expert Penggunaan Tools Nuclei dalam Penetration Testing
Nuclei adalah tools penetration testing berbasis template YAML untuk mendeteksi kerentanan secara otomatis dan cepat. Tools ini membantu…
31 views
Daily Writeups
⤷ Title: SOC Workbooks and Lookups | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 08 May 2026 10:26:37 GMT
════════════════════════
⌗ Tags: #blue_team #cybersecurity #tryhackme
Medium
SOC Workbooks and Lookups | TryHackMe
Discover useful corporate resources to help you structure and simplify L1 alert triage.
45 views
Daily Writeups
⤷ Title: Red Team Fundamentals | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:47:13 GMT
════════════════════════
⌗ Tags: #red_team #tryhackme #cybersecurity
Medium
Red Team Fundamentals | TryHackMe
Learn about the basics of a red engagement, the main components and stakeholders involved, and how red teaming differs from other cyber…
53 views
Daily Writeups
⤷ Title: Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 08 May 2026 16:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
49 views
Daily Writeups
⤷ Title: Critical Sandboxie Escape Flaws Grant Total SYSTEM Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 12:42:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_34458 #CVE_2026_34459 #cybersecurity #infosec #INI Injection #Patch Alert #privilege escalation #Sandbox Escape #Sandboxie #SYSTEM Privilege
Daily CyberSecurity
Critical Sandboxie Escape Flaws Grant Total SYSTEM Takeover
Security researchers expose catastrophic flaws in Sandboxie. CVE-2026-34459 enables a direct sandbox escape to SYSTEM privileges. Update to v1.17.3 today.
46 views
Daily Writeups
⤷ Title: Self-Spreading TCLBANKER Trojan Hijacks WhatsApp to Drain Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 12:02:20 +0000
════════════════════════
⌗ Tags: #Malware #Banking Trojan #cybersecurity #Elastic Security Labs #infosec #Malware Analysis #REF3076 #TCLBANKER #threat intelligence #Vishing #WhatsApp Hijacking
Daily CyberSecurity
Self-Spreading TCLBANKER Trojan Hijacks WhatsApp to Drain Accounts
Elastic Security Labs exposes TCLBANKER, an advanced banking trojan that hijacks WhatsApp to spread while blinding defenders with invisible WPF overlays.
26 views
Daily Writeups
⤷ Title: How I Approach a Fresh Target — The First 30 Minutes Matter Most
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 08 May 2026 12:45:05 GMT
════════════════════════
⌗ Tags: #hacking #security #linux #bug_bounty #cybersecurity
Medium
🔍 How I Approach a Fresh Target — The First 30 Minutes Matter Most
✍️ Introduction
23 views
Daily Writeups
⤷ Title: Future of Cybersecurity: How Ethical Hacking and Quantum Computing Will Define the Next Digital Era
════════════════════════
𐀪 Author: Mannell
════════════════════════
ⴵ Time: Fri, 08 May 2026 12:29:40 GMT
════════════════════════
⌗ Tags: #hire_hackers #cybersecurity #professional_hackers #hacking #cyber_security_services
Medium
Future of Cybersecurity: How Ethical Hacking and Quantum Computing Will Define the Next Digital Era
By [thetrustedhacker] | Cybersecurity | Future Tech | Quantum | Ethical Hacking
16 views
Daily Writeups
⤷ Title: WWBuddy (THM) Tryhackme Writeup Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Fri, 08 May 2026 12:15:54 GMT
════════════════════════
⌗ Tags: #privilege_escalation #tryhackme #cybersecurity #hacking #ctf_writeup
Medium
WWBuddy (THM) Tryhackme Writeup Answer
Description : Exploit this website still in development and root the room.
12 views
Daily Writeups
⤷ Title: DeFi Hacks Are Getting Smarter And Your Crypto Portfolio Could Pay the Price
════════════════════════
𐀪 Author: F.uzoma
════════════════════════
ⴵ Time: Fri, 08 May 2026 11:46:45 GMT
════════════════════════
⌗ Tags: #defi #hacking #cryptocurrency_investment #cryptosecurity #north_korea
Medium
DeFi Hacks Are Getting Smarter And Your Crypto Portfolio Could Pay the Price
The numbers from April 2026 are hard to look away from. The month recorded a significant number of cryptocurrency hacking with total losses…
10 views
Daily Writeups
⤷ Title: The Airfare “Hack” That Doesn’t Exist
════════════════════════
𐀪 Author: Paula Martini
════════════════════════
ⴵ Time: Fri, 08 May 2026 11:01:01 GMT
════════════════════════
⌗ Tags: #airfare #hacking #travel #travel_hacks #travel_writing
Medium
The Airfare “Hack” That Doesn’t Exist
32 Years of Truth the Tech Bros Don’t Want You to Know.
8 views