Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: The Strategic Encroachment of Red Lamassu Across the Eurasian Telecommunications Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:37:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Black Lotus Labs threat intelligence #command and control infrastructure #DLL side loading vulnerability #JFMBackdoor Windows exploit #proxy network routing #PwC Threat Intelligence #Red Lamassu cyber espionage #Showboat Linux malware #state sponsored hacking Asia #telecom supply chain attack
Information Security News
Red Lamassu Cyber Espionage: Malware Targets Telecom Cores
State-backed Red Lamassu cyber espionage operations weaponize Showboat and JFMBackdoor malware to quietly penetrate and control telecom network infrastructure.
8 views
Daily Writeups
⤷ Title: New Operation Dragon Whistle Phishing Campaign Targets Universities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:48:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cobalt Strike #Educational Cyber Attacks #Malware Analysis #Operation Dragon Whistle #Seqrite Labs #spear_phishing #UNG0002
Daily CyberSecurity
New Operation Dragon Whistle Phishing Campaign Targets Universities
Discover how the Operation Dragon Whistle phishing campaign leverages student fitness lures to deploy stealthy memory-only malware.
8 views
Daily Writeups
⤷ Title: When Trusted Subdomains Become Dangerous: Chaining Low-Severity Vulnerabilities into Account…
════════════════════════
𐀪 Author: Hirad
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:00:46 GMT
════════════════════════
⌗ Tags: #security #bug_bounty #vulnerability_research #web_security
Medium
When Trusted Subdomains Become Dangerous: Chaining Low-Severity Vulnerabilities into Account…
Modern applications rarely fail because of a single critical vulnerability.
More often, dangerous impact emerges from small security gaps…
9 views
Daily Writeups
⤷ Title: Day 2: Reconnaissance & Information Gathering — Where Real Bug Hunting Starts
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Tue, 26 May 2026 05:19:42 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #owasp #web_security #bug_hunting
Medium
Day 2: Reconnaissance & Information Gathering — Where Real Bug Hunting Starts
“You don’t hack what you don’t understand.”
11 views
Daily Writeups
⤷ Title: Avoiding the OWASP Top 10 in Modern Web Applications: A Practical Guide for Developers
════════════════════════
𐀪 Author: Janani Wijerathne
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:58:08 GMT
════════════════════════
⌗ Tags: #application_security #software_engineering #web_development #owasp #cybersecurity
Medium
Avoiding the OWASP Top 10 in Modern Web Applications: A Practical Guide for Developers
Security is no longer a feature reserved for banks, governments, or large technology companies. In today’s digital landscape, every web…
13 views
Daily Writeups
⤷ Title: CVE-2026–46300: Fragnesia (THM) Tryhackme Walkthrough
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:49:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #cve_2026_46300 #hacking #tryhackme #fragnesia
Medium
CVE-2026–46300: Fragnesia (THM) Tryhackme Walkthrough
Description : Exploit Fragnesia, an LPE that surfaced due to dirtyfrag’s patch.
14 views
Daily Writeups
⤷ Title: Automating Scam Detection & Intelligence Gathering — Inside The Scam Industry (Part 7)
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:10:32 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #osint #automation #ai
Medium
🤖 Automating Scam Detection & Intelligence Gathering — Inside The Scam Industry (Part 7)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
16 views
Daily Writeups
⤷ Title: CVE-2026–46300: Fragnesia Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:41:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_writeup #tryhackme #tryhackme_walkthrough #privilege_escalation
Medium
CVE-2026–46300: Fragnesia Walkthrough Notes | TryHackMe
Using kernel memory flaw to gain full system access step by step
42 views
Daily Writeups
⤷ Title: I Learned Ethical Hacking with Python by Building One Lab Every Day
════════════════════════
𐀪 Author: Vignesh Selvaraj
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:17:34 GMT
════════════════════════
⌗ Tags: #python #technology #self_improvement #ethical_hacking #education
Medium
I Learned Ethical Hacking with Python by Building One Lab Every Day
Ethical Hacking with Python — Practical Labs for Beginners
30 views
Daily Writeups
⤷ Title: Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 26 May 2026 12:43:05 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: StablR Stablecoin Depeg Hack: $10M Minted in Multisig Failure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:14:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #automated market maker AMM liquidity drain #Blockaid smart contract telemetry #cryptocurrency compliance regulations #Electronic Money Institution EMI governance failure #Markets in Crypto Assets MiCA compliance #multi_signature contract misconfiguration #private key exfiltration #Resolv stablecoin attack #StablR stablecoin depeg hack #USDR EURR token minting exploit
Information Security News
StablR Stablecoin Depeg Hack: $10M Minted in Multisig Failure - Information Security News
The StablR stablecoin depeg hack triggered a collapse in USDR and EURR value after an attacker hijacked a 1-of-3 multisig key to mint over $10M in tokens.
