Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Rising Chinese PhaaS Ecosystem Bypasses Modern Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:33:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese PhaaS #Digital Wallet Fraud #Google Threat Intelligence #MFA Bypass #Phishing_as_a_Service #Real_Time Interception #threat intelligence
Daily CyberSecurity
Rising Chinese PhaaS Ecosystem Bypasses Modern Security Controls
Discover how the Chinese PhaaS ecosystem uses real-time interception and AI automation to bypass MFA and exploit digital wallets.
28 views
Daily Writeups
⤷ Title: China-Based Red Lamassu Targets Telecoms Across Asia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:37:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Calypso APT #cyber_espionage #JFMBackdoor #PwC Threat Intelligence #Red Lamassu #Telecommunications cyberattack
Daily CyberSecurity
China-Based Red Lamassu Targets Telecoms Across Asia
Learn how the Red Lamassu threat actor targets telecom networks with the newly discovered JFMBackdoor malware framework.
34 views
Daily Writeups
⤷ Title: Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:33:06 +0000
════════════════════════
⌗ Tags: #Malware #DPAPILoader #Fileless Malware #Fox_IT #Lazarus Group #Memory_Only Malware #RemotePE #RemotePELoader #threat intelligence
Daily CyberSecurity
Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT
Fox-IT uncovers a sophisticated Lazarus memory-only toolset used to compromise financial firms via an evasive three-stage malware pipeline.
17 views
Daily Writeups
⤷ Title: What Actually Happens When You Use AI to Hunt Bug Bounties in 2026
════════════════════════
𐀪 Author: Masood Nfc
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:47:50 GMT
════════════════════════
⌗ Tags: #programming #artificial_intelligence #cybersecurity #hacking #bug_bounty
Medium
What Actually Happens When You Use AI to Hunt Bug Bounties in 2026
The honest workflow, not the Twitter version.
15 views
Daily Writeups
⤷ Title: 20 Web Developer Mistakes That Make a Penetration Tester’s Job Easy
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:38:45 GMT
════════════════════════
⌗ Tags: #information_security #cyber_security_awareness #bug_bounty #cybersecurity #pentesting
Medium
20 Web Developer Mistakes That Make a Penetration Tester’s Job Easy
I have been on the other side of your codebase. Here is exactly what I look for and what you should fix before I find it.
12 views
Daily Writeups
⤷ Title: Day 5 — Identifying Entry Points in Web Applications
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:01:03 GMT
════════════════════════
⌗ Tags: #api #cybersecurity #bug_bounty #web_security #infosec
Medium
Day 5 — Identifying Entry Points in Web Applications
When testing a web application, one of the most important phases is identifying entry points.
9 views
Daily Writeups
⤷ Title: From Zero to System Root: The Power of Vulnerability Chaining in Web Penetration Testing
════════════════════════
𐀪 Author: Vivek Bhatt
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:57:09 GMT
════════════════════════
⌗ Tags: #ethical_hacking #remote_code_execution #application_security #red_teaming #chaining_vulnerabilities
Medium
From Zero to System Root: The Power of Vulnerability Chaining in Web Penetration Testing
How a sequence of low and medium-severity flaws can be weaponized to achieve full infrastructure compromise.
10 views
Daily Writeups
⤷ Title: Why Subdomain Takeovers Are Still the Easiest Bounty Money in 2026
════════════════════════
𐀪 Author: Masood Nfc
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:50:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #programming #hacking
Medium
Why Subdomain Takeovers Are Still the Easiest Bounty Money in 2026
Thirty minutes of work. Four figure payouts. The vuln class that refuses to die.
11 views
Daily Writeups
⤷ Title: I Built an Enterprise Home Network SOC Platform — Here’s How
════════════════════════
𐀪 Author: Muhammad zubair
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:16:49 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #hacking #network_security #technology
Medium
I Built an Enterprise Home Network SOC Platform — Here’s How
As a cybersecurity student and intern, I always wanted to monitor my home network like a real Security Operations Center. So I built one.
11 views
Daily Writeups
⤷ Title: Incident Response Fundamentals
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:23:26 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cyber_security_awareness #cybersecurity #infosec #web_development
Medium
Incident Response Fundamentals
What are incidents?
11 views
Daily Writeups
⤷ Title: How I Independently Compromised Mr. Robot in 2 Hours — Complete Walkthrough
════════════════════════
𐀪 Author: Youseff mohamed kamal
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:24:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #wordpress_security #cybersecurity #ctf
Medium
How I Independently Compromised Mr. Robot in 2 Hours — Complete Walkthrough
Introduction:
12 views
Daily Writeups
⤷ Title: Why Cyber Security Skills Are Becoming Important for Students in India.
