Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: Remcos RAT Delivered by a Steganographic Loader in Phishing Emails
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:12:01 +0000
════════════════════════
⌗ Tags: #Malware #Fileless Malware #India #K7 Security Labs #Loader_as_a_Service #phishing #Process Hollowing #Remcos RAT #steganographic loader
Daily CyberSecurity
Remcos RAT Delivered by a Steganographic Loader in Phishing Emails
A steganographic loader hides Remcos RAT inside a bitmap and runs it in memory. K7 ties the fileless campaign to India via fake GST lures.
12 views
Daily Writeups
⤷ Title: The Bouncer Who Never Read the Envelope
════════════════════════
𐀪 Author: anshh.bohara
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 07:37:50 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity
Medium
The Bouncer Who Never Read the Envelope
A meticulous HTML sanitizer checked every tag, every attribute, and the shape of the XHTML — then waved a link through without once asking…
17 views
Daily Writeups
⤷ Title: The Honest Truth About Placement After an Ethical Hacking Course in Delhi: What Nobody Tells You…
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:55:24 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #hacking
Medium
The Honest Truth About Placement After an Ethical Hacking Course in Delhi: What Nobody Tells You Before You Enroll
Every institute that offers an ethical hacking course in Delhi will tell you about placement support. The brochures mention company logos…
10 views
Daily Writeups
⤷ Title: Unpacking Qakbot Part 2: Reconstructing the PE Structure and Fixing Broken Memory Alignments
════════════════════════
𐀪 Author: Ayush Malwarex
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:39:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #tutorial #malware_analysis #reverse_engineering #infosec
Medium
Unpacking Qakbot Part 2: Reconstructing the PE Structure and Fixing Broken Memory Alignments
In my previous post, we successfully tracked a live variant of Qakbot down to its native NT API execution layer…
7 views
Daily Writeups
⤷ Title: The Confidential Secret With the Discretion of a Billboard
════════════════════════
𐀪 Author: anshh.bohara
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 07:36:36 GMT
════════════════════════
⌗ Tags: #penetration_testing #security #bug_hunting
Medium
The Confidential Secret With the Discretion of a Billboard
A bank-grade SaaS shipped its OAuth client secret to every browser that loaded the page — and named it like a sticky note on a monitor. A…
7 views
Daily Writeups
⤷ Title: Phishing Analysis Fundamentals — TryHackMe Write-Up
════════════════════════
𐀪 Author: Darshan
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:57:01 GMT
════════════════════════
⌗ Tags: #tryhackme #soc #cybersecurity
Medium
Phishing Analysis Fundamentals — TryHackMe Write-Up
Task 1 — Introduction
6 views
Daily Writeups
⤷ Title: SOC Workbooks and Lookups — TryHackMe Write-Up
════════════════════════
𐀪 Author: Darshan
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:56:04 GMT
════════════════════════
⌗ Tags: #soc #tryhackme #cybersecurity
Medium
SOC Workbooks and Lookups — TryHackMe Write-Up
Task 1 — Introduction
7 views
Daily Writeups
⤷ Title: Best 6 Months Master Diploma in DevOps Engineering Course in India
════════════════════════
𐀪 Author: cybersecuritycourse
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 07:46:21 GMT
════════════════════════
⌗ Tags: #ethical_hacking #education #cybersecurity #linux #devops
Medium
Best 6 Months Master Diploma in DevOps Engineering Course in India
The IT industry is rapidly embracing automation, cloud computing, and continuous software delivery, making DevOps one of the most in-demand…
8 views
Daily Writeups
⤷ Title: Public vs Private Blockchains: The Difference
════════════════════════
𐀪 Author: Chetan Dugar
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:31:28 GMT
════════════════════════
⌗ Tags: #blockchain_technology #stable_coin #blockchain #ethereum #ethical_hacking
Medium
Public vs Private Blockchains: The Difference
Most people think private blockchains are the serious, grown-up version. Often theyre a database with extra steps. Heres the real…
12 views
Daily Writeups
⤷ Title: WAF vs API Gateway
════════════════════════
𐀪 Author: Silversky Technology
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:20:56 GMT
════════════════════════
⌗ Tags: #information_security #api_security #firewall #backend_development
Medium
WAF vs API Gateway
Which One Actually Protects Your Backend — And When You Need Both
13 views
Daily Writeups
⤷ Title: OWASP API Security Top 10 (2023)
════════════════════════
𐀪 Author: Mitty
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:07:35 GMT
════════════════════════
⌗ Tags: #owasp_api_security #api_security #api_security_testing #owasp_api_security_top_10 #owasp
Medium
OWASP API Security Top 10 (2023)
API1: Broken Object Level Authorization (BOLA)
30 views
Daily Writeups
⤷ Title: Dynamic SQL in Oracle PL/SQL: Why It Exists and When You Should Use It
════════════════════════
𐀪 Author: Md Rijwan
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:34:38 GMT
════════════════════════
⌗ Tags: #plsql #dynamic_sql #sql_injection
Medium
Dynamic SQL in Oracle PL/SQL: Why It Exists and When You Should Use It
Static SQL is predictable. Dynamic SQL is adaptable. A skilled Oracle developer knows when to use each.
