Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: ️ Tracking Phishing Websites Safely — Inside The Scam Industry (Part 3)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:19:54 GMT
════════════════════════
⌗ Tags: #cryptocurrency #cybercrime #hacking #cybersecurity #true_crime
Medium
🕵️ Tracking Phishing Websites Safely — Inside The Scam Industry (Part 3)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
15 views
Daily Writeups
⤷ Title: Adversarial Mind — Crackmes Writeup
════════════════════════
𐀪 Author: CHANDRA KANT BAURI
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:24:18 GMT
════════════════════════
⌗ Tags: #infosec #reverse_engineering #cybersecurity #ctf_writeup #crackme
Medium
Adversarial Mind — Crackmes Writeup
When overthinking is your worst enemy in reverse engineering.
16 views
Daily Writeups
⤷ Title: TryHackMe CTF: W1seGuy Writeup Python approach
════════════════════════
𐀪 Author: Arsha Ranjith
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:34:36 GMT
════════════════════════
⌗ Tags: #w1seguy #tryhackme #cybersecurity #tryhackme_walkthrough #cryptography
Medium
TryHackMe CTF: W1seGuy Writeup Python approach
TryHackMe: W1seGuy Writeup Hello, fellow reader! I recently completed the W1seGuy challenge on TryHackMe, and I have to say it’s very beginner-friendly, although having some basic programming …
15 views
Daily Writeups
⤷ Title: The .env Goldmine: How a Simple GET Request to attacker.com/.env Can Own Your Infrastructure
════════════════════════
𐀪 Author: Pankaj Kumar Yadav
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:29:32 GMT
════════════════════════
⌗ Tags: #social_media #business #ethical_hacking #cybersecurity #society
Medium
The .env Goldmine: How a Simple GET Request to attacker.com/.env Can Own Your Infrastructure
Every day, thousands of web applications leak their most sensitive secrets through a single file. What starts as a simple fuzzing request…
13 views
Daily Writeups
⤷ Title: TryHackMe: Ignite Walkthrough (An Elegant Path to Root)
════════════════════════
𐀪 Author: Fsociety
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:14:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #wapt #tryhackme_walkthrough #ethical_hacking
Medium
TryHackMe: Ignite Walkthrough (An Elegant Path to Root)
Recently, I completed the Ignite room on TryHackMe. This room is beginner-friendly but provides excellent hands-on exposure to real-world…
20 views
Daily Writeups
⤷ Title: Inside the Influence Network of Iran’s Diplomatic Missions on X
════════════════════════
𐀪 Author: Sourena
════════════════════════
ⴵ Time: Fri, 22 May 2026 05:04:49 GMT
════════════════════════
⌗ Tags: #twitter #xs #iran #info_ops #embassy
Medium
Inside the Influence Network of Iran’s Diplomatic Missions on X
A Data-Driven Look at How Iran’s Embassies Weaponized Social Media to Drive Wartime Propaganda and Amplify State Narratives
25 views
Daily Writeups
⤷ Title: Bypassing Terminal Protections: New SHub “Reaper” Variant Abuses AppleScript to Loot macOS Endpoints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:03:04 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript Exploit #crypto wallet theft #Cyber Security #Filegrabber #infosec #LaunchAgent Persistence #macOS Infostealer #Reaper Build #SentinelOne #SHub Stealer #Tahoe 26.4 Bypass
Daily CyberSecurity
Bypassing Terminal Protections: New SHub "Reaper" Variant Abuses AppleScript to Loot macOS Endpoints
SentinelOne exposes the SHub Stealer "Reaper" variant. It bypasses Apple's latest Terminal paste mitigations to hijack crypto wallets and corporate documents.
20 views
Daily Writeups
⤷ Title: Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:01:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Cloud Security #Cloud Egress #Control Plane Attack #Cyber Security #Identity Hijacking #infosec #Key Vault Exploit #Microsoft Threat Intelligence #RBAC Manipulation #SSPR Abuse #Storm_2949
Daily CyberSecurity
Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
Microsoft exposes Storm-2949, a cloud-native threat group abusing Azure management features and SSPR to hijack Key Vaults, App Services, and SQL databases.
14 views
Daily Writeups
⤷ Title: CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:46:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Execution Safety #cPanel Vulnerability #CVE_2026_48172 #Cyber Security #infosec #LiteSpeed Plugin #privilege escalation #redisAble Exploit #Root Server Access #Web Hosting Security #WHM Patch
Daily CyberSecurity
CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
Urgent: Active attacks target the LiteSpeed User-End cPanel Plugin (CVE-2026-48172). Learn how to detect the exploit and secure your server root today.
13 views
Daily Writeups
⤷ Title: Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:17:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.NET RAT #APJ Cyber Espionage #CDN Masquerading #Chinese APT #Cyber Security #Darktrace #DLL Sideloading #infosec #living_off_the_land #malware #Memory injection #Twill Typhoon
Daily CyberSecurity
Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks
Darktrace exposes Chinese APT Twill Typhoon’s latest campaign using DLL sideloading and Yahoo/Apple CDN lookalikes to deploy a modular .NET RAT.
