Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Reaper macOS Infostealer Abuses Script Editor to Steal Crypto and Passwords
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:06:01 +0000
════════════════════════
⌗ Tags: #Security #Malware #ClickFix #Crypto #Infostealer #macOS #Password #Reaper #Script Editor #SHub Stealer #WeChat
Hackread
Reaper macOS Infostealer Abuses Script Editor to Steal Crypto and Passwords
Threat actors deploy Reaper, an updated SHub Stealer variant abusing macOS Script Editor to bypass protections and steal cryptocurrency assets.
27 views
Daily Writeups
⤷ Title: How a Broken Cryptographic Key Derivation Allowed Full Tenant Takeover on an Enterprise Identity…
════════════════════════
𐀪 Author: Tanvi Chauhan
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 14:21:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_writeup #pentesting #bug_bounty #security
Medium
How a Broken Cryptographic Key Derivation Allowed Full Tenant Takeover on an Enterprise Identity…
Three weeks ago, I was looking at a high-end enterprise Identity Provider (IdP) platform on a private bug bounty program. This service…
18 views
Daily Writeups
⤷ Title: $600 BOLA: Breaking Event Boundaries Using Cross-Selection Injection
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:31:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #pentesting #cybersecurity #backend
Medium
$600 BOLA: Breaking Event Boundaries Using Cross-Selection Injection
Hi Everyone! Sometimes bugs don’t look dangerous at first… until you understand what they break behind the scenes.
18 views
Daily Writeups
⤷ Title: Nginx Rift (CVE-2026–42945)-Part2
════════════════════════
𐀪 Author: rezauditore
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:03:48 GMT
════════════════════════
⌗ Tags: #programming #penetration_testing #hacking #bug_bounty #nginx
Medium
Nginx Rift (CVE-2026–42945)-Part2
The first part:
19 views
Daily Writeups
⤷ Title: Using .npmrc to achieve remote code execution on npm users
════════════════════════
𐀪 Author: Mohammed Dief
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 14:15:40 GMT
════════════════════════
⌗ Tags: #exploitation #cybersecurity #github #hackerone #hacking
Medium
Using .npmrc to achieve remote code execution on npm users
What a miserable day to be wring about anything, But here we go again since this day has been really amazing and I couldn’t miss writing a…
19 views
Daily Writeups
⤷ Title: The AI Attack Surface in 2026 Is Larger Than Most Defenders Realize
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:56:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_research #ethical_hacking #penetration_testing #hacking
Medium
The AI Attack Surface in 2026 Is Larger Than Most Defenders Realize
Bug bounty hunters are still writing XSS reports. Meanwhile, the LLMs running enterprise workflows are accepting arbitrary instructions…
30 views
Daily Writeups
⤷ Title: La nuova frontiera degli attacchi informatici
════════════════════════
𐀪 Author: Hoken Tech
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:31:02 GMT
════════════════════════
⌗ Tags: #hacking #video_call #problems #truffe #scam
Medium
La nuova frontiera degli attacchi informatici
In un mondo sempre connesso e dipendente da vari servizi centralizzati, ecco che basta una semplice vulnerabilità di una piattaforma o…
31 views
Daily Writeups
⤷ Title: Hijacking Android’s Location Stack — Without Root
════════════════════════
𐀪 Author: r69shabh
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:08:38 GMT
════════════════════════
⌗ Tags: #android #android_development #hacking #data #kotlin
Medium
Hijacking Android’s Location Stack — Without Root
How I reverse-engineered the Fused Location Provider, drowned real GPS in fake signals, and reflected into hidden APIs to make every app on…
18 views
Daily Writeups
⤷ Title: Sticky Keys Backdoor on Windows 10 — Pre-Auth SYSTEM Access via RDP
════════════════════════
𐀪 Author: Isha Sangpal
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:56:32 GMT
════════════════════════
⌗ Tags: #betigetin #penetration_testing #cybersecurity #security #ethical_hacking
Medium
Sticky Keys Backdoor on Windows 10 — Pre-Auth SYSTEM Access via RDP
How attackers plant a login-screen backdoor that gives SYSTEM access without credentials and how to stop it.
