Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: The Unsafe Send: How an HTTP Client Library Led to Remote Code Execution
════════════════════════
𐀪 Author: Alperen
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 02:44:52 GMT
════════════════════════
⌗ Tags: #hackerone #source_code_security #source_code #ruby #bugbounty_writeup
Medium
The Unsafe Send: How an HTTP Client Library Led to Remote Code Execution
Finding a vulnerability in a core library is always a “hold your breath” moment. You realize that the impact isn’t just limited to one…
45 views
Daily Writeups
⤷ Title: IDOR in a JWT-Protected Card Viewer API | CodeReviewLab Writeup
════════════════════════
𐀪 Author: Zaid Arif
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 03:59:48 GMT
════════════════════════
⌗ Tags: #idor #source_code_review #code_review #bug_bounty
Medium
IDOR in a JWT-Protected Card Viewer API | CodeReviewLab Writeup
Secure code review, for AppSec engineers, is in many ways our version of LeetCode. It’s not about solving well-defined problems, but about…
22 views
Daily Writeups
⤷ Title: Anthropic Issues Mass DMCA to Erase 8,100 Claude Code Repositories
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 07:47:39 +0000
════════════════════════
⌗ Tags: #Data Leak #AI security #Anthropic #Claude Code #Coding News 2026 #Copyright Infringement #DMCA #Github #Intellectual Property #Repository Takedown #Source Code Leak
Penetration Testing Tools
Anthropic Issues Mass DMCA to Erase 8,100 Claude Code Repositories
The GitHub platform has received a formal grievance under the Digital Millennium Copyright Act (DMCA) from the artificial
7 views
Daily Writeups
⤷ Title: The DevSecOps Paradox: How the TeamPCP Supply Chain Attack Turned Cisco’s Security Tools Into Trojan Horses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 07:45:06 +0000
════════════════════════
⌗ Tags: #Data Leak #AWS #Checkmarx #Cisco #cloud security #Cybersecurity 2026 #Github #Infosec #LiteLLM #Source Code Leak #supply chain attack #TeamPCP #Trivy
Information Security News
The DevSecOps Paradox: How the TeamPCP Supply Chain Attack Turned Cisco’s Security Tools Into Trojan Horses
A cyber offensive targeting one of the preeminent information technology conglomerates originated from a seemingly mundane instrument for vulnerability assessment. Consequently, adversaries succes…
6 views
Daily Writeups
⤷ Title: The Claude Code Leak: How a 500,000-Line npm Blunder Became a Golden Ticket for Hackers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:41:30 +0000
════════════════════════
⌗ Tags: #Malware #Anthropic #Claude Code #Cybersecurity 2026 #GhostSocks #malware #npm Leak #Source Code Disclosure #supply chain attack #Vidar Stealer #Zscaler ThreatLabz
Penetration Testing Tools
The Claude Code Leak: How a 500,000-Line npm Blunder Became a Golden Ticket for Hackers
The recent inadvertent exposure of the internal source code for one of the most prominent artificial intelligence instruments
9 views
Daily Writeups
⤷ Title: WolfSSL Hunting Experience: Cerita Dari Seorang Bug Hunter Pengangguran :V
════════════════════════
𐀪 Author: MostReal
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 11:35:13 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #hacking #source_code_review #bug_bounty_tips
Medium
WolfSSL Hunting Experience: Cerita Dari Seorang Bug Hunter Pengangguran :V
Wkwk, jadi gini… gw udah lama banget hunting di wolfSSL ini. Buat yang gak tau, wolfSSL itu library SSL/TLS yang dipake di banyak embedded…
25 views
Daily Writeups
⤷ Title: From Recon to Letter of Recognition | NASA VDP
════════════════════════
𐀪 Author: Wahyu Priambodo
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 02:04:17 GMT
════════════════════════
⌗ Tags: #source_code_disclosure #nasa_vdp #bugcrowd #bug_bounty
Medium
From Recon to Letter of Recognition | NASA VDP
Full Source Code Disclosure from a “.git” Repository
12 views
Daily Writeups
⤷ Title: Trellix Investigates Unauthorized Breach of Internal Source Code Repository
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 08:05:21 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber attack 2026 #cybersecurity news #Data Theft #digital forensics #Endpoint Protection #Infosec #Repository Security #Source Code Breach #Supply Chain Risk #Trellix #XDR
Penetration Testing Tools
Trellix Investigates Unauthorized Breach of Internal Source Code Repository
Cybersecurity giant Trellix confirms an incursion into its internal code repository. Independent experts are investigating potential risks to XDR and endpoint logic.
