Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: How I Built My First API Security Tool as a PAM Engineer Learning Python
════════════════════════
𐀪 Author: Rayirth Jaiswal
════════════════════════
ⴵ Time: Tue, 26 May 2026 04:13:53 GMT
════════════════════════
⌗ Tags: #python #programming #cybersecurity #security_engineering #api_security
Medium
How I Built My First API Security Tool as a PAM Engineer Learning Python
I have spent 2.5 years automating privileged account workflows at Deloitte using CyberArk REST API and PowerShell. Every bulk onboarding…
24 views
Daily Writeups
⤷ Title: KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 26 May 2026 10:49:38 +0530
════════════════════════
⌗ Tags: No_Tags
22 views
Daily Writeups
⤷ Title: The Proliferation of Synthetic Telemetry: Unmasking the Alleged OnlyFans Mass Exfiltration Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:58:32 +0000
════════════════════════
⌗ Tags: #Data Leak #creator privacy safety #credential stuffing risk #cybercriminal clearinghouse archive #data brokerage metamorphosis #digital footprint extortion #Euphoric_Reply_5727 database leak #identity de_anonymization threat #OnlyFans data leak check #OSINT record linkage #phishing campaign protection
Information Security News
OnlyFans Data Leak Check: 340M Records Sold on Cybercrime Forums
A new 340 million record archive is being marketed as an OnlyFans data leak. Learn how this aggregated OSINT database threatens creator anonymity.
21 views
Daily Writeups
⤷ Title: The Strategic Encroachment of Red Lamassu Across the Eurasian Telecommunications Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:37:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Black Lotus Labs threat intelligence #command and control infrastructure #DLL side loading vulnerability #JFMBackdoor Windows exploit #proxy network routing #PwC Threat Intelligence #Red Lamassu cyber espionage #Showboat Linux malware #state sponsored hacking Asia #telecom supply chain attack
Information Security News
Red Lamassu Cyber Espionage: Malware Targets Telecom Cores
State-backed Red Lamassu cyber espionage operations weaponize Showboat and JFMBackdoor malware to quietly penetrate and control telecom network infrastructure.
8 views
Daily Writeups
⤷ Title: New Operation Dragon Whistle Phishing Campaign Targets Universities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:48:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cobalt Strike #Educational Cyber Attacks #Malware Analysis #Operation Dragon Whistle #Seqrite Labs #spear_phishing #UNG0002
Daily CyberSecurity
New Operation Dragon Whistle Phishing Campaign Targets Universities
Discover how the Operation Dragon Whistle phishing campaign leverages student fitness lures to deploy stealthy memory-only malware.
8 views
Daily Writeups
⤷ Title: When Trusted Subdomains Become Dangerous: Chaining Low-Severity Vulnerabilities into Account…
════════════════════════
𐀪 Author: Hirad
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:00:46 GMT
════════════════════════
⌗ Tags: #security #bug_bounty #vulnerability_research #web_security
Medium
When Trusted Subdomains Become Dangerous: Chaining Low-Severity Vulnerabilities into Account…
Modern applications rarely fail because of a single critical vulnerability.
More often, dangerous impact emerges from small security gaps…
9 views
Daily Writeups
⤷ Title: Day 2: Reconnaissance & Information Gathering — Where Real Bug Hunting Starts
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Tue, 26 May 2026 05:19:42 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #owasp #web_security #bug_hunting
Medium
Day 2: Reconnaissance & Information Gathering — Where Real Bug Hunting Starts
“You don’t hack what you don’t understand.”
11 views
Daily Writeups
⤷ Title: Avoiding the OWASP Top 10 in Modern Web Applications: A Practical Guide for Developers
════════════════════════
𐀪 Author: Janani Wijerathne
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:58:08 GMT
════════════════════════
⌗ Tags: #application_security #software_engineering #web_development #owasp #cybersecurity
Medium
Avoiding the OWASP Top 10 in Modern Web Applications: A Practical Guide for Developers
Security is no longer a feature reserved for banks, governments, or large technology companies. In today’s digital landscape, every web…
13 views
Daily Writeups
⤷ Title: CVE-2026–46300: Fragnesia (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:49:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #cve_2026_46300 #hacking #tryhackme #fragnesia
Medium
CVE-2026–46300: Fragnesia (THM) Tryhackme Walkthrough
Description : Exploit Fragnesia, an LPE that surfaced due to dirtyfrag’s patch.
