Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: 【逆向筆記】拆解 jpg中的一句話木馬
════════════════════════
𐀪 Author: segalee
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:01:04 GMT
════════════════════════
⌗ Tags: #malware_analysis #infosec #trojan #blue_team #cybersecurity
Medium
【逆向筆記】拆解 jpg中的一句話木馬
因為預計今年年底報考 TCM 的 PMRP，所以會開始學習有關逆向分析的知識 該系列會針對獲得的樣本進行逆向分析筆記，因為還在學習中如有錯誤請見諒
13 views
Daily Writeups
⤷ Title: Resolute — HTB Writeup
════════════════════════
𐀪 Author: William Shively
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:01:59 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #windows #active_directory #hackthebox
Medium
Resolute — HTB Writeup
Introduction:
17 views
Daily Writeups
⤷ Title: TryHackMe — Wonderland | Full Walkthrough
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:50:29 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #web_penetration_testing #ctf_writeup #penetration_testing
Medium
TryHackMe — Wonderland | Full Walkthrough
Author: Shikhali Jamalzade GitHub: github.com/alisalive LinkedIn: linkedin.com/in/camalzads
30 views
Daily Writeups
⤷ Title: GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 20 May 2026 09:31:15 +0530
════════════════════════
⌗ Tags: No_Tags
24 views
Daily Writeups
⤷ Title: The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:06:15 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber Security #GitHub Token Rotation #Grafana Labs #Incident Response #infosec #Mini Shai_Hulud #npm Worm #Ransom Demand #Source Code Theft #supply chain attack
Daily CyberSecurity
The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
Grafana Labs confirms a targeted cyberattack and source code theft after a missed token from the Mini Shai-Hulud npm worm left a repository exposed.
23 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 03:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8711 #Denial of Service #F5 Security Advisory #Heap Buffer Overflow #NGINX JavaScript #njs module #Patch Alert #Remote Code Execution #reverse proxy #Web Infrastructure
Daily CyberSecurity
Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
F5 warns of a critical 9.2 CVSS flaw (CVE-2026-8711) in NGINX JavaScript (njs). Unauthenticated attackers can trigger heap overflows and potential RCE.
17 views
Daily Writeups
⤷ Title: Solidity Basics Part 1: Language Fundamentals
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:31:00 GMT
════════════════════════
⌗ Tags: #web3 #solidity #ethereum #smart_contracts #bug_bounty
Medium
Solidity Basics Part 1: Language Fundamentals
Series: Web3 Security Zero se Advance | Article #5 By HackerMD | 25 min read
14 views
Daily Writeups
⤷ Title: ️ Understanding Phishing Attack-SOC”Security Operation Center”
════════════════════════
𐀪 Author: Zoningxtr
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:07:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #python #penetration_testing #web_development #bug_bounty
Medium
🛡️ Understanding Phishing Attack-SOC”Security Operation Center”
🎣 “The Email Looked Legitimate… And That Was the Real Weapon”
17 views
Daily Writeups
⤷ Title: Linux Privilege Escalation: Enumeration | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:17:27 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #enumeration #tryhackme_walkthrough #linux
Medium
Linux Privilege Escalation: Enumeration | TryHackMe | Walkthrough
Task 3 OS Enumeration
21 views
Daily Writeups
⤷ Title: Ethical Hacking Skills for Strong Cybersecurity Foundations
════════════════════════
𐀪 Author: Adhiraj Kasabe
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:50:16 GMT
════════════════════════
⌗ Tags: #ethical_hacking_course #ethical_hacking #ethical_hacking_training #artificial_intelligence #ai
Medium
Ethical Hacking Skills for Strong Cybersecurity Foundations
The Ethical Hacking Foundation Certification kinda helps professionals pick up the essential knowledge to spot vulnerabilities, make sense…
33 views
Daily Writeups
⤷ Title: Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 20 May 2026 10:42:06 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: Kernel Chaos: Linus Torvalds Blasts “Drive-By” AI Bug Reports Paralyzing Linux Maintainers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:48:05 +0000
════════════════════════
⌗ Tags: #Linux #AI Bug Reports #Automated Vulnerability Submissions #Bug Regression #Code Review Fatigue #DevSecOps 2026 #Drive_By Patching #Linus Torvalds #Linux Kernel Development #Open Source Maintainers #Security Mailing List Bottleneck
Daily CyberSecurity
Kernel Chaos: Linus Torvalds Blasts "Drive-By" AI Bug Reports Paralyzing Linux Maintainers
Linus Torvalds warns that a massive influx of automated, duplicate AI bug reports is causing severe administrative fatigue across Linux security mailing lists.
