Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: TryHackMe: Ignite Walkthrough (An Elegant Path to Root)
════════════════════════
𐀪 Author: Fsociety
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:14:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #wapt #tryhackme_walkthrough #ethical_hacking
Medium
TryHackMe: Ignite Walkthrough (An Elegant Path to Root)
Recently, I completed the Ignite room on TryHackMe. This room is beginner-friendly but provides excellent hands-on exposure to real-world…
20 views
Daily Writeups
⤷ Title: Inside the Influence Network of Iran’s Diplomatic Missions on X
════════════════════════
𐀪 Author: Sourena
════════════════════════
ⴵ Time: Fri, 22 May 2026 05:04:49 GMT
════════════════════════
⌗ Tags: #twitter #xs #iran #info_ops #embassy
Medium
Inside the Influence Network of Iran’s Diplomatic Missions on X
A Data-Driven Look at How Iran’s Embassies Weaponized Social Media to Drive Wartime Propaganda and Amplify State Narratives
25 views
Daily Writeups
⤷ Title: Bypassing Terminal Protections: New SHub “Reaper” Variant Abuses AppleScript to Loot macOS Endpoints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:03:04 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript Exploit #crypto wallet theft #Cyber Security #Filegrabber #infosec #LaunchAgent Persistence #macOS Infostealer #Reaper Build #SentinelOne #SHub Stealer #Tahoe 26.4 Bypass
Daily CyberSecurity
Bypassing Terminal Protections: New SHub "Reaper" Variant Abuses AppleScript to Loot macOS Endpoints
SentinelOne exposes the SHub Stealer "Reaper" variant. It bypasses Apple's latest Terminal paste mitigations to hijack crypto wallets and corporate documents.
20 views
Daily Writeups
⤷ Title: Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:01:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Cloud Security #Cloud Egress #Control Plane Attack #Cyber Security #Identity Hijacking #infosec #Key Vault Exploit #Microsoft Threat Intelligence #RBAC Manipulation #SSPR Abuse #Storm_2949
Daily CyberSecurity
Storm-2949 Hijacks Azure Identity and Key Vaults in Catastrophic Cloud Campaign
Microsoft exposes Storm-2949, a cloud-native threat group abusing Azure management features and SSPR to hijack Key Vaults, App Services, and SQL databases.
14 views
Daily Writeups
⤷ Title: CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:46:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Execution Safety #cPanel Vulnerability #CVE_2026_48172 #Cyber Security #infosec #LiteSpeed Plugin #privilege escalation #redisAble Exploit #Root Server Access #Web Hosting Security #WHM Patch
Daily CyberSecurity
CVSS 10.0 Zero-Day: Active Attacks Exploit LiteSpeed cPanel Plugin for Root Server Access
Urgent: Active attacks target the LiteSpeed User-End cPanel Plugin (CVE-2026-48172). Learn how to detect the exploit and secure your server root today.
13 views
Daily Writeups
⤷ Title: Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 06:17:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.NET RAT #APJ Cyber Espionage #CDN Masquerading #Chinese APT #Cyber Security #Darktrace #DLL Sideloading #infosec #living_off_the_land #malware #Memory injection #Twill Typhoon
Daily CyberSecurity
Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks
Darktrace exposes Chinese APT Twill Typhoon’s latest campaign using DLL sideloading and Yahoo/Apple CDN lookalikes to deploy a modular .NET RAT.
15 views
Daily Writeups
⤷ Title: Triple CVSS 10.0 Warning: Critical Ubiquiti UniFi OS Flaws Allow Unauthenticated Remote Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 04:30:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Command Injection #CVE_2026_34908 #CVE_2026_34909 #CVE_2026_34910 #Cyber Security #firmware update #infosec #Network Video Recorder #Path Traversal #Ubiquiti #Ubiquiti UniFi OS #UniFi OS #Vulnerability
Daily CyberSecurity
Triple CVSS 10.0 Warning: Critical Ubiquiti UniFi OS Flaws Allow Unauthenticated Remote Takeovers
Ubiquiti patches three critical CVSS 10.0 vulnerabilities in UniFi OS affecting gateways, storage, and NVRs. Update your firmware immediately!
22 views
Daily Writeups
⤷ Title: I Built a 10-Phase Attack Surface Recon Framework from Scratch — Here’s Everything I Learned
════════════════════════
𐀪 Author: Sidharthsmenon
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:45:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #cybersecurity_news #ethical_hacking #cybersecurity
Medium
I Built a 10-Phase Attack Surface Recon Framework from Scratch — Here’s Everything I Learned
A deep technical walkthrough of how I designed, built, and deployed an automated bug bounty recon dashboard using Node.js, React, and 12…
❤1
20 views
Daily Writeups
⤷ Title: Why Most Bug Bounty Hunters Fail at Recon (And How to Fix It)
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:09:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #medium #tech
Medium
Why Most Bug Bounty Hunters Fail at Recon (And How to Fix It)
Hi, I’m Vipul 👋 — the human behind TheHackersLog
15 views
Daily Writeups
⤷ Title: The Day GitHub Got Robbed in 11 Minutes
════════════════════════
𐀪 Author: VR
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:25:00 GMT
════════════════════════
⌗ Tags: #github #hacking #tech #cybersecurity #technology
Medium
The Day GitHub Got Robbed in 11 Minutes
It’s a Monday afternoon.
