Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: I Replaced My Smartwatch’s Official App by Reverse Engineering Its Bluetooth Protocol
════════════════════════
𐀪 Author: Linusthomas
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 07:20:13 GMT
════════════════════════
⌗ Tags: #bluetooth_low_energy #reverse_engineering #hacking #bluetooth
Medium
I Replaced My Smartwatch’s Official App by Reverse Engineering Its Bluetooth Protocol
How decoding a proprietary BLE protocol — packet by packet, with no docs and no SDK — led to a fully working custom Android companion app.
14 views
Daily Writeups
⤷ Title: Thejavasea.me Leaks Aio-Tlp371: What It Means, Risks, and Cybersecurity Insights
════════════════════════
𐀪 Author: Chriselle Sterling
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 07:04:47 GMT
════════════════════════
⌗ Tags: #privacy #information_technology #information_security #data_breach #hacking
Medium
Thejavasea.me Leaks Aio-Tlp371: What It Means, Risks, and Cybersecurity Insights
The phrase Thejavasea.me Leaks Aio-Tlp371 has been widely discussed across cybersecurity forums and online privacy communities, often…
16 views
Daily Writeups
⤷ Title: RIFFHACK: Black Market Break-In CTF Writeup
════════════════════════
𐀪 Author: Deoxy$
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 06:20:17 GMT
════════════════════════
⌗ Tags: #penetration_testing #ctf #hacking #cybersecurity #programming
Medium
RIFFHACK: Black Market Break-In CTF Writeup
RIFFHACK: Black Market Break-In ran from 19th to 22nd June 2026, four days of digging through challenges across categories. Went in without…
8 views
Daily Writeups
⤷ Title: The Ghost in the RAM: How Vulnerability Researchers Actually Find Wireless Flaws
════════════════════════
𐀪 Author: Mohit
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 06:18:43 GMT
════════════════════════
⌗ Tags: #technology #software_engineering #cybersecurity #computer_science #infosec
Medium
The Ghost in the RAM: How Vulnerability Researchers Actually Find Wireless Flaws
We treat our wireless gadgets like sealed, invisible vaults. You buy a phone, a smart thermostat, or a router, drop it on your desk, and…
10 views
Daily Writeups
⤷ Title: Should Small Businesses Hire a Cybersecurity Consulting Service?
════════════════════════
𐀪 Author: Doni Brass | Guardz
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 06:10:23 GMT
════════════════════════
⌗ Tags: #cloud_security #managed_services #tech_industry #cybersecurity #infosec
Medium
Should Small Businesses Hire a Cybersecurity Consulting Service?
Every week I talk to MSPs whose prospects are wrestling with the same question: should we bring in cybersecurity help, or try to manage it…
8 views
Daily Writeups
⤷ Title: Four Ways to Judge a Security Assessment. Only One Looks at the Client.
════════════════════════
𐀪 Author: Rubab Fatima
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 07:31:19 GMT
════════════════════════
⌗ Tags: #information_security #penetration_testing #risk_management #cyber_security_consulting #cybersecurity
Medium
Four Ways to Judge a Security Assessment. Only One Looks at the Client.
The tester, the manager, the vendor, and the client all measure success differently. None of them measure the work that makes findings…
9 views
Daily Writeups
⤷ Title: AI in Offensive Security: Transforming the Modern Attack Lifecycle
════════════════════════
𐀪 Author: Devkumar Shah
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 05:55:01 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #penetration_testing #red_team
Medium
AI in Offensive Security: Transforming the Modern Attack Lifecycle
By Devkumar Shah Cyber Security Professional | Offensive Security Researcher | Threat Intelligence Enthusiast
11 views
Daily Writeups
⤷ Title: SSDLC | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 06:32:57 GMT
════════════════════════
⌗ Tags: #tryhackme #sdlc #cybersecurity #devsecops
Medium
SSDLC | TryHackMe
This room focuses on the Secure Software Development Lifecycle (S-SDLC), its processes, and methodologies.
7 views
Daily Writeups
⤷ Title: Operation Coldstart | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 06:32:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #red_team #ctf #tryhackme
Medium
Operation Coldstart | TryHackMe
Wake up the staging server everyone left behind.
9 views
Daily Writeups
⤷ Title: No Upfront Fees for Crypto Recovery — WhatsApp Mighty Hacker Recovery: +1 (343) 947–3496
════════════════════════
𐀪 Author: Daddytt
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 07:31:18 GMT
════════════════════════
⌗ Tags: #self_help #ethical_hacking #free #ethereum_blockchain #cryptocurrency_investment
Medium
No Upfront Fees for Crypto Recovery — WhatsApp Mighty Hacker Recovery: +1 (343) 947–3496
Need Professional Cybersecurity or Data Recovery Assistance?
