Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Anonymity Stripped: Unsecured Kibana and Dozzle Dashboards Leak 22 Million FTF Live Video Chat Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:05 +0000
════════════════════════
⌗ Tags: #Data Leak #Burhan LTD #Cooy Ads Ltd #Data Leak Cybernews #De_anonymization Risk #Dozzle Docker Logs #FTF Live Video Chat #Real_time Token Leak #Regional CERT Escalation #Session Metadata Exposure #Unsecured Kibana Dashboard
Penetration Testing Tools
Anonymity Stripped: Unsecured Kibana and Dozzle Dashboards Leak 22 Million FTF Live Video Chat Records
The FTF Live video-chat ecosystem, which explicitly guaranteed its consumer base absolute anonymity during randomized social interactions, has
28 views
Daily Writeups
⤷ Title: Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:35 +0000
════════════════════════
⌗ Tags: #Malware #Chromium Browsers #Clipboard Hijacker #Control Flow Flattening #Cyber Security #Discord Token Stealer #Gremlin Stealer #infosec #Infostealer #MFA Bypass #Session Hijacking #Unit 42
Daily CyberSecurity
Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
Unit 42 exposes the new Gremlin stealer. It uses memory-resident techniques to hijack active browser session tokens and completely bypass MFA.
17 views
Daily Writeups
⤷ Title: Splunk Patches High-Severity Bugs Granting DoS and Internal Log Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:20:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #CVE_2026_20238 #CVE_2026_20239 #CVE_2026_20240 #Cyber Security #Denial of Service #infosec #Log Leak #Session Cookie Exposure #Splunk AI Toolkit #Splunk Enterprise
Daily CyberSecurity
Splunk Patches High-Severity Bugs Granting DoS and Internal Log Leaks
Splunk releases coordinated patches for CVE-2026-20240 and adjacent flaws exposing raw session cookies, data filters, and triggering server DoS.
18 views
Daily Writeups
⤷ Title: A Simple Session Management Bug Every Beginner Bug Hunter Should Test.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Sat, 23 May 2026 08:18:09 GMT
════════════════════════
⌗ Tags: #simple_bugs #bug_bounty #session_management #p4_bugs
Medium
A Simple Session Management Bug Every Beginner Bug Hunter Should Test.
When beginners start bug bounty hunting, most of them spend hours testing XSS payloads, SQL injection, IDORs, and other well-known…
22 views
Daily Writeups
⤷ Title: VaultJacking: Exploiting Google Sync Infrastructure via Intercepted PINs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:41:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cross_site authentication data theft #Google Workspace proxy environment hijacking #iCloud Keychain vs Google security architecture #multi_platform synchronized repository dump #PhishU Adversary_in_the_Middle framework #session cookie token theft mitigations #synchronization PIN credential exfiltration #unauthorized trusted device registry #VaultJacking Google password phishing #WebAuthn hardware perimeter bypass
Information Security News
VaultJacking: Exploiting Google Sync Infrastructure via Intercepted PINs
The Genesis of the VaultJacking Attack Vector A solitary numeric PIN can transform Google’s password repository into an unsecured gateway. Consequently, the emerging VaultJacking phishing methodol…
12 views
Daily Writeups
⤷ Title: Cryptographic Paradigm Shift: Google Officially Launches Device Bound Session Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:26:03 +0000
════════════════════════
⌗ Tags: #Google #browser session hijacking defense #cookie refresh token rotation #Device Bound Session Credentials #Google Chrome DBSC protocol #hardware bound authentication security #infostealer malware protection #macOS Secure Enclave key pairs #session cookie theft mitigation #W3C web security standards #Windows TPM cryptographic binding
Information Security News
Device Bound Session Credentials: Google Neutralizes Cookie Theft
Google debuts Device Bound Session Credentials (DBSC). Learn how this hardware-anchored TPM protocol stops session hijacking and cookie theft.
38 views
Daily Writeups
⤷ Title: Weaponizing Management Consoles: The FortiClient EMS Exploitation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:25:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arctic Wolf Labs report #CVE_2026_35616 vulnerability #EKZ Infostealer analysis #endpoint security bypass #FortiClient EMS exploit #session cookie hijacking
Information Security News
FortiClient EMS Exploit: EKZ Infostealer Malware Guide
Analyze the recent FortiClient EMS exploit. Learn how attackers leverage CVE-2026-35616 to deliver EKZ Infostealer and bypass endpoint protection.
