Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 09:42:12 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Bluekit #Cyber Attack #Cyber Crime #Cybersecurity #Fraud #Netcraft #Phishing #Phishing Kit #Scam
Hackread
Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection
Bluekit phishing kit is active at scale, using browser-in-the-middle attacks, bot checks, and fake CAPTCHAs to steal logins while dodging security scans.
18 views
Daily Writeups
⤷ Title: Cloud Gatekeeper Designation: AWS and Azure Face Strict DMA Regulation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 09:44:13 +0000
════════════════════════
⌗ Tags: #Technology #AWS #Azure #Digital Markets Act #European Commission #gatekeeper
Daily CyberSecurity
Cloud Gatekeeper Designation: AWS and Azure Face Strict DMA Regulation
The European Commission has rendered a preliminary determination, designating Amazon Web Services (AWS) and Microsoft Azure as “gatekeepers” under the auspices of the Digital Markets A…
10 views
Daily Writeups
⤷ Title: Public PoC and Exploit Details Released for IPV6_FRAG_ESCAPE on RHEL 10
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 09:28:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CentOS Stream 10 #IPv6 container escape #IPV6_FRAG_ESCAPE #Linux kernel exploit #Massimiliano Oldani #privilege escalation #RHEL 10 #skb_shared_info overflow
Daily CyberSecurity
Public PoC and Exploit Details Released for IPV6_FRAG_ESCAPE on RHEL 10
Security researcher Massimiliano Oldani has published IPV6_FRAG_ESCAPE, a working proof-of-concept for an IPv6 container escape on CentOS and RHEL 10. The exploit details and PoC code are now publ…
7 views
Daily Writeups
⤷ Title: SharkLoader Malware Deploys Cobalt Strike in Global StrikeShark Campaign
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 09:00:36 +0000
════════════════════════
⌗ Tags: #Malware #Cobalt Strike #Cyberespionage #DLL Sideloading #GReAT #kaspersky #malware loader #ProxyLogon #SharkLoader #StrikeShark
Daily CyberSecurity
SharkLoader Malware Deploys Cobalt Strike in Global StrikeShark Campaign
At a glance Field Detail Malware family SharkLoader (loader) delivering Cobalt Strike Beacon Threat actor StrikeShark; unattributed, suspected Chinese-speaking (low confidence) Targets Government,…
7 views
Daily Writeups
⤷ Title: NTLM Reflection Bypass CVE-2026-24294 Gets Public PoC Exploit
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 08:55:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #NTLM Reflection #privilege escalation #smb #Synacktiv #Windows Server 2025
Daily CyberSecurity
NTLM Reflection Bypass CVE-2026-24294 Gets Public PoC Exploit
TL;DR Synacktiv publicly disclosed a new NTLM reflection bypass tracked as CVE-2026-24294. The flaw gives a local user SYSTEM privileges on Windows Server 2025. Proof-of-concept exploit code is al…
11 views
Daily Writeups
⤷ Title: macOS Gaslight Malware Uses LLM Prompt Injection
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 08:02:27 +0000
════════════════════════
⌗ Tags: #Malware #Gaslight malware #macOS #macOS Gaslight malware #Telegram
Daily CyberSecurity
macOS Gaslight Malware Uses LLM Prompt Injection
At a glance Malware Family: macOS.Gaslight Threat Actor: High confidence DPRK-aligned (North Korea) Target or Victims: macOS users Delivery Vector: Unknown initial vector (discovered in the wild) …
6 views
Daily Writeups
⤷ Title: Reconnaissance for exposure management: why context matters in the AI era
════════════════════════
𐀪 Author: Radu Voloaga
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Business Insights
Intigriti
Reconnaissance for exposure management. Why context matters in the AI era
Regardless of how advanced AI becomes, offensive security still depends on context. And reconnaissance is where that context begins.
10 views
Daily Writeups
⤷ Title: Why Choosing the Right Cyber Security Company in Hyderabad Matters for Your Business
════════════════════════
𐀪 Author: Cyberhunt
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 08:49:54 GMT
════════════════════════
⌗ Tags: #vapt_services #cybersecurity_service #owasp_top_10 #application_security #information_security
Medium
Why Choosing the Right Cyber Security Company in Hyderabad Matters for Your Business
In today’s digital world, cyber threats are becoming more sophisticated, affecting businesses of all sizes. From ransomware attacks to data…
10 views
Daily Writeups
⤷ Title: AI Didn’t Change Hacking. It Changed Who Gets to Be a Hacker. — By Ralph Echemendia
════════════════════════
𐀪 Author: Ralph Echemendia
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 09:52:57 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #leadership #hacking #cybersecurity #information_security
Medium
AI Didn’t Change Hacking. It Changed Who Gets to Be a Hacker. — By Ralph Echemendia
People keep asking me if AI changed everything about cybersecurity. My honest answer: it changed one thing, and that one thing matters more…
6 views
Daily Writeups
⤷ Title: Zphisher
════════════════════════
𐀪 Author: Sivagannisetti
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 09:52:33 GMT
════════════════════════
⌗ Tags: #zphisher #phishing #hacking #phishing_attacks #ethical_hacking
Medium
Zphisher
How to use Zphisher tool in kali linux
6 views
Daily Writeups
⤷ Title: XMas CTFZone Write-Up || From a Simple Name Field to Full SSTI Exploit.