12 views
Daily Writeups
⤷ Title: How I Investigate a Slow Linux Server
════════════════════════
𐀪 Author: Fateyaly
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 07:30:43 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #programming #technology #coding
Medium
How I Investigate a Slow Linux Server
A Step-by-Step Troubleshooting Workflow
26 views
Daily Writeups
⤷ Title: Are SQL Injection Vulnerabilities Absolete ?
════════════════════════
𐀪 Author: lukewago
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 06:36:56 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #sql #web_development #cybersecurity #sql_injection
Medium
Are SQL Injection Vulnerabilities Absolete ?
SQL injection are genuinely one of those vulnerabilities that people keep predicting will die out — and it keeps refusing to. Bug bounty…
30 views
Daily Writeups
⤷ Title: Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 14:24:32 +0530
════════════════════════
⌗ Tags: No_Tags
27 views
Daily Writeups
⤷ Title: GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 09:22:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Harvesting #Financial Sector #GitBait #GitHub Pages #Mexican banks #phishing #SheetBest #Telegram bot
Daily CyberSecurity
GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages
The GitBait phishing campaign abuses GitHub Pages and the SheetBest API to steal banking credentials from at least 12 Mexican financial institutions.
24 views
Daily Writeups
⤷ Title: macOS ClickFix AppleScript Stealer Hijacks Crypto Wallets
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 08:28:10 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript Stealer #ClickFix #CVE_2024_27804 #CVE_2024_27805 #CVE_2024_27806 #macOS
Daily CyberSecurity
macOS ClickFix AppleScript Stealer Hijacks Crypto Wallets
A new macOS ClickFix AppleScript stealer named the Meow macOS stealer acts as a persistent RAT, hijacking wallets and evading detection. Protect your Macs.
17 views
Daily Writeups
⤷ Title: Dropping Elephant Malware: China-Themed Loader Campaign Analyzed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 08:22:04 +0000
════════════════════════
⌗ Tags: #Malware #CVE_2012_0158 #CVE_2014_1761 #CVE_2017_8570 #Dropping Elephant Malware
Daily CyberSecurity
Dropping Elephant Malware: China-Themed Loader Campaign Analyzed
Rapid7 exposes a new Dropping Elephant malware campaign using a China-themed loader to deploy a fileless RAT. Learn about its evasion tactics and defense.
11 views
Daily Writeups
⤷ Title: AryStinger Malware Attacks Routers via CVE-2013-3307
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 07:01:02 +0000
════════════════════════
⌗ Tags: #Malware #AryStinger #CVE_2013_3307 #CVE_2016_5681 #CVE_2025_11837 #Legacy Routers #QiAnXin
Daily CyberSecurity
AryStinger Malware Attacks Routers via CVE-2013-3307
A new AryStinger malware campaign exploits CVE-2013-3307 and CVE-2016-5681 to compromise legacy routers, building a global attack proxy network.
13 views
Daily Writeups
⤷ Title: Cloud DNS Takeover Powers Thai Gambling Campaign
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 06:06:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Security #Cloud DNS Takeover #Cybercrime #SEO Poisoning
Daily CyberSecurity
Cloud DNS Takeover Powers Thai Gambling Campaign
A massive cloud DNS takeover campaign exploits abandoned enterprise domains to serve Thai gambling content. 163 organizations are currently compromised.
13 views
Daily Writeups
⤷ Title: Bug Bounty, 2026: Same Game, New Way to Start
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 09:41:57 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #bug_bounty #bug_bounty_writeup #bug_bounty_tips #infosec
Medium
Bug Bounty, 2026: Same Game, New Way to Start
A research-based look at what hasn’t changed — and exactly where to begin instead
10 views
Daily Writeups
⤷ Title: Finding the Bug Was Easy… Proving the Impact Wasn’t
════════════════════════
𐀪 Author: Abdelrahman Maged
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 09:34:40 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_penetration_testing #bug_bounty #bug_bounty_writeup #cybersecurity
Medium
Finding the Bug Was Easy… Proving the Impact Wasn’t
Chasing Impact: A Disposable Email Bypass That Couldn’t Go Further
12 views
Daily Writeups
⤷ Title: Why Weak Passwords Still Win: Lessons from a Hydra Brute-Force Exercise
════════════════════════
𐀪 Author: Singhreetika
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 08:53:43 GMT
════════════════════════
⌗ Tags: #hacking #ctf #cybersecurity #careers #learning
Medium
Why Weak Passwords Still Win: Lessons from a Hydra Brute-Force Exercise
Cybersecurity is one of those fields where reading about attacks and actually performing them in a controlled environment are two…
5 views