21 views
Daily Writeups
⤷ Title: Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:45:58 +0000
════════════════════════
⌗ Tags: #Malware #AppleSeed #cyber_espionage #HelloDoor #infosec #Kimsuky #MemLoad #PebbleDash #Rust Backdoor #threat intelligence #TryCloudflare #VSCode Remote Tunneling
Daily CyberSecurity
Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
Kimsuky APT evolves its arsenal with "HelloDoor," a new Rust-based backdoor, and hijacks trusted VSCode Remote Tunneling to bypass corporate firewalls.
13 views
Daily Writeups
⤷ Title: Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:43:11 +0000
════════════════════════
⌗ Tags: #Technology #Automated Enforcement Algorithms #Cloud Concentration Risk #Google Cloud Account Suspension #Infrastructure Automation Failure #Multi_Cloud Redundancy #Non_Enterprise Build Throttle #Railway Outage 2026 #Site Reliability Engineering #Unilateral Cloud Termination #UniSuper GCP Incident
Daily CyberSecurity
Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
Developer cloud platform Railway suffers a widespread, catastrophic infrastructure outage after Google Cloud abruptly suspends its corporate account.
11 views
Daily Writeups
⤷ Title: Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:39:53 +0000
════════════════════════
⌗ Tags: #Data Leak #Credential Harvesting Payload #Cryptographic Token Rotation #Developer Endpoint Isolation #Forensic Log Analysis #GitHub Copilot Leak #GitHub Enterprise Server #GitHub Source Code Breach #supply chain attack #TeamPCP Syndicate #VS Code Extension Worm
Daily CyberSecurity
Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
GitHub confirms a perimeter breach by TeamPCP. An administrative VS Code extension supply-chain worm exfiltrated 3,800 proprietary core source repositories.
11 views
Daily Writeups
⤷ Title: Multi-Stage PyInstaller Loader Weaponizes AMSI Patching to Deploy XWorm RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:13:42 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #Cyber Security #defense evasion #infosec #Malware Analysis #Point Wild #PyInstaller Loader #rat #Remote Access Trojan #VirtualProtect #XWorm
Daily CyberSecurity
Multi-Stage PyInstaller Loader Weaponizes AMSI Patching to Deploy XWorm RAT
Point Wild exposes a sophisticated PyInstaller loader using in-memory AMSI patching and SHA-512 decryption to drop XWorm V7.4. Patch now!
11 views
Daily Writeups
⤷ Title: How I Discovered Account Takeover (ATO) via XSS and Open redirect
════════════════════════
𐀪 Author: JEETPAL
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:45:24 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup #bug_bounty_hunter #bug_bounty_tips #bug_bounty_writeup
Medium
How I Discovered Account Takeover (ATO) via XSS and Open redirect
Hello Everyone,
11 views
Daily Writeups
⤷ Title: How I Bypassed OTP Verification on Quick Heal — Account Takeover Without Valid OTP [RESOLVED]
════════════════════════
𐀪 Author: PradyumnTiwareNexus
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:27:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cybersecurity #web_security #infosec
Medium
🔐 How I Bypassed OTP Verification on Quick Heal — Account Takeover Without Valid OTP [RESOLVED]
👋 Hey Hackers!
10 views
Daily Writeups
⤷ Title: The Day My Non-Tech Friend Asked Me to ‘Hack’ His Ex’s Instagram
════════════════════════
𐀪 Author: Vijay Kumar Gupta
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:46:00 GMT
════════════════════════
⌗ Tags: #life #hacking #careers #cybersecurity #non_tech
Medium
The Day My Non-Tech Friend Asked Me to ‘Hack’ His Ex’s Instagram
Or: How I Learned to Say No (And Why You Should Too)
12 views
Daily Writeups
⤷ Title: Two Critical Attacks, One Week: NGINX Is Being Exploited and Your Email Gateway Has 7 Open Wounds
════════════════════════
𐀪 Author: Yuvraj Singh
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:29:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #email_security #vulnerability #tech_news_today
Medium
Two Critical Attacks, One Week: NGINX Is Being Exploited and Your Email Gateway Has 7 Open Wounds
CVE-2026–42945 is live in the wild. SEPPMail has a CVSS 10.0 flaw. If either is in your stack, this is your five-alarm briefing.
17 views
Daily Writeups
⤷ Title: How Modern Scam Call Centers Operate — Inside The Scam Industry (Part 1)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:37:51 GMT
════════════════════════
⌗ Tags: #security #make_money_online #hacking #cybersecurity #social_media
Medium
📞 How Modern Scam Call Centers Operate — Inside The Scam Industry (Part 1)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
7 views