Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Malicious JS Lifecycle Hooks Found Hiding Inside PHP Composer Packages
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:32:47 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD Poisoning #Cross_Ecosystem Malice #Cyber Security #devdojo/wave #GitHub Actions Backdoor #infosec #package.json Exploit #PHP Composer #Postinstall Script #Socket Security #Starter Kits #supply chain attack
Daily CyberSecurity
Malicious JS Lifecycle Hooks Found Hiding Inside PHP Composer Packages
Socket exposes a clever cross-ecosystem supply chain attack targeting PHP packages by hiding a malicious JS postinstall backdoor inside package.json.
12 views
Daily Writeups
⤷ Title: Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:24:14 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #Composer Backdoor #Credential Harvesting #Cyber Security #DevOps Security #flipboxstudio #info_stealer #Laravel Lang #PHP RCE #supply chain attack
Daily CyberSecurity
Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
DevOps Alert: Over 700 laravel-lang localization package versions have been backdoored with a cross-platform 17-collector info-stealer. Audit your logs.
19 views
Daily Writeups
⤷ Title: The Beginner Bug Hunter Mindset Nobody Teaches
════════════════════════
𐀪 Author: Drishti Pandey
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:49:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_hunting #web_security #cybersecurity #bug_bounty
Medium
The Beginner Bug Hunter Mindset Nobody Teaches
The hardest part of bug hunting isn’t technical. It’s learning how to think.
16 views
Daily Writeups
⤷ Title: ☎️ VoIP, SIP & Telecom Basics For Security Researchers — Inside The Scam Industry (Part 4)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:03:42 GMT
════════════════════════
⌗ Tags: #true_crime #hacking #privacy #osint #cybersecurity
Medium
☎️ VoIP, SIP & Telecom Basics For Security Researchers — Inside The Scam Industry (Part 4)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
19 views
Daily Writeups
⤷ Title: Write-Up Password Cracking Room
════════════════════════
𐀪 Author: FireWolf
════════════════════════
ⴵ Time: Sat, 23 May 2026 03:19:06 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #challenge_room #writeup
Medium
Write-Up Password Cracking Room
Task 1 —Introduc tion
20 views
Daily Writeups
⤷ Title: The Cisco Vulnerability That Could Let Attackers Control Entire Network
════════════════════════
𐀪 Author: Cybersphere Official
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:31:00 GMT
════════════════════════
⌗ Tags: #cisco #ethical_hacking #cybersecurity #cyber_threat
Medium
The Cisco Vulnerability That Could Let Attackers Control Entire Network
What happens when attackers don’t target the endpoints… but the network’s brain itself?
32 views
Daily Writeups
⤷ Title: Hunting for Bugs When the Low-Hanging Fruit is Forbidden: A Deep Dive into Finding Reflected XSS
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Sat, 23 May 2026 06:56:56 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bugs #hacker #bug_bounty_writeup
Medium
Hunting for Bugs When the Low-Hanging Fruit is Forbidden: A Deep Dive into Finding Reflected XSS
Bug bounty is often romanticized as running automated scanners, waiting for the green text to pop up on your terminal, and collecting a…
27 views
Daily Writeups
⤷ Title: AI is now finding more bugs than humans.
════════════════════════
𐀪 Author: Stanislav Klevtsov
════════════════════════
ⴵ Time: Sat, 23 May 2026 05:29:39 GMT
════════════════════════
⌗ Tags: #ai #infosec #bug_bounty #cybersecurity #vulnerability
Medium
AI is now finding more bugs than humans.
Microsoft's May Patch Tuesday included 16 vulnerabilities found by MDASH, their new AI system that orchestrates over 100 specialized…
15 views
Daily Writeups
⤷ Title: # Bir Linkə Klik Etmək Niyə Təhlükəli Ola Bilər? Phishing, Metadata və Gizli Risklər
════════════════════════
𐀪 Author: cybershieldy.com
════════════════════════
ⴵ Time: Sat, 23 May 2026 06:10:02 GMT
════════════════════════
⌗ Tags: #siber #hacking #hacker #kiber #siber_guvenlik
Medium
# 🔗 Bir Linkə Klik Etmək Niyə Təhlükəli Ola Bilər? Phishing, Metadata və Gizli Risklər
İnternetdə hər gün onlarla link açırıq. Sosial şəbəkələrdə, e-poçtlarda, SMS-lərdə və ya mesajlaşma tətbiqlərində qarşımıza çıxan linklər…
10 views
Daily Writeups
⤷ Title: The Day GitHub Got Hacked Through a Plugin You Probably Have Installed
════════════════════════
𐀪 Author: RajKanjariya
════════════════════════
ⴵ Time: Sat, 23 May 2026 05:43:38 GMT
════════════════════════
⌗ Tags: #programming #software_development #github #hacking #cybersecurity
Medium
The Day GitHub Got Hacked Through a Plugin You Probably Have Installed
How One Poisoned VS Code Extension Breached GitHub, OpenAI, and Mistral AI — and Why Every Developer on Earth Should Be Paying Attention…
8 views
Daily Writeups
⤷ Title: The $1,000 Mistake
════════════════════════
𐀪 Author: Halohashm
════════════════════════
ⴵ Time: Sat, 23 May 2026 05:13:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #short_story #sqli #hacking
Medium
The $1,000 Mistake
At 1:48 AM, Ali was eating cold pizza and questioning every life decision that led him to staring at JSON responses for fun.
