Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
════════════════════════
𐀪 Author: Dhruv Thakur
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:03:13 GMT
════════════════════════
⌗ Tags: #openid_connect #sso #aml #api_security #oauth
Medium
Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
When you click “Sign in with Google” on some app you just downloaded, something interesting happens. The app gets access to your data. Your…
26 views
Daily Writeups
⤷ Title: NestJS Rate Limiting Using @nestjs/throttler
════════════════════════
𐀪 Author: Ravi Mewada
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #backend #rate_limiting #nodejs #api_security #nestjs
Medium
NestJS Rate Limiting Using @nestjs/throttler
When we build APIs, one thing that is really important, for security is rate limiting.
32 views
Daily Writeups
⤷ Title: Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 29 May 2026 11:27:41 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: Algorithmic Infiltration: Microsoft Unmasks Generative AI Poisoning in Cryptojacking Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:43:30 +0000
════════════════════════
⌗ Tags: #Malware #autorun.dll sideloading exploit #cryptocurrency harvesting evasion techniques #Dynu dynamic DNS infrastructure #Fake hardware monitoring cryptojacker #HWMonitor FurMark cloned malware #Microsoft Defender registry exclusions #poisoned AI chatbot search results #ScreenConnect remote access trojan #SimpleRunPE.exe process injection #smart GPU throttling miner
Information Security News
Fake Hardware Monitoring Cryptojacker Hijacks High-End GPUs
Microsoft exposes a stealthy fake hardware monitoring cryptojacker mimicking FurMark and HWMonitor. It masks its GPU usage to avoid detection.
29 views
Daily Writeups
⤷ Title: Race Conditions Are Simpler Than You Think (Here’s How I Test for Them)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:48:49 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #bug_hunting #bug_bounty #bug_bounty_tips #bug_bounty_writeup
Medium
Race Conditions Are Simpler Than You Think (Here’s How I Test for Them)
I used to hear “race condition” and zone out. Sounded like something you needed a PhD for. Multi-threading. Timing windows. Complex stuff. Then I actually found one by accident and realized how …
22 views
Daily Writeups
⤷ Title: Web Server Attacks — I
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:49:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_server_attacks #tryhackme
Medium
Web Server Attacks — I
Enumerate and identify misconfigurations across Apache, Nginx, Node.js, and Python HTTP Server.
25 views
Daily Writeups
⤷ Title: Broken Authentication | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:48:04 GMT
════════════════════════
⌗ Tags: #broken_authentication #cybersecurity #tryhackme #brute_force #cookie_manipulation
Medium
Broken Authentication | TryHackMe
Learn how to defeat logins and other authentication mechanisms to allow you access to unpermitted areas.Learn how to defeat logins and…
33 views
Daily Writeups
⤷ Title: Rising Chinese PhaaS Ecosystem Bypasses Modern Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:33:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese PhaaS #Digital Wallet Fraud #Google Threat Intelligence #MFA Bypass #Phishing_as_a_Service #Real_Time Interception #threat intelligence
Daily CyberSecurity
Rising Chinese PhaaS Ecosystem Bypasses Modern Security Controls
Discover how the Chinese PhaaS ecosystem uses real-time interception and AI automation to bypass MFA and exploit digital wallets.
28 views
Daily Writeups
⤷ Title: China-Based Red Lamassu Targets Telecoms Across Asia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:37:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Calypso APT #cyber_espionage #JFMBackdoor #PwC Threat Intelligence #Red Lamassu #Telecommunications cyberattack
Daily CyberSecurity
China-Based Red Lamassu Targets Telecoms Across Asia
Learn how the Red Lamassu threat actor targets telecom networks with the newly discovered JFMBackdoor malware framework.
34 views
Daily Writeups
⤷ Title: Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:33:06 +0000
════════════════════════
⌗ Tags: #Malware #DPAPILoader #Fileless Malware #Fox_IT #Lazarus Group #Memory_Only Malware #RemotePE #RemotePELoader #threat intelligence
Daily CyberSecurity
Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT
Fox-IT uncovers a sophisticated Lazarus memory-only toolset used to compromise financial firms via an evasive three-stage malware pipeline.