19 views
Daily Writeups
⤷ Title: TryHackMe Crack The Hash Complete Walkthrough
════════════════════════
𐀪 Author: Gohilharsh
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:33:22 GMT
════════════════════════
⌗ Tags: #ethical_hacking #tryhackme #penetration_testing #cybersecurity
Medium
TryHackMe Crack The Hash Complete Walkthrough
This room introduced the fundamentals of hashing and password cracking. Hashing is the process of converting data into a fixed-length…
24 views
Daily Writeups
⤷ Title: Billing — TryHackMe WriteUp with Flags
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:12:38 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #ctf #cybersecurity #tryhackme_writeup
Medium
Billing — TryHackMe WriteUp with Flags
Date: 04/09/2025
29 views
Daily Writeups
⤷ Title: Security Beyond Signatures: Defending Against Living-Off-the-Land Attacks
════════════════════════
𐀪 Author: Marvin Sewell
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 14:28:15 GMT
════════════════════════
⌗ Tags: #machine_learning #cybersecurity #artificial_intelligence #ethical_hacking #cloud_computing
Medium
Security Beyond Signatures: Defending Against Living-Off-the-Land Attacks
For decades, endpoint security has largely revolved around a simple premise — identify malicious software and prevent it from executing.
29 views
Daily Writeups
⤷ Title: Sukku — A Lightweight Recon Framework for Security Researchers
════════════════════════
𐀪 Author: h4ckerstark1
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 13:37:21 GMT
════════════════════════
⌗ Tags: #sukku #medium #h4ckerstark1 #cybersecurity #ethical_hacking
Medium
Sukku — A Lightweight Recon Framework for Security Researchers
Introduction
39 views
Daily Writeups
⤷ Title: Securing APIs in the Cloud (2026 Guide): API Gateway & OAuth Explained for Maximum Security
════════════════════════
𐀪 Author: Manula Udyoga
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 14:01:02 GMT
════════════════════════
⌗ Tags: #api_security #cloud_security #api_gateway #cybersecurity #oauth
Medium
🔐 Securing APIs in the Cloud (2026 Guide): API Gateway & OAuth Explained for Maximum Security
🔐 Securing APIs in the Cloud (2026 Guide): API Gateway & OAuth Explained for Maximum Security
51 views
Daily Writeups
⤷ Title: Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 20:23:40 +0530
════════════════════════
⌗ Tags: No_Tags
46 views
Daily Writeups
⤷ Title: How to hack cheating spouse WhatsApp?
════════════════════════
𐀪 Author: Michael Parks
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 16:38:05 GMT
════════════════════════
⌗ Tags: #infidelity #whatsapp #cheating #hacking #marriage
Medium
How to hack cheating spouse WhatsApp?
“Trust is the foundation of love, but unanswered messages and late-night chats can raise doubts. WhatsApp keeps us connected, but is he…
37 views
Daily Writeups
⤷ Title: I Built a Post-Quantum Login System at a Hackathon. This Is How It Works.
════════════════════════
𐀪 Author: Soumyadipta Birabar
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 16:28:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #artificial_intelligence #hacking #technology #infosec
Medium
I Built a Post-Quantum Login System at a Hackathon. This Is How It Works.
Your login system is broken. Not today, maybe not for five years, but the clock is running. Every time you authenticate with a website…
45 views
Daily Writeups
⤷ Title: RubyDome | Proving Grounds | Walkthrough
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 16:24:37 GMT
════════════════════════
⌗ Tags: #ctf_writeup #hacking #ethical_hacking #ctf #technology
Medium
RubyDome | Proving Grounds | Walkthrough
We can start off with our nmap scan:
34 views
Daily Writeups
⤷ Title: THM - Recruit
════════════════════════
𐀪 Author: Francesco Pastore
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 15:29:36 GMT
════════════════════════
⌗ Tags: #tech #security #hacking #cybersecurity #technology
Medium
THM - Recruit
A writeup for “Recruit” on TryHackMe.
39 views
Daily Writeups
⤷ Title: Advanced Evasion Tradecraft: Precision Module Stomping
════════════════════════
𐀪 Author: Tom O'Neill
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 15:04:44 GMT
════════════════════════
⌗ Tags: #red_team #malware #hacking #cybersecurity
Medium
Advanced Evasion Tradecraft: Precision Module Stomping
Mapping process memory for calculated, stable execution
92 views
Daily Writeups
⤷ Title: NSE for Windows Networks: SMB Enumeration
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 15:53:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #ethical_hacking #pentesting #technology
Medium
NSE for Windows Networks: SMB Enumeration
Port 445 on Windows is more than a service — it’s a goldmine of enumeration data.
59 views