15 views
Daily Writeups
⤷ Title: Triple CVSS 10.0 Warning: Critical Ubiquiti UniFi OS Flaws Allow Unauthenticated Remote Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:30:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Command Injection #CVE_2026_34908 #CVE_2026_34909 #CVE_2026_34910 #Cyber Security #firmware update #infosec #Network Video Recorder #Path Traversal #Ubiquiti #Ubiquiti UniFi OS #UniFi OS #Vulnerability
Daily CyberSecurity
Triple CVSS 10.0 Warning: Critical Ubiquiti UniFi OS Flaws Allow Unauthenticated Remote Takeovers
Ubiquiti patches three critical CVSS 10.0 vulnerabilities in UniFi OS affecting gateways, storage, and NVRs. Update your firmware immediately!
22 views
Daily Writeups
⤷ Title: I Built a 10-Phase Attack Surface Recon Framework from Scratch — Here’s Everything I Learned
════════════════════════
𐀪 Author: Sidharthsmenon
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:45:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #cybersecurity_news #ethical_hacking #cybersecurity
Medium
I Built a 10-Phase Attack Surface Recon Framework from Scratch — Here’s Everything I Learned
A deep technical walkthrough of how I designed, built, and deployed an automated bug bounty recon dashboard using Node.js, React, and 12…
❤1
20 views
Daily Writeups
⤷ Title: Why Most Bug Bounty Hunters Fail at Recon (And How to Fix It)
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:09:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #medium #tech
Medium
Why Most Bug Bounty Hunters Fail at Recon (And How to Fix It)
Hi, I’m Vipul 👋 — the human behind TheHackersLog
15 views
Daily Writeups
⤷ Title: The Day GitHub Got Robbed in 11 Minutes
════════════════════════
𐀪 Author: VR
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:25:00 GMT
════════════════════════
⌗ Tags: #github #hacking #tech #cybersecurity #technology
Medium
The Day GitHub Got Robbed in 11 Minutes
It’s a Monday afternoon.
15 views
Daily Writeups
⤷ Title: GoHPTS (go-http-proxy-to-socks) v1.14.0:
════════════════════════
𐀪 Author: Shadowy Pycoder
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:52:17 GMT
════════════════════════
⌗ Tags: #golang #proxy #hacking
Medium
GoHPTS (go-http-proxy-to-socks) v1.14.0:
In this new update I added HTTP/2, HTTP/3, and pcap capture support to GoHPTS, my open-source Go proxy tool. It already supported…
15 views
Daily Writeups
⤷ Title: How a Single Vulnerable WordPress Plugin Led to Full System Compromise: My MegaQuagga Pentest…
════════════════════════
𐀪 Author: Aktiaasrafunnesa
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:09:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #wordpress_security #infosec #ethical_hacking
Medium
How a Single Vulnerable WordPress Plugin Led to Full System Compromise: My MegaQuagga Pentest…
A step‑by‑step walkthrough of exploiting CVE‑2019‑9978 on a WordPress server
16 views
Daily Writeups
⤷ Title: TryHackMe — Pickle Rick CTF Writeup
════════════════════════
𐀪 Author: Fakhri Rahadi
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:16:35 GMT
════════════════════════
⌗ Tags: #capture_the_flag #cybersecurity #tryhackme
Medium
TryHackMe — Pickle Rick CTF Writeup
TryHackMe — Pickle Rick CTF Writeup Platform: TryHackMe Room: Pickle Rick Difficulty: Easy Category: Web, Linux Objective: Find 3 secret ingredients to help Rick turn back from a pickle into a …
20 views
Daily Writeups
⤷ Title: CYBERSECURITY FUNDAMENTAL
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:01:46 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cryptography #ethical_hacking #cia_triad
Medium
🔐CYBERSECURITY FUNDAMENTAL
IT is not an OPTION , it is NECESSARY …
28 views
Daily Writeups
⤷ Title: From Beginner to exploiting SQL Injection (Low to Impossible)DVWA
════════════════════════
𐀪 Author: Samuel K
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:19:28 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #sql #practice #labs
Medium
From Beginner to exploiting SQL Injection (Low to Impossible)DVWA
SQL INJECTION LAB
40 views
Daily Writeups
⤷ Title: Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 22 May 2026 14:20:18 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Malware-as-a-Service Exposed: Cisco Talos Unmasks Developer Behind Prolific “BadIIS” Web Server Toolkit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 09:01:55 +0000
════════════════════════
⌗ Tags: #Malware #BadIIS Variant #Black_Hat SEO Proxy #Cisco Talos #Content Hijacking #Cyber Security #IIS Extension #infosec #lwxat Developer #Malware_as_a_Service #PDB Metadata Leak #Traffic Redirection
Daily CyberSecurity
Malware-as-a-Service Exposed: Cisco Talos Unmasks Developer Behind Prolific "BadIIS" Web Server Toolkit
Cisco Talos exposes a commodity BadIIS variant sold as a service by dev "lwxat," featuring automated builders for traffic hijacking and reverse proxying.
28 views