17 views
Daily Writeups
⤷ Title: What Actually Happens When You Use AI to Hunt Bug Bounties in 2026
════════════════════════
𐀪 Author: Masood Nfc
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:47:50 GMT
════════════════════════
⌗ Tags: #programming #artificial_intelligence #cybersecurity #hacking #bug_bounty
Medium
What Actually Happens When You Use AI to Hunt Bug Bounties in 2026
The honest workflow, not the Twitter version.
16 views
Daily Writeups
⤷ Title: 20 Web Developer Mistakes That Make a Penetration Tester’s Job Easy
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:38:45 GMT
════════════════════════
⌗ Tags: #information_security #cyber_security_awareness #bug_bounty #cybersecurity #pentesting
Medium
20 Web Developer Mistakes That Make a Penetration Tester’s Job Easy
I have been on the other side of your codebase. Here is exactly what I look for and what you should fix before I find it.
14 views
Daily Writeups
⤷ Title: Day 5 — Identifying Entry Points in Web Applications
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:01:03 GMT
════════════════════════
⌗ Tags: #api #cybersecurity #bug_bounty #web_security #infosec
Medium
Day 5 — Identifying Entry Points in Web Applications
When testing a web application, one of the most important phases is identifying entry points.
9 views
Daily Writeups
⤷ Title: From Zero to System Root: The Power of Vulnerability Chaining in Web Penetration Testing
════════════════════════
𐀪 Author: Vivek Bhatt
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:57:09 GMT
════════════════════════
⌗ Tags: #ethical_hacking #remote_code_execution #application_security #red_teaming #chaining_vulnerabilities
Medium
From Zero to System Root: The Power of Vulnerability Chaining in Web Penetration Testing
How a sequence of low and medium-severity flaws can be weaponized to achieve full infrastructure compromise.
10 views
Daily Writeups
⤷ Title: Why Subdomain Takeovers Are Still the Easiest Bounty Money in 2026
════════════════════════
𐀪 Author: Masood Nfc
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:50:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #programming #hacking
Medium
Why Subdomain Takeovers Are Still the Easiest Bounty Money in 2026
Thirty minutes of work. Four figure payouts. The vuln class that refuses to die.
11 views
Daily Writeups
⤷ Title: I Built an Enterprise Home Network SOC Platform — Here’s How
════════════════════════
𐀪 Author: Muhammad zubair
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:16:49 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #hacking #network_security #technology
Medium
I Built an Enterprise Home Network SOC Platform — Here’s How
As a cybersecurity student and intern, I always wanted to monitor my home network like a real Security Operations Center. So I built one.
11 views
Daily Writeups
⤷ Title: Incident Response Fundamentals
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:23:26 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cyber_security_awareness #cybersecurity #infosec #web_development
Medium
Incident Response Fundamentals
What are incidents?
11 views
Daily Writeups
⤷ Title: How I Independently Compromised Mr. Robot in 2 Hours — Complete Walkthrough
════════════════════════
𐀪 Author: Youseff mohamed kamal
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:24:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #wordpress_security #cybersecurity #ctf
Medium
How I Independently Compromised Mr. Robot in 2 Hours — Complete Walkthrough
Introduction:
12 views
Daily Writeups
⤷ Title: Why Cyber Security Skills Are Becoming Important for Students in India.
════════════════════════
𐀪 Author: Cozonix
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:08:29 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #ethical_hacking #cyber_security_courses #online_learning
Medium
Why Cyber Security Skills Are Becoming Important for Students in India.
Technology is growing rapidly, and almost every industry now depends on digital systems, online platforms, and cloud-based services. While…
27 views
Daily Writeups
⤷ Title: Want Placement? Start with Practical Skills. Join Hackersprey
════════════════════════
𐀪 Author: HackersPrey
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:57:08 GMT
════════════════════════
⌗ Tags: #industrial_training #cybersecurity_training #cybersecurity #ethical_hacking #cybersecurity_course
Medium
Want Placement? Start with Practical Skills. Join Hackersprey
Join Hackersprey’s 45 Days Industrial Training in Cybersecurity and learn directly from industry experts, security researchers, and red…
43 views
Daily Writeups
⤷ Title: Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 29 May 2026 14:41:25 +0530
════════════════════════
⌗ Tags: No_Tags
29 views