23 views
Daily Writeups
⤷ Title: PortSwigger Lab WalkThrough: SQL Injection Vulnerability allowing Login Bypass
════════════════════════
𐀪 Author: Chetan Patil
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:25:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #authentication_bypass #web_security #sql_injection
Medium
PortSwigger Lab WalkThrough: SQL Injection Vulnerability allowing Login Bypass
How a single OR 1=1-- payload logs you in as administrator, no password needed.
29 views
Daily Writeups
⤷ Title: Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 14:19:35 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 12:45:46 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: A decade of infrastructure development, one new name: Coinspaid Dev
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 09:41:03 +0000
════════════════════════
⌗ Tags: #Blockchain #Crypto #Press Release #CoinsPaid #Technology
Hackread
A decade of infrastructure development, one new name: Coinspaid Dev
The team behind Coinspaid Solutions steps into the spotlight with a mission to become the engineering voice of blockchain infrastructure.
18 views
Daily Writeups
⤷ Title: WhatsApp Malware Campaign Spreads RMM Software
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 09:00:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #kaspersky #VBScript #WhatsApp Malware
Daily CyberSecurity
WhatsApp Malware Campaign Spreads RMM Software
A new WhatsApp malware campaign uses a multi-stage VBScript infection chain to silently install RMM software on victim devices across multiple countries.
11 views
Daily Writeups
⤷ Title: Fake Shop Campaigns Target Europe
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 08:20:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Counterfeit Goods #cybersecurity #Europe #Fake Shop Campaigns #Scams
Daily CyberSecurity
Fake Shop Campaigns Target Europe
Researchers uncovered massive fake shop campaigns targeting Europe. Attackers sell counterfeit goods by impersonating major brands and exploiting World Cup.
11 views
Daily Writeups
⤷ Title: FOSSBilling Template Injection Flaw Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 08:11:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_28496 #FOSSBilling #Remote Code Execution #ssti #Template Injection
Daily CyberSecurity
FOSSBilling Template Injection Flaw Exploited in the Wild
A FOSSBilling template injection flaw (CVE-2026-28496, CVSS 9.4) is exploited in the wild. Patch to 0.8.0 now to stop server-side template injection.
11 views
Daily Writeups
⤷ Title: How I Locked a User Out of Their Own Account — My First Bug Bounty Finding
════════════════════════
𐀪 Author: SHADOW
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 08:29:02 GMT
════════════════════════
⌗ Tags: #web_security #hacking #bug_bounty_writeup #pentesting #cybersecurity
Medium
How I Locked a User Out of Their Own Account — My First Bug Bounty Finding
So this is my first ever bug bounty writeup. And honestly, I didn’t expect my first real finding to be this interesting. It’s not an XSS…
11 views
Daily Writeups
⤷ Title: Payday Offsec Proving Ground Practice Lab
════════════════════════
𐀪 Author: Cyb0rgBytes
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 07:58:41 GMT
════════════════════════
⌗ Tags: #ctf_walkthrough #cybersecurity #hacking #ethical_hacking #penetration_testing
Medium
Payday Offsec Proving Ground Practice Lab
Whenever we are in a pentest, there is things we have to take into consideration while infiltrating a machine or exploiting it’s services…
11 views