Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: TakeOver Room on TryHackMe Review
════════════════════════
𐀪 Author: Jarred Stoll
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:29:10 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #hacking
Medium
TakeOver Room on TryHackMe Review
Just a quick overview of what this will cover. This will go over what I did to complete the TakeOver room on the TryHackMe platform. The…
24 views
Daily Writeups
⤷ Title: Understanding Network Attacks Through the OSI Model — Part 2: Visualizing Attack Kill Chain &…
════════════════════════
𐀪 Author: LeiFeng
════════════════════════
ⴵ Time: Wed, 27 May 2026 07:58:13 GMT
════════════════════════
⌗ Tags: #network_security #infosec #osi_model #cybersecurity
Medium
Understanding Network Attacks Through the OSI Model — Part 2: Visualizing Attack Kill Chain & Defense Configuration Guide
中文版
23 views
Daily Writeups
⤷ Title: ReportVerse (Medium) — SSRF via PDF Renderer | Webverse Labs Writeup
════════════════════════
𐀪 Author: Razzle Mouse
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:30:32 GMT
════════════════════════
⌗ Tags: #ssrf
Medium
ReportVerse (Medium) — SSRF via PDF Renderer | Webverse Labs Writeup
Platform: Webverse Labs
37 views
Daily Writeups
⤷ Title: The One GraphQL Query That Finds IDORs in Seconds (And Why Most Hunters Skip It)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:58:44 GMT
════════════════════════
⌗ Tags: #bug_hunting #bug_bounty_writeup #bug_bounty_tips #bugbounty_writeup #bug_bounty
Medium
The One GraphQL Query That Finds IDORs in Seconds (And Why Most Hunters Skip It)
Everyone checks for introspection. Nobody checks this.
61 views
Daily Writeups
⤷ Title: New CypherLoc Scareware Kit Implements Sophisticated Browser Locks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:04:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Barracuda Research #Browser Lock #CypherLoc #infosec #Phishing Campaign #Scareware #Tech Support Scam
Daily CyberSecurity
New CypherLoc Scareware Kit Implements Sophisticated Browser Locks
Barracuda Research warns of the CypherLoc scareware kit. Learn how this browser-locking threat uses psychological manipulation to scam users.
40 views
Daily Writeups
⤷ Title: Emerging Deprecation Protocols Within the Codex Model Ecosystem
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:38:05 +0000
════════════════════════
⌗ Tags: #Technology #AI code generation regressions #API enterprise model lifecycle #ChatGPT premium model configurations #custom engineering development pipelines #free tier GPT_5.5 default #GPT_5.3_Codex retired ChatGPT #GPT_5.5 model degradation latency #OpenAI Codex Spark architecture #OpenAI June 2 deprecation #OpenAI legacy model deprecation
Daily CyberSecurity
Emerging Deprecation Protocols Within the Codex Model Ecosystem
OpenAI confirms an upcoming legacy model deprecation on June 2, retiring GPT-5.2 and GPT-5.3-Codex from ChatGPT while forcing a shift to GPT-5.5.
35 views
Daily Writeups
⤷ Title: Critical FortiClient EMS Exploitation Campaign Spreads New EKZ Infostealer Payload
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:25:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arctic Wolf #credential stealer #CVE_2026_35616 #EKZ Infostealer #endpoint security #FortiClient EMS #PowerShell Malware
Daily CyberSecurity
Critical FortiClient EMS Exploitation Campaign Spreads New EKZ Infostealer Payload
Arctic Wolf warns of a new FortiClient EMS exploitation campaign using CVE-2026-35616 to deploy the stealthy EKZ Infostealer malware.
26 views
Daily Writeups
⤷ Title: Telemetry Interception: The Unauthorized Routing of Motorola’s Amazon Gateway
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:32:30 +0000
════════════════════════
⌗ Tags: #Technology #Allison Yi product management statement #Amazon affiliate code injection #Android launcher app hijacking #Device Native mobile ad monetization #disable Motorola Smart Feed #kira_abboud.com tracking domain #mobile bloatware browser detour #Motorola Razr 60 Ultra app drawer bug #Motorola Smart Feed redirect
Daily CyberSecurity
Telemetry Interception: The Unauthorized Routing of Motorola's Amazon Gateway
Users uncover a weird Motorola Smart Feed redirect that forces the Amazon app through third-party tracking links. Motorola claims it was a glitch and fixed it.
21 views
Daily Writeups
⤷ Title: Windows DNS Client RCE: 9.8 CVSS & Public PoC Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:17:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS 9.8 #heap overflow #Public PoC Exploit #Remote Code Execution #Windows DNS Client
Daily CyberSecurity
Windows DNS Client RCE: 9.8 CVSS & Public PoC Disclosed
A critical Windows DNS Client RCE vulnerability (CVE-2026-41096) with a 9.8 CVSS has public PoC exploit code. Learn how to detect and patch it.
22 views
Daily Writeups
⤷ Title: IBM Patches Critical Authentication Bypass in Engineering Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 03:03:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_3660 #IBM #IBM ELM #Jazz Foundation #Security Bulletin #Software Patch
Daily CyberSecurity
IBM Patches Critical Authentication Bypass in Engineering Platform
IBM patched a critical IBM Jazz Foundation vulnerability (CVE-2026-3660) with a 9.8 CVSS score. Learn how to secure your property files now.