14 views
Daily Writeups
⤷ Title: Automating Scam Detection & Intelligence Gathering — Inside The Scam Industry (Part 7)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:10:32 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #osint #automation #ai
Medium
🤖 Automating Scam Detection & Intelligence Gathering — Inside The Scam Industry (Part 7)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
16 views
Daily Writeups
⤷ Title: CVE-2026–46300: Fragnesia Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:41:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_writeup #tryhackme #tryhackme_walkthrough #privilege_escalation
Medium
CVE-2026–46300: Fragnesia Walkthrough Notes | TryHackMe
Using kernel memory flaw to gain full system access step by step
42 views
Daily Writeups
⤷ Title: I Learned Ethical Hacking with Python by Building One Lab Every Day
════════════════════════
𐀪 Author: Vignesh Selvaraj
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:17:34 GMT
════════════════════════
⌗ Tags: #python #technology #self_improvement #ethical_hacking #education
Medium
I Learned Ethical Hacking with Python by Building One Lab Every Day
Ethical Hacking with Python — Practical Labs for Beginners
30 views
Daily Writeups
⤷ Title: Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 26 May 2026 12:43:05 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: StablR Stablecoin Depeg Hack: $10M Minted in Multisig Failure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:14:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #automated market maker AMM liquidity drain #Blockaid smart contract telemetry #cryptocurrency compliance regulations #Electronic Money Institution EMI governance failure #Markets in Crypto Assets MiCA compliance #multi_signature contract misconfiguration #private key exfiltration #Resolv stablecoin attack #StablR stablecoin depeg hack #USDR EURR token minting exploit
Information Security News
StablR Stablecoin Depeg Hack: $10M Minted in Multisig Failure - Information Security News
The StablR stablecoin depeg hack triggered a collapse in USDR and EURR value after an attacker hijacked a 1-of-3 multisig key to mint over $10M in tokens.
26 views
Daily Writeups
⤷ Title: The Consolidation of North Korean Cyber Doctrine: From Fragmented Threat Actors to a Unified Cyber Ecosystem
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:09:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #crypto exfiltration networks #decentralized finance subversion #developer environment exploitation #fake remote employee scams #initial access methodologies #Krypt3ia threat intelligence #laptop farm infrastructure #North Korea cyber threats #supply chain interdiction #zero trust verification
Information Security News
The Consolidation of North Korean Cyber Doctrine: From Fragmented Threat Actors to a Unified Cyber Ecosystem
North Korea’s adversarial presence within the digital theater has transcended the legacy paradigm of isolated, decentralized hacking collectives. Per comprehensive threat intelligence compiled by …
18 views
Daily Writeups
⤷ Title: The Evolutionary Stratagem of Void Dokkaebi: Analyzing the Cythonized Mutation of InvisibleFerret
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:05:06 +0000
════════════════════════
⌗ Tags: #Malware #BeaverTail browser extension injection #code assessment social engineering #compiled pyd and so binaries #cryptocurrency wallet exfiltration #Famous Chollima developer target #InvisibleFerret Cython backdoor #Manifest V2 browser downgrade #North Korean APT defense #TrendAI threat research #Void Dokkaebi malware evasion
Information Security News
Void Dokkaebi Malware Evasion: Cython Backend Defeats Detection
North Korea's Void Dokkaebi campaign uses Cython to compile the InvisibleFerret backdoor into binary files, successfully bypassing legacy Python security rules.
17 views
Daily Writeups
⤷ Title: Android Carrier Billing Fraud Campaign Exposed by zLabs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 08:10:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android Malware #carrier billing fraud #fake apps #mobile security #premium SMS abuse #zLabs
Daily CyberSecurity
Android Carrier Billing Fraud Campaign Exposed by zLabs
A sophisticated Android carrier billing fraud campaign hit users worldwide. Learn how fake apps trigger premium SMS abuse and how to stay safe.
15 views
Daily Writeups
⤷ Title: New Tampered Chef Malware Campaigns Discovered in Productivity Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:15:17 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing #EvilAI #Info_Stealers #Malvertising #Productivity Software #Tampered Chef #threat intelligence
Daily CyberSecurity
New Tampered Chef Malware Campaigns Discovered in Productivity Software
Researchers uncover the Tampered Chef malware cluster disguised as PDF editors and tools. Learn how these stealthy threats bypass corporate defenses.
15 views
Daily Writeups
⤷ Title: How I Found an Account Takeover Vulnerability in a Large University Portal
════════════════════════
𐀪 Author: Rekhanshrajput
════════════════════════
ⴵ Time: Tue, 26 May 2026 08:29:36 GMT
════════════════════════
⌗ Tags: #authentication #bug_bounty #hacking #cybersecurity #web_security
Medium
How I Found an Account Takeover Vulnerability in a Large University Portal
Introduction
16 views
Daily Writeups
⤷ Title: Intigriti Challenge 0526 Write-up: DOM Clobbering to XSS via PixelAnalyticsConfig
════════════════════════
𐀪 Author: Mhqfhvxqbumxepbfvb
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:44:26 GMT
════════════════════════
⌗ Tags: #bug_bounty
Medium
Intigriti Challenge 0526 Write-up: DOM Clobbering to XSS via PixelAnalyticsConfig
Summary
16 views
Daily Writeups
⤷ Title: Intigriti Challenge 0526 Write-up: DOM Clobbering to XSS via PixelAnalyticsConfig
════════════════════════
𐀪 Author: Mhqfhvxqbumxepbfvb
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:35:04 GMT
════════════════════════
⌗ Tags: #bug_bounty
Medium
Intigriti Challenge 0526 Write-up: DOM Clobbering to XSS via PixelAnalyticsConfig
Summary
17 views