Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:57:01 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:14:11 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: Ecosystem Evolution: Google Unveils “Continue On” in Android 17 to Match Apple’s Handoff
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 04:46:30 +0000
════════════════════════
⌗ Tags: #Android #Android 17 Continue On #Android PC Ecosystem Parity #Android Software Fragmentation #Apple Handoff Android Version #Bidirectional App State Migration #Cross Device App Continuity #Google IO 2026 #Pixel Launcher Taskbar #Progressive Web App Fallback #WebRTC Encoded Intent
Daily CyberSecurity
Ecosystem Evolution: Google Unveils "Continue On" in Android 17 to Match Apple’s Handoff
Google introduces "Continue On" at I/O 2026, an Android 17 cross-device framework providing seamless, bidirectional app handoffs between phones and tablets.
20 views
Daily Writeups
⤷ Title: The Free-for-Life Eviction: Google Triggers Outrage by Forcing Legacy G Suite Family Domains to Paid Plans
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 04:40:26 +0000
════════════════════════
⌗ Tags: #Technology #Algorithmic False Positive #Commercial Reclassification #Custom Domain Email #Data Backup Drive #Family Domain Eviction #G Suite Legacies 2026 #G Suite Legacy Free #Google Admin Console Appeal #Google Workspace Upgrade #Personal Non_Commercial Use Policy
Daily CyberSecurity
The Free-for-Life Eviction: Google Triggers Outrage by Forcing Legacy G Suite Family Domains to Paid Plans
Google sparks widespread dissent by unilaterally reclassifying personal legacy G Suite free accounts as commercial, forcing a paid Workspace upgrade.
14 views
Daily Writeups
⤷ Title: The AI Flood That’s Killing Bug Bounty — And the Hidden Reason Nobody Is Talking About
By Adil Ali
════════════════════════
𐀪 Author: Adil Alee
════════════════════════
ⴵ Time: Thu, 21 May 2026 03:02:07 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #bug_bounty #infosec #cybersecurity #ethical_hacking
Medium
The AI Flood That’s Killing Bug Bounty — And the Hidden Reason Nobody Is Talking About
By Adil Ali
The bug bounty ecosystem is in crisis.
HackerOne paused its Internet Bug Bounty program in March 2026. The cURL project abandoned monetary…
12 views
Daily Writeups
⤷ Title: Linux Capture The Flag Bandit Level 15
════════════════════════
𐀪 Author: Red
════════════════════════
ⴵ Time: Thu, 21 May 2026 03:07:00 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #infosec #hacking #linux
Medium
Linux Capture The Flag Bandit Level 15
SSL/TLS Encryption and OpenSSL
13 views
Daily Writeups
⤷ Title: Silver Fox’s Fangs: ValleyRAT’s Kernel RootKit and the RustSL Phishing Wave Hitting India
════════════════════════
𐀪 Author: dannyDUD
════════════════════════
ⴵ Time: Thu, 21 May 2026 03:36:04 GMT
════════════════════════
⌗ Tags: #malware #cybersecurity #infosec #threat_intelligence #india
Medium
Silver Fox’s Fangs: ValleyRAT’s Kernel RootKit and the RustSL Phishing Wave Hitting India
TL;DR
14 views
Daily Writeups
⤷ Title: BIOHAZARD WALKTHROUGH | TRYHACKME
════════════════════════
𐀪 Author: ANWAR1
════════════════════════
ⴵ Time: Thu, 21 May 2026 04:43:05 GMT
════════════════════════
⌗ Tags: #tryhackme #biohazard #ethical_hacking #cybersecurity #ctf
Medium
BIOHAZARD WALKTHROUGH | TRYHACKME
TASK 1 — INTRODUCTION
16 views
Daily Writeups
⤷ Title: SlingShot Tryhackme Investigation Walkthrough
════════════════════════
𐀪 Author: Dhruv Bhatia
════════════════════════
ⴵ Time: Thu, 21 May 2026 04:00:44 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #ctf_writeup #elasticsearch #tryhackme
Medium
SlingShot Tryhackme Investigation Walkthrough
Slingshot room is a must practice CTF for an Aspiring SOC Analyst who perform log investigations and investigate the security incidents…
21 views
Daily Writeups
⤷ Title: ChromaToast Exploit: Unpatched CVSS 10.0 Flaw Grants Pre-Auth RCE in ChromaDB Python Server
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:59:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #ChromaDB CVE_2026_45829 #HiddenLayer ChromaToast Research #Hugging Face Model Hijacking #Pre_Authentication Code Injection #Python FastAPI Server Vulnerability #Rust Implementation Mitigation #Shodan Internet Exposure #trust_remote_code Parameter #Unpatched Remote Code Execution #Vector Database Exploit
Penetration Testing Tools
ChromaToast Exploit: Unpatched CVSS 10.0 Flaw Grants Pre-Auth RCE in ChromaDB Python Server
A critical authentication bypass vulnerability facilitating unauthenticated remote code execution (RCE) has been isolated within the ChromaDB architecture.