15 views
Daily Writeups
⤷ Title: GoHPTS (go-http-proxy-to-socks) v1.14.0:
════════════════════════
𐀪 Author: Shadowy Pycoder
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:52:17 GMT
════════════════════════
⌗ Tags: #golang #proxy #hacking
Medium
GoHPTS (go-http-proxy-to-socks) v1.14.0:
In this new update I added HTTP/2, HTTP/3, and pcap capture support to GoHPTS, my open-source Go proxy tool. It already supported…
15 views
Daily Writeups
⤷ Title: How a Single Vulnerable WordPress Plugin Led to Full System Compromise: My MegaQuagga Pentest…
════════════════════════
𐀪 Author: Aktiaasrafunnesa
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:09:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #wordpress_security #infosec #ethical_hacking
Medium
How a Single Vulnerable WordPress Plugin Led to Full System Compromise: My MegaQuagga Pentest…
A step‑by‑step walkthrough of exploiting CVE‑2019‑9978 on a WordPress server
16 views
Daily Writeups
⤷ Title: TryHackMe — Pickle Rick CTF Writeup
════════════════════════
𐀪 Author: Fakhri Rahadi
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:16:35 GMT
════════════════════════
⌗ Tags: #capture_the_flag #cybersecurity #tryhackme
Medium
TryHackMe — Pickle Rick CTF Writeup
TryHackMe — Pickle Rick CTF Writeup Platform: TryHackMe Room: Pickle Rick Difficulty: Easy Category: Web, Linux Objective: Find 3 secret ingredients to help Rick turn back from a pickle into a …
20 views
Daily Writeups
⤷ Title: CYBERSECURITY FUNDAMENTAL
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:01:46 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cryptography #ethical_hacking #cia_triad
Medium
🔐CYBERSECURITY FUNDAMENTAL
IT is not an OPTION , it is NECESSARY …
28 views
Daily Writeups
⤷ Title: From Beginner to exploiting SQL Injection (Low to Impossible)DVWA
════════════════════════
𐀪 Author: Samuel K
════════════════════════
ⴵ Time: Fri, 22 May 2026 08:19:28 GMT
════════════════════════
⌗ Tags: #sql_injection #cybersecurity #sql #practice #labs
Medium
From Beginner to exploiting SQL Injection (Low to Impossible)DVWA
SQL INJECTION LAB
40 views
Daily Writeups
⤷ Title: Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 22 May 2026 14:20:18 +0530
════════════════════════
⌗ Tags: No_Tags
34 views
Daily Writeups
⤷ Title: Malware-as-a-Service Exposed: Cisco Talos Unmasks Developer Behind Prolific “BadIIS” Web Server Toolkit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 09:01:55 +0000
════════════════════════
⌗ Tags: #Malware #BadIIS Variant #Black_Hat SEO Proxy #Cisco Talos #Content Hijacking #Cyber Security #IIS Extension #infosec #lwxat Developer #Malware_as_a_Service #PDB Metadata Leak #Traffic Redirection
Daily CyberSecurity
Malware-as-a-Service Exposed: Cisco Talos Unmasks Developer Behind Prolific "BadIIS" Web Server Toolkit
Cisco Talos exposes a commodity BadIIS variant sold as a service by dev "lwxat," featuring automated builders for traffic hijacking and reverse proxying.
28 views
Daily Writeups
⤷ Title: Found but a small recong
════════════════════════
𐀪 Author: Somsop
════════════════════════
ⴵ Time: Fri, 22 May 2026 09:58:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #recong #infosec #vulnerability #bug_bounty
Medium
Found but a small recong
A few months ago, I found a web security program through my friend, who is a co-founder of a company. They connected me with the team…
24 views
Daily Writeups
⤷ Title: NeuroSploit AI | Autonomous Penetration Testing Platform
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Fri, 22 May 2026 09:12:53 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #cybersecurity #hacking #web_development #bug_bounty
Medium
NeuroSploit AI 🔥 | Autonomous Penetration Testing Platform
Artificial Intelligence is rapidly transforming cybersecurity, and one of the most interesting open-source projects in this space is…
284 views
Daily Writeups
⤷ Title: How I Found Someone’s Entire Online Identity Using Just a Username (Free OSINT Method)
════════════════════════
𐀪 Author: whatsmynameapp
════════════════════════
ⴵ Time: Fri, 22 May 2026 10:34:55 GMT
════════════════════════
⌗ Tags: #ethical_hacking #privacy #osint #cybersecurity #infosec
Medium
How I Found Someone’s Entire Online Identity Using Just a Username (Free OSINT Method)
A step-by-step OSINT walkthrough — no tools to install, no coding required
26 views
Daily Writeups
⤷ Title: How to Pentest an LLM Infrastructure Before the Attackers Do
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Fri, 22 May 2026 10:05:59 GMT
════════════════════════
⌗ Tags: #ai #ai_agent #cybersecurity #infosec #generative_ai_tools
Medium
How to Pentest an LLM Infrastructure Before the Attackers Do
The threat landscape has a new target profile and most security teams haven’t fully adjusted to it yet.
27 views