Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: I Found a Critical Vulnerability — They Paid Me $15,500
════════════════════════
𐀪 Author: cyber security
════════════════════════
ⴵ Time: Thu, 28 May 2026 05:56:13 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #technology #cybersecurity #bug_bounty
Medium
I Found a Critical Vulnerability — They Paid Me $15,500
How a simple URL tweak exposed millions of private records, and what it taught me about the $81 million industry most people have never…
29 views
Daily Writeups
⤷ Title: Domain Compromise & Dual RMM Abuse
════════════════════════
𐀪 Author: Shahzeb M
════════════════════════
ⴵ Time: Thu, 28 May 2026 05:32:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #threat_hunting #blue_team #incident_response
Medium
Domain Compromise & Dual RMM Abuse
IR Number: IR-2026–0518–001
22 views
Daily Writeups
⤷ Title: Intercepting Network Traffic Through ARP Spoofing
════════════════════════
𐀪 Author: Aastha Thakker
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:16:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #networking #ethical_hacking #arp_spoofing #infosec
Medium
Intercepting Network Traffic Through ARP Spoofing
Your laptop trusts ARP replies without verifying who sent them.
34 views
Daily Writeups
⤷ Title: Common Services Basic Recognition
════════════════════════
𐀪 Author: 4zer7y
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:38:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #pentesting
Medium
Common Services Basic Recognition
FTP Service
46 views
Daily Writeups
⤷ Title: API Security in 2026: The Complete Developer Guide (Attacks, Fixes, and Real Code)
════════════════════════
𐀪 Author: Tarxemo
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:06:37 GMT
════════════════════════
⌗ Tags: #api_security #django #backend_development #nodejs #web_security
Medium
API Security in 2026: The Complete Developer Guide (Attacks, Fixes, and Real Code)
API Security in 2026: The Complete Developer Guide (Attacks, Fixes, and Real Code)
43 views
Daily Writeups
⤷ Title: JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 28 May 2026 13:24:48 +0530
════════════════════════
⌗ Tags: No_Tags
41 views
Daily Writeups
⤷ Title: The CodexUI Android Anomalous Supply-Chain Inversion: A Paradox of Developer Malevolence
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:50:08 +0000
════════════════════════
⌗ Tags: #Malware #AnyClaw token harvesting #BrutalStrike developer repository poisoning #chunk_PUR70UAG.js backdoor #CodexUI Android token stealing #codexui_android npm package malware #OpenAI Codex key theft #OpenClaw Codex Claude AI Agent app #sentry.anyclaw.store exfiltration #software supply chain security #supply chain attack npm 2026
Information Security News
CodexUI Android Steals User OpenAI Codex Auth Tokens
The popular npm package CodexUI Android has been caught secretly exfiltrating OpenAI Codex authentication tokens. Find out how to audit your environment.
41 views
Daily Writeups
⤷ Title: The Escalating Rift Over Zero-Day Disclosures: Microsoft Condemns Uncoordinated Vulnerability Release
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:47:14 +0000
════════════════════════
⌗ Tags: #Microsoft #Vulnerability #GitHub profile ban retaliation #GreenPlasma privilege escalation tool #Microsoft Threat Intelligence defense response #Nightmare Eclipse security researcher #physical full disk encryption attack #pre_boot authentication TPM PIN mitigation #uncoordinated vulnerability disclosure dispute #Windows Recovery Environment bypass #WinRE FsTx folder vulnerability #YellowKey BitLocker zero_day exploit
Information Security News
YellowKey BitLocker Zero-Day Exploit Bypasses Windows Security
A critical YellowKey BitLocker zero-day exploit allows physical attackers to bypass Windows encryption via WinRE. Learn about the ongoing disclosure battle.
17 views
Daily Writeups
⤷ Title: North Korea-Aligned Void Dokkaebi Evolves with Binary Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:36:07 +0000
════════════════════════
⌗ Tags: #Malware #BeaverTail #Cryptocurrency Theft #Cython Malware #developer security #Famous Chollima #InvisibleFerret #Void Dokkaebi
Daily CyberSecurity
North Korea-Aligned Void Dokkaebi Evolves with Binary Obfuscation
TrendAI Research exposes the new Void Dokkaebi Cython malware campaign. Learn how InvisibleFerret uses binary compilation to evade security teams.
20 views
Daily Writeups
⤷ Title: CIFSwitch Local Root Exploit: Public Details and PoC Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:01:55 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #Asim Manizada #cifs_utils #CIFSwitch #Linux Kernel #Local Privilege Escalation #Public PoC #vulnerability disclosure
Daily CyberSecurity
CIFSwitch Local Root Exploit: Public Details and PoC Disclosed
Security researcher Asim Manizada has released public details and a PoC for the CIFSwitch local root exploit impacting many Linux systems.