23 views
Daily Writeups
⤷ Title: The Silent Blackout: Unpatched Huawei Router Zero-Day Crushed Luxembourg’s Telecom Grid
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:54:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #Carrier Grade Networking #Core Switching Fabric #Denial of Service Exploit #European CERT IoCs #Firmware Reboot Loop #Huawei Enterprise Routing Hardware #POST Luxembourg Telecom Collapse #Recorded Future News Threat Intel #Restricted Advisory Portal #zero_day vulnerability
Penetration Testing Tools
The Silent Blackout: Unpatched Huawei Router Zero-Day Crushed Luxembourg’s Telecom Grid
During the previous summer season, the sovereign nation of Luxembourg suffered a catastrophic, near-total collapse of its domestic
11 views
Daily Writeups
⤷ Title: Beyond Email: Attackers Hijack Microsoft Teams External Access to Launch Deep Network Compromise
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:18:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CVE_2023_36036 #Cyber Security #Dumpit #External Access Configuration #Incident Response #infosec #Kerberoasting #LSASS Memory Dump #Microsoft Teams phishing #Rapid7 Labs #social engineering
Daily CyberSecurity
Beyond Email: Attackers Hijack Microsoft Teams External Access to Launch Deep Network Compromise
Rapid7 Labs exposes how attackers are abusing Microsoft Teams external access and Dumpit memory scrapers to breach corporate networks. Protect your team!
10 views
Daily Writeups
⤷ Title: How an Android App’s Misconfigured Firebase Database Exposed Sensitive Data
════════════════════════
𐀪 Author: Athultpme
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:41:43 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #bug_bounty #mobile #web_security
Medium
How an Android App’s Misconfigured Firebase Database Exposed Sensitive Data
Mobile Security | Android | Firebase | Cybsersecurity
17 views
Daily Writeups
⤷ Title: How a College Website’s REST API Exposed Its Entire Attack Surface — User Enumeration…
════════════════════════
𐀪 Author: Padmesh
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:23:10 GMT
════════════════════════
⌗ Tags: #offensive_security #hunting #wordpress #bug_bounty #cybersecurity
Medium
How a College Website’s REST API Exposed Its Entire Attack Surface — User Enumeration…
By Padmesh P S | Cybersecurity Researcher | 6 min read | Severity: High/Critical
14 views
Daily Writeups
⤷ Title: Cryptographic Failures — The #4 Vulnerability on the Web
════════════════════════
𐀪 Author: loopXvedant
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:31:00 GMT
════════════════════════
⌗ Tags: #ctf #bug_bounty #owasp_top_10 #hacking #cybersecurity
Medium
Cryptographic Failures — The #4 Vulnerability on the Web 🔐
When encryption is missing, weak, or just plain wrong — your data is already exposed.
11 views
Daily Writeups
⤷ Title: REASONING vs RULES : Part 2 — The Feedback Engine: How the Colosseum Learns Faster Than Threats…
════════════════════════
𐀪 Author: Vishnu Priya Vangipuram
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:53:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #artificial_intelligence #ai_agent #application_security #distributed_systems
Medium
REASONING vs RULES : Part 2 — The Feedback Engine: How the Colosseum Learns Faster Than Threats Evolve
In Part 1 of the blog series, The arena was set. Now we start building the engine that wins.
12 views
Daily Writeups
⤷ Title: ZPHISHER HANDS ON LAB
════════════════════════
𐀪 Author: BlueTeamMal
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:56:45 GMT
════════════════════════
⌗ Tags: #social_engineering #hacking #cybersecurity
Medium
ZPHISHER HANDS ON LAB
1.I used Zphisher as it’s the one of the simplest tool for social engineering.
13 views
Daily Writeups
⤷ Title: What is 51% Attack in Blockchain? How does it works?
════════════════════════
𐀪 Author: Om Ratnaparkhe
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:27:35 GMT
════════════════════════
⌗ Tags: #web3 #hacking #bitcoin #blockchain #security
Medium
What is 51% Attack in Blockchain? How does it works?
The 51% attack is a famous blockchain technology’s loophole or often regarded as a vulnerability. Its a way to tamper with the blockchain’s…
17 views
Daily Writeups
⤷ Title: Investigating Scam Infrastructure Using OSINT — Inside The Scam Industry (Part 2)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:57:20 GMT
════════════════════════
⌗ Tags: #osint #true_crime #cybersecurity #hacking #cybercrime
Medium
🌐 Investigating Scam Infrastructure Using OSINT — Inside The Scam Industry (Part 2)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
17 views
Daily Writeups
⤷ Title: Command Line — part 1
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:53:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_development #cybersecurity #infosec #cyber_security_awareness
Medium
Command Line — part 1
Windows Command Line
17 views
Daily Writeups
⤷ Title: GitHub Was Breached Through a Single VS Code Extension.
════════════════════════
𐀪 Author: Sai kiran
════════════════════════
ⴵ Time: Thu, 21 May 2026 05:21:13 GMT
════════════════════════
⌗ Tags: #supply_chain_security #github #infosec #developer_security #cybersecurity
Medium
GitHub Was Breached Through a Single VS Code Extension.
One employee. One poisoned extension. One click on the VS Code Marketplace. And TeamPCP walked out with 3,800 of GitHub’s internal…
19 views