════════════════════════
𐀪 Author: Ishengoma
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 09:01:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability #ctfzone #ctf_writeup #hacking
Medium
XMas CTFZone Write-Up || From a Simple Name Field to Full SSTI Exploit.
Category: Web Exploitation | Challenge: labs.ctfzone.com:<port> |Description: This web application is vulnerable, a hacker was able to gain…
11 views
Daily Writeups
⤷ Title: PwnLab: init | VulnHubWalkthrough | By Aasrith
════════════════════════
𐀪 Author: Aasrith Kasala
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 08:43:58 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #vulnhub #penetration_testing #ethical_hacking
Medium
PwnLab: init | VulnHubWalkthrough | By Aasrith
At first, I have discovered the IP address of the target machine using netdiscover.
10 views
Daily Writeups
⤷ Title: I Built a Free AI Toolkit for Students Because I Got Tired of Paying for 7 Different Apps
════════════════════════
𐀪 Author: Trendyinfo
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 08:24:53 GMT
════════════════════════
⌗ Tags: #generative_ai_tools #hacking #freelancing #college #ai
Medium
I Built a Free AI Toolkit for Students Because I Got Tired of Paying for 7 Different Apps
Here’s a problem every student knows too well: you need to paraphrase an essay, so you open one tool. Then you need to check your word…
15 views
Daily Writeups
⤷ Title: How to use AI in your daily flow as a security engineer
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 08:23:02 GMT
════════════════════════
⌗ Tags: #automation #infosec #cybersecurity #security #ai
Medium
How to use AI in your daily flow as a security engineer
Everyone wants to talk about AI in cybersecurity like it’s a strategy. It’s not a strategy. It’s a workflow decision, made about fifteen…
11 views
Daily Writeups
⤷ Title: Understanding Active Directory
════════════════════════
𐀪 Author: Uddhav Sethi
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 09:42:05 GMT
════════════════════════
⌗ Tags: #active_directory #windows #ctf #penetration_testing #cybersecurity
Medium
Understanding Active Directory
Active Directory Basics Explained for Beginners
11 views
Daily Writeups
⤷ Title: Wifiscope: Passive Wireless Device Discovery and Visualization Without Connecting to WiFi
════════════════════════
𐀪 Author: sqludp
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 08:21:44 GMT
════════════════════════
⌗ Tags: #penetration_testing #information_security #security #wifi
Medium
Wifiscope: Passive Wireless Device Discovery and Visualization Without Connecting to WiFi
Introduction
13 views
Daily Writeups
⤷ Title: NTFS Analysis: A Hands-On DFIR Walkthrough
════════════════════════
𐀪 Author: DeadHack
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 09:47:58 GMT
════════════════════════
⌗ Tags: #digital_forensics #dfir #cybersecurity #ntfs #tryhackme
Medium
NTFS Analysis: A Hands-On DFIR Walkthrough
Exploring the NTFS File System, MFT Records, Journaling, and Index Attributes — TryHackMe
17 views
Daily Writeups
⤷ Title: Public PoC Released for Critical libssh2 Flaw That Could Enable Remote Code Execution on SSH…
════════════════════════
𐀪 Author: security-news.net | pentest.day
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 08:56:42 GMT
════════════════════════
⌗ Tags: #vulnerability #ssh #0day #cybersecurity #rce
Medium
Public PoC Released for Critical libssh2 Flaw That Could Enable Remote Code Execution on SSH…
A public proof-of-concept (PoC) exploit has been released for CVE-2026–55200, a critical vulnerability in the widely used libssh2 library…
25 views
Daily Writeups
⤷ Title: Why Post-Quantum Cryptography Starts With Credentials
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 17:12:16 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 17:10:24 +0530
════════════════════════
⌗ Tags: No_Tags
27 views
Daily Writeups
⤷ Title: The 2.5 MB Response That Should Never Have Been Public
════════════════════════
𐀪 Author: Gokul
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 11:56:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #vulnerability #cybersecurity
Medium
The 2.5 MB Response That Should Never Have Been Public
While assessing the external attack surface of a large enterprise communication platform, I came across what initially appeared to be a…
17 views