16 views
Daily Writeups
⤷ Title: Grafana Says It Rejected Ransom Demand After Source Code Theft
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Sun, 17 May 2026 10:17:46 +0000
════════════════════════
⌗ Tags: #Data Breaches #Cyber Attack #Cyber Crime #Cybersecurity #GitHub #Grafana #Ransom #Source Code #Vulnerability
Hackread
Grafana Says It Rejected Ransom Demand After Source Code Theft
Grafana says hackers stole its source code after accessing a GitHub token, but no customer data or systems were affected.
34 views
Daily Writeups
⤷ Title: The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:06:15 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber Security #GitHub Token Rotation #Grafana Labs #Incident Response #infosec #Mini Shai_Hulud #npm Worm #Ransom Demand #Source Code Theft #supply chain attack
Daily CyberSecurity
The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
Grafana Labs confirms a targeted cyberattack and source code theft after a missed token from the Mini Shai-Hulud npm worm left a repository exposed.
23 views
Daily Writeups
⤷ Title: Four-Way PHP Domino-Fall: Unchecked Input to Full Root Compromise
════════════════════════
𐀪 Author: Xia0checkmate
════════════════════════
ⴵ Time: Fri, 29 May 2026 17:39:38 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #critical_thinking #bug_bounty_writeup #source_code_review #php
Medium
Four-Way PHP Domino-Fall: Unchecked Input to Full Root Compromise
A single, seemingly innocent HTTP endpoint can form a critical business-impact chain when multiple structural PHP weaknesses are stitched…
36 views
Daily Writeups
⤷ Title: The Silicon Harvest: Google Seeks Premium Codebases for AI Refinement
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 03:50:57 +0000
════════════════════════
⌗ Tags: #Technology #AI Training Data #app development #Gemini AI #google #Google Play Store #Software Engineering #Source Code Licensing
Daily CyberSecurity
The Silicon Harvest: Google Seeks Premium Codebases for AI Refinement
Google licenses app code from Play Store developers to train Gemini AI models and compete with GitHub Copilot and Claude Code. Learn more.
16 views
Daily Writeups
⤷ Title: The Retail Blueprint: IKEA Investigates Massive Lapsus$ Extortion Claims
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 03:42:59 +0000
════════════════════════
⌗ Tags: #Data Leak #IKEA Lapsus data breach #Ingka Group cyberattack #Lapsus$ syndicate leak #Scattered LapSus Hunters #source code theft #tech supply chain risk
Information Security News
IKEA Lapsus Data Breach: Source Code Leaked?
Analyze the alleged IKEA Lapsus data breach. Learn how the cybercrime syndicate claims to have stolen 180GB of source code and internal files.
13 views
Daily Writeups
⤷ Title: HackTheBox “CodePartTwo” Walkthrough
════════════════════════
𐀪 Author: Abdullah Kareem
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 20:16:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #hackthebox #source_code_analysis #linux
Medium
HackTheBox “CodePartTwo” Walkthrough
CodePartTwo is an Easy Linux machine that features a vulnerable Flask-based web application. Initial web enumeration reveals a JavaScript…
22 views
Daily Writeups
⤷ Title: The Akatsuki Cafe: How Git Leaks & JS Source Analysis Gave Me Super Admin Access ✍️
════════════════════════
𐀪 Author: 0B1To_X_ucH!h4
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 09:43:37 GMT
════════════════════════
⌗ Tags: #source_code #bug_bounty #red_team
Medium
The Akatsuki Cafe: How Git Leaks & JS Source Analysis Gave Me Super Admin Access 💀✍️
In this post, I’ll walk you through a discovery that was a rare “once-in-a-lifetime” hit on a humble self-hosted program. I managed to…
36 views