Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Bypassing an Admin Feature Flag Through a Side Door
════════════════════════
𐀪 Author: ENUMS
════════════════════════
ⴵ Time: Fri, 29 May 2026 02:46:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity
Medium
Bypassing an Admin Feature Flag Through a Side Door
Most access control bugs are not about a missing check. They are about a check that lives in the wrong place. This one is a clean example.
18 views
Daily Writeups
⤷ Title: Physical Infiltration: The FBI Warns of Silent Ransom Group’s New Tactics
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:35:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #business_data_leaks.com data dumps #corporate identity theft defense #double extortion data theft #fake help desk social engineering #FBI law firm cyber alert 2026 #legitimate remote administration abuse #Luna Moth cyber extortion campaign #physical office intrusion USB exploit #Silent Ransom Group IT impersonation #WinSCP Rclone data exfiltration
Information Security News
Silent Ransom Group IT Impersonation: FBI Issues Alert
The FBI warns of a dangerous Silent Ransom Group IT impersonation campaign targeting US law firms through fake tech support calls and physical office visits.
12 views
Daily Writeups
⤷ Title: Architectural Vulnerabilities in Notepad++: Arbitrary Code Execution Risks Unmasked
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:50:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_48778 commandLineInterpreter #CVSS 7.8 flaw remediation #malicious AppData config overwrites #Notepad++ 8.9.6.1 security patch #Notepad++ config.xml code execution #Open Containing Folder in cmd exploit #OS command injection CWE_78 #shortcuts.xml parsing bug CVE_2026_48800 #text editor arbitrary code execution #Windows text editor vulnerability
Information Security News
Notepad++ Config.xml Code Execution Flaw Patched: Update Now
Notepad++ patches a critical config.xml code execution flaw (CVE-2026-48778) alongside two other security bugs. Upgrade to version 8.9.6.1 immediately.
8 views
Daily Writeups
⤷ Title: Digital Scorched-Earth: The Destructive Campaign of Ababil of Minab
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:35:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Ababil of Minab cyberattacks #Black Shadow Iranian threat group #database wiping Python malware #FileFiend C++ exfiltration utility #Gambit Security threat matrix #generative AI weaponization telemetry #infrastructure supply chain destruction #LA Metro VMware infrastructure hack #nefeshhope.com command domain #South Florida RTA database deletion
Information Security News
Ababil of Minab Cyberattacks Destroy US & Middle East Orgs
The Ababil of Minab cyberattacks systematically wipe virtual machines, databases, and backups. Learn how this Iranian group targets the transport sector.
11 views
Daily Writeups
⤷ Title: The Stealth Emergence of FROST: Tracking Users via SSD Latency Side-Channels
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:31:26 +0000
════════════════════════
⌗ Tags: #Data Leak #Apple M2 Mac web tracking #browser sandbox data exfiltration #browser side_channel storage vulnerability #browser storage quota mitigations #cross_browser web tracking mechanics #FROST SSD fingerprinting attack #Hannes Weissteiner DIMVA conference research #hardware cache timing exploitation #OPFS read write latency telemetry #Origin Private File System tracking
Information Security News
FROST SSD Fingerprinting Attack Tracks Users via Storage
Researchers unveil the FROST SSD fingerprinting attack. Learn how malicious JavaScript reads OPFS storage latency to track open tabs and background apps.
13 views
Daily Writeups
⤷ Title: Proactive Vulnerability Mitigation: Anthropic Integrates Security Guardrails into Claude Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:19:11 +0000
════════════════════════
⌗ Tags: #Technology #Anthropic security_guidance extension #automated SAST developer tool #background threat pattern analysis #Claude Agent SDK integration #Claude Code security plugin #custom security policy YAML #git diff vulnerability scanning #real_time AI code auditing #secure coding practices #terminal vulnerability annotations
Information Security News
Claude Code Security Plugin: Real-Time AI Code Auditing
Anthropic launches a native Claude Code security plugin. Learn how this real-time AI security-guidance tool checks your code for bugs before you commit.
14 views
Daily Writeups
⤷ Title: Oracle Releases Massive May 2026 Critical Security Patch Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:40:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #database security #Enterprise Software #Oracle #Patch Tuesday #REST Data Services #security advisory #vulnerability management
Daily CyberSecurity
Oracle Releases Massive May 2026 Critical Security Patch Update
Stay secure with the latest Oracle security patch updates. Learn how these fixes address critical software vulnerabilities across multiple enterprise platforms.
8 views
Daily Writeups
⤷ Title: Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:07:16 +0000
════════════════════════
⌗ Tags: #Malware #Cloud Security #Credential Theft #Microsoft Defender #npm registry #supply chain attack #Typosquatting #vpmdhaj cluster
Daily CyberSecurity
Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments
A critical npm supply chain attack exploits lookalike packages to distribute credential harvesting malware. Learn how to protect your cloud assets.
8 views
Daily Writeups
⤷ Title: KubeVirt Privilege Escalation Flaw Exposes Kubernetes Clusters to Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:15:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Container Runtime Hijacking #CVE_2026_7374 #Kubernetes Security #KubeVirt #OpenShift Flaw #privilege escalation #Symlink Validation
Daily CyberSecurity
KubeVirt Privilege Escalation Flaw Exposes Kubernetes Clusters to Takeover
Discover how the critical KubeVirt privilege escalation flaw (CVE-2026-7374) allows container runtime hijacking and creates a cluster takeover risk.