18 views
Daily Writeups
⤷ Title: New Showboat Linux Malware Targets Global Telecommunications
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 07:10:39 +0000
════════════════════════
⌗ Tags: #Malware #Black Lotus Labs #Linux post_exploitation #PRC Threat Actors #Showboat malware #Telecommunications cyberattack #threat intelligence
Daily CyberSecurity
New Showboat Linux Malware Targets Global Telecommunications
Discover the new Showboat Linux malware framework uncovered by Black Lotus Labs. Learn how PRC threat actors target telecommunications networks.
25 views
Daily Writeups
⤷ Title: Introducing Insights: self-serve reporting for security teams
════════════════════════
𐀪 Author: Andrea Meza
════════════════════════
ⴵ Time: Thu, 28 May 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Product Updates
Intigriti
Insights self-serve reporting for security teams
Insights is our revamped analytics dashboard experience inside Intigriti. It brings key performance metrics and trends together in one place, with flexible filtering and exportable charts, so you can explain outcomes, track trends, and stay on top of operational…
31 views
Daily Writeups
⤷ Title: 2FA Bypass via redirect uri manipulation
════════════════════════
𐀪 Author: Ahmadfaizabdillah
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:26:19 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_writeup #authentication_bypass #burpsuite #bug_bounty
Medium
2FA Bypass via redirect uri manipulation
Summary
21 views
Daily Writeups
⤷ Title: Inside Real Scam Investigations — How Modern Digital Fraud Operations Really Work (Series…
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 28 May 2026 06:59:03 GMT
════════════════════════
⌗ Tags: #osint #hacking #security #cybersecurity #cybercrime
Medium
🚨 Inside Real Scam Investigations — How Modern Digital Fraud Operations Really Work (Series Introduction)
SCAN SMARTER, NOT HARDER — by Ghostyjoe™
23 views
Daily Writeups
⤷ Title: CISSP Chapter 3 — Part 3: Continuity Planning Protects More Than Systems.
════════════════════════
𐀪 Author: Atakan ATAK
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:01:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #isc2 #infosec #cybersecurity_awareness #cissp
Medium
CISSP Chapter 3 — Part 3: Continuity Planning Protects More Than Systems.
Strategy development, protection of people, facilities, and infrastructure, alternate sites, hardening, and the continuity of operations…
25 views
Daily Writeups
⤷ Title: Broken Authentication Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:11:58 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #tryhackme_writeup #tryhackme_walkthrough #penetration_testing
Medium
Broken Authentication Walkthrough Notes | TryHackMe
Breaking weak authentication using simple techniques and logic flaws
14 views
Daily Writeups
⤷ Title: Week 9: The OSI Model & TCP/IP — The Foundation Every Ethical Hacker Must Know
════════════════════════
𐀪 Author: Nishant kumar
════════════════════════
ⴵ Time: Thu, 28 May 2026 07:52:43 GMT
════════════════════════
⌗ Tags: #penetration_testing #networking #cybersecurity #soc_analyst #ethical_hacking
Medium
Week 9: The OSI Model & TCP/IP — The Foundation Every Ethical Hacker Must Know
Before you ethically hack a network, you need to understand how it breathes.
18 views
Daily Writeups
⤷ Title: Why More Non-IT Students Are Choosing Cybersecurity in 2026
════════════════════════
𐀪 Author: Cozonix
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:37:03 GMT
════════════════════════
⌗ Tags: #cybersecurity_careers #cybersecurity #ethical_hacking #career_development #tech_education
Medium
Why More Non-IT Students Are Choosing Cybersecurity in 2026
A few years ago, if someone mentioned cybersecurity, most students immediately thought it was only for programmers or computer science…
22 views
Daily Writeups
⤷ Title: How a Leaked AI Key Burned $32,000 in 24 Hours — and Why Most Startups Need an AI Gateway Sooner…
════════════════════════
𐀪 Author: Aikeyfounder
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:19:18 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #startup #software_engineering #api_security #devops
Medium
How a Leaked AI Key Burned $32,000 in 24 Hours — and Why Most Startups Need an AI Gateway Sooner Than They Think
Model quality gets all the attention. In production, uncontrolled usage is often the bigger risk.
32 views
Daily Writeups
⤷ Title: Chaining CSRF and XSS to Remote Code Execution in a WordPress Plugin
════════════════════════
𐀪 Author: arian_lord3
════════════════════════
ⴵ Time: Thu, 28 May 2026 08:00:35 GMT
════════════════════════
⌗ Tags: #xss_attack #wordpress_vulnerabilities #bug_bounty_writeup #csrf_attack #cybersecurity
Medium
Chaining CSRF and XSS to Remote Code Execution in a WordPress Plugin
A step-by-step walkthrough of how two limited vulnerabilities in Quiz and Survey Master 4.7.7 can be chained into full server compromise.
46 views
Daily Writeups
⤷ Title: State-Sponsored Actors Operationalize ROADtools Framework in Cloud Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 09:41:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Security #Cloud Security #Entra ID #Incident Response #ROADtools #threat intelligence #Token Manipulation
Daily CyberSecurity
State-Sponsored Actors Operationalize ROADtools Framework in Cloud Campaigns
Discover how nation-state hackers leverage the ROADtools cloud attack toolkit to compromise Entra ID environments and bypass MFA controls.
34 views