Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Mastra Supply Chain Attack Compromises 140+ npm Packages
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 08:04:43 +0000
════════════════════════
⌗ Tags: #Malware #easy_day_js #Infostealer #Mastra #npm #Socket #supply chain attack #Typosquatting
Daily CyberSecurity
Mastra Supply Chain Attack Compromises 140+ npm Packages
A Mastra supply chain attack compromised 140+ npm packages, using the typosquatted easy-day-js dependency to drop a crypto-stealing infostealer.
17 views
Daily Writeups
⤷ Title: Using AI the smart way. Interview with Cristian Zot (CristiVlad25)
════════════════════════
𐀪 Author: Eleanor Barlow
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Business Insights
Intigriti
Using AI the smart way. Interview with Cristian Zot (CristiVlad25)
Cristian Zot, aka CristiVlad25, is an active security researcher, experienced pentester, and an Intigriti Hacker Ambassador. These are his insights on using AI the smart way. 
12 views
Daily Writeups
⤷ Title: Using AI the smart way. Interview with Cristian Zot (CristiVlad25)
════════════════════════
𐀪 Author: Eleanor Barlow
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Hacker Spotlight
Intigriti
Using AI the smart way. Interview with Cristian Zot (CristiVlad25)
Cristian Zot, aka CristiVlad25, is an active security researcher, experienced pentester, and an Intigriti Hacker Ambassador. These are his insights on using AI the smart way. 
10 views
Daily Writeups
⤷ Title: How Reading a JavaScript Bundle Led Me to 29 Valid Coupon Codes in a Hidden API Endpoint
════════════════════════
𐀪 Author: Ashiqur Rahman Emon
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 09:31:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #bug_bounty
Medium
How Reading a JavaScript Bundle Led Me to 29 Valid Coupon Codes in a Hidden API Endpoint
It Started With a JS Bundle
12 views
Daily Writeups
⤷ Title: Lab 4 of my Information Disclosure series.
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 08:29:54 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #research #bug_bounty #bug_hunter #website
Medium
Lab 4 of my Information Disclosure series.
Welcome back to the series.
10 views
Daily Writeups
⤷ Title: Görünməyən Dünyanın İzində: RF Siqnalları və Kibertəhlükəsizliyin Yeni Sərhədləri
════════════════════════
𐀪 Author: cybershieldy.com
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 09:41:53 GMT
════════════════════════
⌗ Tags: #hacking #hacker #kiber #kiber_tehlukesizlik #siber
Medium
📡 Görünməyən Dünyanın İzində: RF Siqnalları və Kibertəhlükəsizliyin Yeni Sərhədləri
Əksər insanlar kibertəhlükəsizliyi düşündükdə serverlər, firewall-lar, antiviruslar və ya şəbəkə hücumlarını təsəvvür edir.
14 views
Daily Writeups
⤷ Title: Analysis of the 36 Million Dollar Key Management Incident at Humanity Protocol
════════════════════════
𐀪 Author: Alice Hsu
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 09:25:09 GMT
════════════════════════
⌗ Tags: #hacking #security
Medium
Analysis of the 36 Million Dollar Key Management Incident at Humanity Protocol
Incident Overview
16 views
Daily Writeups
⤷ Title: US government forced Anthropic to pull Claude Fable 5 and Mythos 5 offline
════════════════════════
𐀪 Author: Stanislav Klevtsov
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 09:16:14 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #openai #infosec #claude_mythos
Medium
US government forced Anthropic to pull Claude Fable 5 and Mythos 5 offline
The US government forced Anthropic to pull Claude Fable 5 and Mythos 5 offline.
8 views
Daily Writeups
⤷ Title: Vulnerability Assessment vs Penetration Testing: Key Differences Explained
════════════════════════
𐀪 Author: Johnmark
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 08:44:39 GMT
════════════════════════
⌗ Tags: #penetration_testing
Medium
Vulnerability Assessment vs Penetration Testing: Key Differences Explained
Introduction
11 views
Daily Writeups
⤷ Title: Security Misconfiguration, Supply Chain Attacks & Cryptographic Failures: The Silent Threats Hiding…
════════════════════════
𐀪 Author: Shalu
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 09:52:53 GMT
════════════════════════
⌗ Tags: #networking #technology #ethical_hacking #cryptography #cybersecurity
Medium
Security Misconfiguration, Supply Chain Attacks & Cryptographic Failures: The Silent Threats Hiding in Plain Sight
What If Your Biggest Cybersecurity Risk Isn’t a Hacker?