14 views
Daily Writeups
⤷ Title: phpBB Authentication Bypass Fixed in Version 3.3.17
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:35:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Aikido Security #authentication bypass #Forum Security #phpBB #Session Hijacking #Web Vulnerability
Information Security News
phpBB Authentication Bypass Fixed in Version 3.3.17
A critical phpBB authentication bypass in 3.3.16 and earlier lets attackers hijack any user session with a single HTTP request. Update now.
11 views
Daily Writeups
⤷ Title: Payroll Pirate Hijacks Sessions to Steal Paychecks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 07:25:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM Phishing #Business Email Compromise #MFA Bypass #Payroll Fraud #Payroll Pirate #Session Hijacking
Information Security News
Payroll Pirate Hijacks Sessions to Steal Paychecks
BushidoToken details Payroll Pirate, an AiTM phishing campaign that hijacks authenticated sessions to redirect payroll payments to attackers.
12 views
Daily Writeups
⤷ Title: $900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:31:01 GMT
════════════════════════
⌗ Tags: #information_security #session_flaw #bug_bounty #programming #cybersecurity
Medium
$900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
Hi Everyone! Recently, while testing a SaaS platform (let’s call it ExampleCenter), I came across a very interesting access control issue…
16 views
Daily Writeups
⤷ Title: Session Fixation
════════════════════════
𐀪 Author: Ahemd ashraf
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 21:06:39 GMT
════════════════════════
⌗ Tags: #session_fixation #bugbounty_writeup #bug_bounty_tips
Medium
Session Fixation
Title
22 views
Daily Writeups
⤷ Title: pretix Patches Two Critical Session Takeover and SSRF Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 13:14:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Key Leak #CVE_2026_13602 #CVE_2026_13603 #Payment Plugins #pretix #Session Takeover #ssrf
Daily CyberSecurity
pretix Patches Two Critical Session Takeover and SSRF Flaws
The pretix team shipped version 2026.5.3 to fix two critical flaws. The update also covers 2026.4.5 and 2026.3.5.post1, plus several payment plugins. Both bugs rate critical, so admins should patc…
15 views
Daily Writeups
⤷ Title: The Wristband Problem
════════════════════════
𐀪 Author: Sentinel Layer
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 03:01:02 GMT
════════════════════════
⌗ Tags: #web_security #authentication #application_security #cybersecurity #session_hijacking
Medium
The Wristband Problem
The Wristband Problem! A few years ago I stayed at an all-inclusive resort for a friend’s wedding. At check-in, they scanned my ID, took a photo, and clipped a paper wristband around my wrist …
11 views
Daily Writeups
⤷ Title: Session Management | TryHackMe WalkThrough
════════════════════════
𐀪 Author: Cyrus Isaac
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:57:38 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #session_management #tryhackme_writeup
Medium
Session Management | TryHackMe WalkThrough
Task1: Introduction
23 views
Daily Writeups
⤷ Title: Logout Security Testing Checklist
════════════════════════
𐀪 Author: Varshith Reddy
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:20:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #session_management #authentication #web_security
Medium
Logout Security Testing Checklist
Session Invalidation
13 views
Daily Writeups
⤷ Title: Kena Session Cookie Stealer: Reset PC Saja Ternyata Gak Cukup! Ini Langkah Pengamanan yang Benar
════════════════════════
𐀪 Author: rizko
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 00:01:02 GMT
════════════════════════
⌗ Tags: #session_hijacking #cookies_stealer #cookies #hacking
Medium
Kena Session Cookie Stealer: Reset PC Saja Ternyata Gak Cukup! Ini Langkah Pengamanan yang Benar
Pernah gak bayangin: PC kamu tiba-tiba kena malware infostealer seperti akun discord mengirim giveaway scam ke semua server atau teman…
15 views
Daily Writeups
⤷ Title: Session Management: Understanding and Exploiting Insecure Sessions THM
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 06:37:18 GMT
════════════════════════
⌗ Tags: #security #session_management #tryhackme_writeup #penetration_testing #web_application_security
Medium
Session Management: Understanding and Exploiting Insecure Sessions THM
Learn about session management, cookies, tokens, and common attacks against insecure session implementations, including session…
14 views