12 views
Daily Writeups
⤷ Title: The Boy Nobody Noticed
════════════════════════
𐀪 Author: Halohashm
════════════════════════
ⴵ Time: Sat, 23 May 2026 05:06:14 GMT
════════════════════════
⌗ Tags: #hacking #short_story #cybersecurity
Medium
The Boy Nobody Noticed
Chapter 1 — Boot Failure
16 views
Daily Writeups
⤷ Title: Guided Pentest: Web Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Sat, 23 May 2026 05:59:02 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #penetration_testing #tryhackme_writeup #tryhackme
Medium
Guided Pentest: Web Walkthrough Notes | TryHackMe
Small web flaws connect to create serious security risks
14 views
Daily Writeups
⤷ Title: Wireshark: Traffic Analysis room by Tryhackme, Part 1 — NMAP, ARP Poisining and Identifying Hosts.
════════════════════════
𐀪 Author: Joeljohnsonvarghese
════════════════════════
ⴵ Time: Sat, 23 May 2026 05:28:31 GMT
════════════════════════
⌗ Tags: #blue_team #tryhackme #wireshark #cybersecurity
Medium
Wireshark: Traffic Analysis room by Tryhackme, Part 1 — NMAP, ARP Poisining and Identifying Hosts.
My intend is to provide the steps on how we are collecting the flags for the questions and the concept behind it. The theory is given in…
15 views
Daily Writeups
⤷ Title: HTB Retired (Was Active) Windows Machine: Dark Corp (Insane) Part 2
════════════════════════
𐀪 Author: Dan Schwarzentraub
════════════════════════
ⴵ Time: Sat, 23 May 2026 05:57:51 GMT
════════════════════════
⌗ Tags: #ethical_hacking_training #hackthebox_writeup #hackthebox_walkthrough
Medium
HTB Retired (Was Active) Windows Machine: Dark Corp (Insane) Part 2
Part 1:
24 views
Daily Writeups
⤷ Title: HTB Retired (Was Active) Windows Machine: Dark Corp (Insane) Part 1
════════════════════════
𐀪 Author: Dan Schwarzentraub
════════════════════════
ⴵ Time: Sat, 23 May 2026 05:55:45 GMT
════════════════════════
⌗ Tags: #ethical_hacking_training #hackthebox_writeup #hackthebox_walkthrough
Medium
HTB Retired (Was Active) Windows Machine: Dark Corp (Insane) Part 1
Let’s start off with a rust scan
33 views
Daily Writeups
⤷ Title: Best Cyber Security Course in Delhi
════════════════════════
𐀪 Author: Cyber Defentech
════════════════════════
ⴵ Time: Sat, 23 May 2026 06:13:35 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #information_security #vapt #cybersecurity_training
Medium
Best Cyber Security Course in Delhi
Cybersecurity is becoming one of the fastest-growing industries in India as organizations continue adopting cloud computing, APIs, AI…
39 views
Daily Writeups
⤷ Title: LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 23 May 2026 13:05:13 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Sat, 23 May 2026 12:53:48 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: SSRF in APIs: How a Single URL Parameter Can Expose Internal Systems
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 23 May 2026 08:19:23 GMT
════════════════════════
⌗ Tags: #ssrf_attack #bug_bounty #api_penetration_testing #ssrf_walkthrough #ssrf_vulnerability
Medium
SSRF in APIs: How a Single URL Parameter Can Expose Internal Systems
A single misconfigured URL parameter can allow an attacker to abuse server-side requests and potentially access internal services, cloud…
26 views
Daily Writeups
⤷ Title: A Simple Session Management Bug Every Beginner Bug Hunter Should Test.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Sat, 23 May 2026 08:18:09 GMT
════════════════════════
⌗ Tags: #simple_bugs #bug_bounty #session_management #p4_bugs
Medium
A Simple Session Management Bug Every Beginner Bug Hunter Should Test.
When beginners start bug bounty hunting, most of them spend hours testing XSS payloads, SQL injection, IDORs, and other well-known…
22 views