26 views
Daily Writeups
⤷ Title: The Consolidation of North Korean Cyber Doctrine: From Fragmented Threat Actors to a Unified Cyber Ecosystem
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:09:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #crypto exfiltration networks #decentralized finance subversion #developer environment exploitation #fake remote employee scams #initial access methodologies #Krypt3ia threat intelligence #laptop farm infrastructure #North Korea cyber threats #supply chain interdiction #zero trust verification
Information Security News
The Consolidation of North Korean Cyber Doctrine: From Fragmented Threat Actors to a Unified Cyber Ecosystem
North Korea’s adversarial presence within the digital theater has transcended the legacy paradigm of isolated, decentralized hacking collectives. Per comprehensive threat intelligence compiled by …
18 views
Daily Writeups
⤷ Title: The Evolutionary Stratagem of Void Dokkaebi: Analyzing the Cythonized Mutation of InvisibleFerret
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:05:06 +0000
════════════════════════
⌗ Tags: #Malware #BeaverTail browser extension injection #code assessment social engineering #compiled pyd and so binaries #cryptocurrency wallet exfiltration #Famous Chollima developer target #InvisibleFerret Cython backdoor #Manifest V2 browser downgrade #North Korean APT defense #TrendAI threat research #Void Dokkaebi malware evasion
Information Security News
Void Dokkaebi Malware Evasion: Cython Backend Defeats Detection
North Korea's Void Dokkaebi campaign uses Cython to compile the InvisibleFerret backdoor into binary files, successfully bypassing legacy Python security rules.
17 views
Daily Writeups
⤷ Title: Android Carrier Billing Fraud Campaign Exposed by zLabs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 08:10:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android Malware #carrier billing fraud #fake apps #mobile security #premium SMS abuse #zLabs
Daily CyberSecurity
Android Carrier Billing Fraud Campaign Exposed by zLabs
A sophisticated Android carrier billing fraud campaign hit users worldwide. Learn how fake apps trigger premium SMS abuse and how to stay safe.
15 views
Daily Writeups
⤷ Title: New Tampered Chef Malware Campaigns Discovered in Productivity Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:15:17 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing #EvilAI #Info_Stealers #Malvertising #Productivity Software #Tampered Chef #threat intelligence
Daily CyberSecurity
New Tampered Chef Malware Campaigns Discovered in Productivity Software
Researchers uncover the Tampered Chef malware cluster disguised as PDF editors and tools. Learn how these stealthy threats bypass corporate defenses.
15 views
Daily Writeups
⤷ Title: How I Found an Account Takeover Vulnerability in a Large University Portal
════════════════════════
𐀪 Author: Rekhanshrajput
════════════════════════
ⴵ Time: Tue, 26 May 2026 08:29:36 GMT
════════════════════════
⌗ Tags: #authentication #bug_bounty #hacking #cybersecurity #web_security
Medium
How I Found an Account Takeover Vulnerability in a Large University Portal
Introduction
16 views
Daily Writeups
⤷ Title: Intigriti Challenge 0526 Write-up: DOM Clobbering to XSS via PixelAnalyticsConfig
════════════════════════
𐀪 Author: Mhqfhvxqbumxepbfvb
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:44:26 GMT
════════════════════════
⌗ Tags: #bug_bounty
Medium
Intigriti Challenge 0526 Write-up: DOM Clobbering to XSS via PixelAnalyticsConfig
Summary
16 views
Daily Writeups
⤷ Title: Intigriti Challenge 0526 Write-up: DOM Clobbering to XSS via PixelAnalyticsConfig
════════════════════════
𐀪 Author: Mhqfhvxqbumxepbfvb
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:35:04 GMT
════════════════════════
⌗ Tags: #bug_bounty
Medium
Intigriti Challenge 0526 Write-up: DOM Clobbering to XSS via PixelAnalyticsConfig
Summary
17 views
Daily Writeups
⤷ Title: How Claude Code Helps Backend Developers Build Production-Level Applications Faster
════════════════════════
𐀪 Author: Jane Frances
════════════════════════
ⴵ Time: Tue, 26 May 2026 08:01:04 GMT
════════════════════════
⌗ Tags: #backend #production #application_security #backend_development #claude_code
Medium
How Claude Code Helps Backend Developers Build Production-Level Applications Faster
Modern backend development is no longer just about writing code.
20 views
Daily Writeups
⤷ Title: ArticFox-C3: The Botnet That Talks in Invisible Ink
════════════════════════
𐀪 Author: suicidal_teddy
════════════════════════
ⴵ Time: Tue, 26 May 2026 08:25:13 GMT
════════════════════════
⌗ Tags: #mirai_botnet #research #ethical_hacking #github #hacking
Medium
ArticFox-C3: The Botnet That Talks in Invisible Ink
Forget shady C2 servers that get nuked in 48 hours. This clever proof-of-concept hides its commands inside invisible Unicode characters on…
17 views
Daily Writeups
⤷ Title: Bypassing AI Scanner Defenses to Exfiltrate Sensitive Information — PortSwigger Web Security…
════════════════════════
𐀪 Author: Axel Rengstorf
════════════════════════
ⴵ Time: Tue, 26 May 2026 08:19:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #penetration_testing #artificial_intelligence #hacking
18 views