════════════════════════
𐀪 Author: Cozonix
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:08:29 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #ethical_hacking #cyber_security_courses #online_learning
Medium
Why Cyber Security Skills Are Becoming Important for Students in India.
Technology is growing rapidly, and almost every industry now depends on digital systems, online platforms, and cloud-based services. While…
27 views
Daily Writeups
⤷ Title: Want Placement? Start with Practical Skills. Join Hackersprey
════════════════════════
𐀪 Author: HackersPrey
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:57:08 GMT
════════════════════════
⌗ Tags: #industrial_training #cybersecurity_training #cybersecurity #ethical_hacking #cybersecurity_course
Medium
Want Placement? Start with Practical Skills. Join Hackersprey
Join Hackersprey’s 45 Days Industrial Training in Cybersecurity and learn directly from industry experts, security researchers, and red…
43 views
Daily Writeups
⤷ Title: Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 29 May 2026 14:41:25 +0530
════════════════════════
⌗ Tags: No_Tags
29 views
Daily Writeups
⤷ Title: The Deliverability Problem: How New Platforms Are Solving Inbox Placement
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:53:36 +0000
════════════════════════
⌗ Tags: #Security
Hackread
The Deliverability Problem: How New Platforms Are Solving Inbox Placement
Email still reaches more people than any other digital channel. Getting it to actually land in the inbox is harder than it used to be, and a new generation of
26 views
Daily Writeups
⤷ Title: VaultJacking: Exploiting Google Sync Infrastructure via Intercepted PINs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:41:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cross_site authentication data theft #Google Workspace proxy environment hijacking #iCloud Keychain vs Google security architecture #multi_platform synchronized repository dump #PhishU Adversary_in_the_Middle framework #session cookie token theft mitigations #synchronization PIN credential exfiltration #unauthorized trusted device registry #VaultJacking Google password phishing #WebAuthn hardware perimeter bypass
Information Security News
VaultJacking: Exploiting Google Sync Infrastructure via Intercepted PINs
The Genesis of the VaultJacking Attack Vector A solitary numeric PIN can transform Google’s password repository into an unsecured gateway. Consequently, the emerging VaultJacking phishing methodol…
12 views
Daily Writeups
⤷ Title: Zero-Day Exploitation: Rapid7 Exposes Remote Code Execution Vulnerability in Gogs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:36:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #branch name command injection payload #git rebase exec flag exploit #Gogs alternative to GitLab GitHub #Gogs argument injection vulnerability #Jonah Burgess Rapid7 Labs discovery #open registration app.ini security risk #Rapid7 vulnerability disclosure policy timeline #self_hosted source code management exploit #software supply chain repository compromise #unpatched self_hosted Git RCE
Information Security News
Gogs Argument Injection Vulnerability Grants Server RCE
Rapid7 discloses an unpatched Gogs argument injection vulnerability. Learn how a malicious branch name in a git rebase pull request grants full server RCE.
13 views
Daily Writeups
⤷ Title: Fiscal Realignment: Public Interest Registry Initiates Price Hike for .ORG Domains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:30:27 +0000
════════════════════════
⌗ Tags: #Technology #.org domain price increase #bulk domain asset management #Cloudflare at_cost domain pricing #domain portfolio risk mitigation #ICANN domain registration fees #legacy TLD price modifications #lock in multi_year domain renewals #open_source organization website costs #Porkbun registrar price updates #Public Interest Registry wholesale tariff hike
Information Security News
.org Domain Price Increase: Rates Hike Beginning June 1
The Public Interest Registry triggers a wholesale .org domain price increase on June 1. Lock in long-term renewals now before retail rates inflate.
17 views
Daily Writeups
⤷ Title: Hacking JSON Web Tokens: How Attackers Exploit API Authentication
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:15:40 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_penetration_testing #api_attack #api_pentesting #json_web_token
Medium
Hacking JSON Web Tokens: How Attackers Exploit API Authentication
JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security feature into an attacker’s gateway
16 views
Daily Writeups
⤷ Title: Advanced Client Side Injection Secrets Leads To (SSRF , Prev Esc)
════════════════════════
𐀪 Author: Mado
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:15:10 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #infosec #penetration_testing #bug_bounty
Medium
Advanced Client Side Injection Secrets Leads To (SSRF , Prev Esc)🤫
Client-Side Injection(Advanced): How Small Bugs Lead To Big Bounties(SSRF , Prev Esc , KeyLogger , 30XSS)
18 views
Daily Writeups
⤷ Title: How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
════════════════════════
𐀪 Author: Sachin Patil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:14:46 GMT
════════════════════════
⌗ Tags: #nodejs #vulnerability #cybersecurity #infosec #bug_bounty
Medium
How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
When a patch for a critical vulnerability drops in a library downloaded over 500 million times a week, you expect it to be bulletproof…
14 views