18 views
Daily Writeups
⤷ Title: Solidity Basics Part 2: OOP & Inheritance
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:31:01 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #infosec #solidity #web3
Medium
Solidity Basics Part 2: OOP & Inheritance
Series: Web3 Security Zero se Advance 🛡️ | Article #6 By HackerMD | 25 min read
16 views
Daily Writeups
⤷ Title: They Closed It as N/A. Then They Silently Patched It. Here’s The Full Story.
════════════════════════
𐀪 Author: $cr1p7 k!ddi3
════════════════════════
ⴵ Time: Fri, 29 May 2026 02:55:46 GMT
════════════════════════
⌗ Tags: #open_redirect #optional_chaining #critical #bug_bounty #oauth_security
Medium
🔴 They Closed It as N/A. Then They Silently Patched It. Here’s The Full Story.
A Critical P1 Bug Chain on a Fintech Platform — Open Redirect → OAuth Token Theft → Full Account Takeover | Intigriti Disclosure
16 views
Daily Writeups
⤷ Title: Building an XDR-Style Security Bot in OpenClaw to Watch Your Logs 24/7
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:55:55 GMT
════════════════════════
⌗ Tags: #programming #ui #openclaw #hacking #xdr
Medium
Building an XDR-Style Security Bot in OpenClaw to Watch Your Logs 24/7
Security vendors will sell you an XDR platform that costs more than your car and still misses the weird stuff because it was trained on…
15 views
Daily Writeups
⤷ Title: Digital Forensics Fundamental
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:35:28 GMT
════════════════════════
⌗ Tags: #web_development #cybersecurity #ethical_hacking #cyber_security_awareness #infosec
Medium
Digital Forensics Fundamental
Introduction
16 views
Daily Writeups
⤷ Title: iOS App Pentesting for Beginners: Your First Apple Hack in 2025
════════════════════════
𐀪 Author: Akifkhan
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:24:16 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #ios
Medium
iOS App Pentesting for Beginners: Your First Apple Hack in 2025
Tags: ios-security mobile-pentesting ethical-hacking cybersecurity frida objection bug-bounty reverse-engineering infosec beginner
18 views
Daily Writeups
⤷ Title: Peak Hill — TryHackMe CTF Writeup | Pickle Deserialization & Python Exploitation
════════════════════════
𐀪 Author: Arun1x
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:48:31 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #penetration_testing #tryhackme_writeup #cybersecurity #exploit_development
Medium
Peak Hill — TryHackMe CTF Writeup | Pickle Deserialization & Python Exploitation
Cracking Pickle-Encoded Credentials, Decompiling Python Bytecode, and Exploiting Deserialization for Root
21 views
Daily Writeups
⤷ Title: JavaScript: Simple Demo — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:07:07 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #tryhackme_walkthrough #javascript #tryhackme_pre_security
Medium
JavaScript: Simple Demo — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: JavaScript: Simple Demo
Room URL: https://tryhackme.com/room/javascriptsimpledemo
Difficulty: Medium
Please…
19 views
Daily Writeups
⤷ Title: TryHackMe Payload — AI Supply Chain Security Walkthrough
════════════════════════
𐀪 Author: Jose A Ruiz Marquez
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:52:03 GMT
════════════════════════
⌗ Tags: #ai #supply_chain #cybersecurity #tryhackme_walkthrough #tryhackme
Medium
TryHackMe Payload — AI Supply Chain Security Walkthrough
A Practical DFIR Investigation into Malicious ML Artefacts, Unsafe Deserialization, and Inference-Time Manipulation
15 views
Daily Writeups
⤷ Title: Penetration Testing Frameworks (TryHackMe Room)
════════════════════════
𐀪 Author: Amr Sebie
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:43:05 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #tryhackme_walkthrough #tryhackme_writeup #ctf
Medium
Penetration Testing Frameworks (TryHackMe Room)
Lab link:https://tryhackme.com/room/penetrationtestingframeworks
17 views
Daily Writeups
⤷ Title: Prompt Injection Walkthrough | TryHackMe
════════════════════════
𐀪 Author: Akash Kumar
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:42:57 GMT
════════════════════════
⌗ Tags: #tryhackme #prompt_injection_attack #writing_prompts #ai_injection_prompt #llm_prompt_injection
Medium
Prompt Injection Walkthrough | TryHackMe
Room: https://tryhackme.com/room/promptinjectionls
Youtube Link : https://youtu.be/apQ-HQPbOTA https://youtu.be/6gQrEz0xBMY
16 views
Daily Writeups
⤷ Title: Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
════════════════════════
𐀪 Author: Dhruv Thakur
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:03:13 GMT
════════════════════════
⌗ Tags: #openid_connect #sso #aml #api_security #oauth
Medium
Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
When you click “Sign in with Google” on some app you just downloaded, something interesting happens. The app gets access to your data. Your…
26 views
Daily Writeups
⤷ Title: NestJS Rate Limiting Using @nestjs/throttler
════════════════════════
𐀪 Author: Ravi Mewada
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #backend #rate_limiting #nodejs #api_security #nestjs
Medium
NestJS Rate Limiting Using @nestjs/throttler
When we build APIs, one thing that is really important, for security is rate limiting.
32 views