18 views
Daily Writeups
⤷ Title: I Found a Critical Vulnerability — They Paid Me $15,500
════════════════════════
𐀪 Author: cyber security
════════════════════════
ⴵ Time: Thu, 28 May 2026 05:56:13 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #technology #cybersecurity #bug_bounty
Medium
I Found a Critical Vulnerability — They Paid Me $15,500
How a simple URL tweak exposed millions of private records, and what it taught me about the $81 million industry most people have never…
29 views
Daily Writeups
⤷ Title: Domain Compromise & Dual RMM Abuse
════════════════════════
𐀪 Author: Shahzeb M
════════════════════════
ⴵ Time: Thu, 28 May 2026 05:32:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #threat_hunting #blue_team #incident_response
Medium
Domain Compromise & Dual RMM Abuse
IR Number: IR-2026–0518–001
22 views
Daily Writeups
⤷ Title: Intercepting Network Traffic Through ARP Spoofing
════════════════════════
𐀪 Author: Aastha Thakker
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:16:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #networking #ethical_hacking #arp_spoofing #infosec
Medium
Intercepting Network Traffic Through ARP Spoofing
Your laptop trusts ARP replies without verifying who sent them.
34 views
Daily Writeups
⤷ Title: Common Services Basic Recognition
════════════════════════
𐀪 Author: 4zer7y
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:38:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #pentesting
Medium
Common Services Basic Recognition
FTP Service
46 views
Daily Writeups
⤷ Title: API Security in 2026: The Complete Developer Guide (Attacks, Fixes, and Real Code)
════════════════════════
𐀪 Author: Tarxemo
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:06:37 GMT
════════════════════════
⌗ Tags: #api_security #django #backend_development #nodejs #web_security
Medium
API Security in 2026: The Complete Developer Guide (Attacks, Fixes, and Real Code)
API Security in 2026: The Complete Developer Guide (Attacks, Fixes, and Real Code)
43 views
Daily Writeups
⤷ Title: JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 28 May 2026 13:24:48 +0530
════════════════════════
⌗ Tags: No_Tags
41 views
Daily Writeups
⤷ Title: The CodexUI Android Anomalous Supply-Chain Inversion: A Paradox of Developer Malevolence
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:50:08 +0000
════════════════════════
⌗ Tags: #Malware #AnyClaw token harvesting #BrutalStrike developer repository poisoning #chunk_PUR70UAG.js backdoor #CodexUI Android token stealing #codexui_android npm package malware #OpenAI Codex key theft #OpenClaw Codex Claude AI Agent app #sentry.anyclaw.store exfiltration #software supply chain security #supply chain attack npm 2026
Information Security News
CodexUI Android Steals User OpenAI Codex Auth Tokens
The popular npm package CodexUI Android has been caught secretly exfiltrating OpenAI Codex authentication tokens. Find out how to audit your environment.
41 views
Daily Writeups
⤷ Title: The Escalating Rift Over Zero-Day Disclosures: Microsoft Condemns Uncoordinated Vulnerability Release
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:47:14 +0000
════════════════════════
⌗ Tags: #Microsoft #Vulnerability #GitHub profile ban retaliation #GreenPlasma privilege escalation tool #Microsoft Threat Intelligence defense response #Nightmare Eclipse security researcher #physical full disk encryption attack #pre_boot authentication TPM PIN mitigation #uncoordinated vulnerability disclosure dispute #Windows Recovery Environment bypass #WinRE FsTx folder vulnerability #YellowKey BitLocker zero_day exploit
Information Security News
YellowKey BitLocker Zero-Day Exploit Bypasses Windows Security
A critical YellowKey BitLocker zero-day exploit allows physical attackers to bypass Windows encryption via WinRE. Learn about the ongoing disclosure battle.
17 views
Daily Writeups
⤷ Title: North Korea-Aligned Void Dokkaebi Evolves with Binary Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:36:07 +0000
════════════════════════
⌗ Tags: #Malware #BeaverTail #Cryptocurrency Theft #Cython Malware #developer security #Famous Chollima #InvisibleFerret #Void Dokkaebi
Daily CyberSecurity
North Korea-Aligned Void Dokkaebi Evolves with Binary Obfuscation
TrendAI Research exposes the new Void Dokkaebi Cython malware campaign. Learn how InvisibleFerret uses binary compilation to evade security teams.
20 views
Daily Writeups
⤷ Title: CIFSwitch Local Root Exploit: Public Details and PoC Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:01:55 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #Asim Manizada #cifs_utils #CIFSwitch #Linux Kernel #Local Privilege Escalation #Public PoC #vulnerability disclosure
Daily CyberSecurity
CIFSwitch Local Root Exploit: Public Details and PoC Disclosed
Security researcher Asim Manizada has released public details and a PoC for the CIFSwitch local root exploit impacting many Linux systems.
18 views
Daily Writeups
⤷ Title: New Showboat Linux Malware Targets Global Telecommunications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 07:10:39 +0000
════════════════════════
⌗ Tags: #Malware #Black Lotus Labs #Linux post_exploitation #PRC Threat Actors #Showboat malware #Telecommunications cyberattack #threat intelligence
Daily CyberSecurity
New Showboat Linux Malware Targets Global Telecommunications
Discover the new Showboat Linux malware framework uncovered by Black Lotus Labs. Learn how PRC threat actors target telecommunications networks.
25 views