15 views
Daily Writeups
⤷ Title: I always thought Ethical Hacking was too complicated… until I finally decided to begin.
════════════════════════
𐀪 Author: Abhinav V R
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 09:24:51 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #student_life
Medium
I always thought Ethical Hacking was too complicated… until I finally decided to begin.
For a long time, Ethical Hacking was something I genuinely wanted to explore, but I kept avoiding it. The field looked huge, filled with…
32 views
Daily Writeups
⤷ Title: Solving YWH Dojo #51 — DeadBolt: From Zip Slip to Remote Code Execution
════════════════════════
𐀪 Author: 0xZeus
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 09:53:34 GMT
════════════════════════
⌗ Tags: #yeswehack #rce #zip_slip #ctf #licence_bypass
Medium
Solving YWH Dojo #51 — DeadBolt: From Zip Slip to Remote Code Execution
Introduction
38 views
Daily Writeups
⤷ Title: The Top 10 Attack Surface Exposures in 2026
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: ESET MDR vs Sophos MDR: Compared Time to discover and respond to a threat
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:52:33 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #eset #MDR #Sophos #Threat Detec #Threat Intelligence
Hackread
ESET MDR vs Sophos MDR: Compared Time to discover and respond to a threat
A detailed ESET MDR vs Sophos MDR comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach warranties to help you choose.
27 views
Daily Writeups
⤷ Title: SSRF — Making the Server Do Your Dirty Work
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 11:31:00 GMT
════════════════════════
⌗ Tags: #cloud_security #hacking #bug_bounty #technology #hacker
Medium
SSRF — Making the Server Do Your Dirty Work
What’s up everyone! Nitin here 👋
15 views
Daily Writeups
⤷ Title: I Turned a “What’s Your Name?” Field Into a Malicious Link — My First HTML Injection
════════════════════════
𐀪 Author: Prashant Raj
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:46:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #bug_hunting #html_injection #technology
Medium
I Turned a “What’s Your Name?” Field Into a Malicious Link — My First HTML Injection
TryHackMe — How Websites Work
11 views
Daily Writeups
⤷ Title: 1-Click Account Takeover via Misconfigured WebView
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview
Medium
One Click Account Takeover via Misconfigured WebView
TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…
9 views
Daily Writeups
⤷ Title: Prompt Injection: The Anatomy of an AI Attack Flow (And How to Prevent It)
════════════════════════
𐀪 Author: Stefan Miladinović
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 11:51:21 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #cybersecurity #software_engineering #application_security #llm
Medium
Prompt Injection: The Anatomy of an AI Attack Flow (And How to Prevent It)
We are rushing to plug LLMs into our APIs, databases, and enterprise data. IT MAKES SENSE! Autonomous agents are incredibly powerful.
10 views
Daily Writeups
⤷ Title: A walk-through of a High-severity cross-company account-takeover bug in a widely-used open-source…
════════════════════════
𐀪 Author: Santosh Kumar Puppala
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 11:30:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #idor #application_security #laravel #cve
Medium
A walk-through of a High-severity cross-company account-takeover bug in a widely-used open-source invoicing platform — how I found…
TL;DR — In InvoiceShelf (a self-hosted, open-source invoicing app built on Laravel), any user who was the Owner of one company could read…
5 views
Daily Writeups
⤷ Title: DevFortress Deep Digest 2: The Month It Got Names
════════════════════════
𐀪 Author: Duncan N. Ndegwa
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:30:20 GMT
════════════════════════
⌗ Tags: #api_security #application_security #openclaw #moltbook #ai_agents_in_action
Medium
DevFortress Deep Digest 2: The Month It Got Names
OpenClaw. Moltbook. CVE-2026–25253.
17 views
Daily Writeups
⤷ Title: API Attacks 105: SSRF ve Security Misconfiguration
════════════════════════
𐀪 Author: İlkan Aydoğan
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:25:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #application_security #api_security #owasp_api_security_top_10
Medium
API Attacks 105: SSRF ve Security Misconfiguration
API güvenliğinde bazı zafiyetler doğrudan veri erişimiyle ilgilidir.
11 views