Daily Writeups
@Daily_Writeups
3.47K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.47K subscribers
Daily Writeups
⤷ Title: Exploiting CORS: Trusted Insecure Protocols and Subdomain Trust
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 04:05:25 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybernerddd #cors #portswigger #cybersecurity_training
Medium
Exploiting CORS: Trusted Insecure Protocols and Subdomain Trust
Today I completed another PortSwigger Web Security Academy lab focused on Cross-Origin Resource Sharing (CORS).
36 views
Daily Writeups
⤷ Title: Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 12:08:45 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 11:30:06 +0530
════════════════════════
⌗ Tags: No_Tags
19 views
Daily Writeups
⤷ Title: Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 10:27:52 +0530
════════════════════════
⌗ Tags: No_Tags
18 views
Daily Writeups
⤷ Title: OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 09:48:33 +0530
════════════════════════
⌗ Tags: No_Tags
13 views
Daily Writeups
⤷ Title: Golden Gh0st RAT: Inside the DigiCert Certificate Theft
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 07:33:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Code Signing #CylindricalCanine #DigiCert #Golden Gh0st RAT #GoldenEyeDog #SmartScreen
Information Security News
Golden Gh0st RAT: Inside the DigiCert Certificate Theft
Cybercriminals have found a way to weaponise Windows’ faith in digital signatures. They compromised the workstation of a DigiCert employee and intercepted certificates bound for the company&…
10 views
Daily Writeups
⤷ Title: Firefox Native Containers Arrive in Version 153
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 07:54:15 +0000
════════════════════════
⌗ Tags: #Technology #Browser Privacy #containers #Cross_Site Tracking #firefox #Firefox 153 #mozilla
Daily CyberSecurity
Firefox Native Containers Arrive in Version 153
Mozilla has published Firefox 153.0 as a stable release, and the update finally delivers containers as a native capability. Until now, users had to install a separate add-on to enjoy the same conv…
8 views
Daily Writeups
⤷ Title: Gafgyt Botnet Hijacks Langflow AI Servers for DDoS Attacks
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 07:10:59 +0000
════════════════════════
⌗ Tags: #Malware #Akamai #Bashlite #CVE_2025_3248 #DDoS botnet #Gafgyt #Langflow
Daily CyberSecurity
Gafgyt Botnet Hijacks Langflow AI Servers for DDoS Attacks
At a Glance Malware family Gafgyt / BASHLITE variant (DDoS bot) Threat actor Unattributed; banner references handle “rimasuta” Targets Internet-exposed Langflow AI servers (x86_64 Linu…
7 views
Daily Writeups
⤷ Title: OkoBot Framework Uses 20+ Modules to Steal Cryptocurrency Wallet Seed Phrases
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:10:55 +0000
════════════════════════
⌗ Tags: #Malware #Cryptocurrency Wallet #kaspersky #OkoBot #Rilide #SeedHunter #TookPS
Daily CyberSecurity
OkoBot Framework Uses 20+ Modules to Steal Cryptocurrency Wallet Seed Phrases
At a Glance Malware family OkoBot framework (TookPS lineage; 20+ payloads and implants) Threat actor Unattributed; suspected Russian-speaking operator Targets Hundreds of victims in 25+ countries,…
8 views
Daily Writeups
⤷ Title: Update Email Security Testing Checklist
════════════════════════
𐀪 Author: Varshith Reddy
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:20:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #account_takeover #bug_bounty #authentication #web_security
Medium
Update Email Security Testing Checklist
Authentication Verification
7 views
Daily Writeups
⤷ Title: Logout Security Testing Checklist
════════════════════════
𐀪 Author: Varshith Reddy
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:20:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #session_management #authentication #web_security
Medium
Logout Security Testing Checklist
Session Invalidation
10 views
Daily Writeups
⤷ Title: How Hackers Actually Think (And Why Hollywood Gets It Completely Wrong)
════════════════════════
𐀪 Author: Sumaia Ijaz
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:31:49 GMT
════════════════════════
⌗ Tags: #security #ethical_hacking #cybersecurity #hacking
Medium
How Hackers Actually Think (And Why Hollywood Gets It Completely Wrong)
Picture a hacker.
7 views
Daily Writeups
⤷ Title: An AI Agent Hacked Hugging Face. Here’s Exactly How It Happened — Step by Step
════════════════════════
𐀪 Author: Sugam Arora
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:31:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #hacking #sugam #hugging_face
Medium
An AI Agent Hacked Hugging Face. Here’s Exactly How It Happened — Step by Step
A malicious dataset. Remote code execution. Stolen credentials. Lateral movement. Thousands of autonomous actions. Here’s how the Hugging…
10 views
Daily Writeups
⤷ Title: SQL INJECTION TÜRLERİ
════════════════════════
𐀪 Author: Emineero
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:37:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #sql_injection #infosec #cybersecurity #web_security
13 views
Daily Writeups
⤷ Title: Neighbour CTF Walkthrough (TryHackMe)
════════════════════════
𐀪 Author: Vanessa3
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:10:53 GMT
════════════════════════
⌗ Tags: #ethical_hacking #tryhackme #idor_vulnerability #web_application_security #ctf
Medium
Neighbour CTF Walkthrough (TryHackMe)
Neighbour lab is a beginner-friendly CTF provides a practical introduction to the IDOR (Insecure Direct Object Reference) vulnerability.
35 views
Daily Writeups
⤷ Title: What is ethical hacking?a beginners guide (2026)
════════════════════════
𐀪 Author: Qnaydshackersacadamy
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 07:33:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ai #cybersecurity
Medium
What is ethical hacking?a beginners guide (2026)
New to cybersecurity? Learn what ethical hacking is, how it works, the skills and certifications you need, and how to start your career in…
30 views
Daily Writeups
⤷ Title: CYBER SECURITY IN HAMIRPUR
════════════════════════
𐀪 Author: Tally Trainer
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:27:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking
Medium
CYBER SECURITY IN HAMIRPUR
Start your career in the rapidly growing field of Cyber Security with Excellence Technology Hamirpur. Our industry-oriented training…
28 views
Daily Writeups
⤷ Title: CVE-2026-60206 (CVSS 9.9): Takeover Flaw Hits Oracle WebLogic Server
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 09:58:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60204 #CVE_2026_60205 #CVE_2026_60206 #Oracle CPU July 2026 #Oracle Fusion Middleware #Oracle WebLogic Server #Server Takeover
Daily CyberSecurity
CVE-2026-60206 (CVSS 9.9): Takeover Flaw Hits Oracle WebLogic Server
TL;DR Oracle patched 11 flaws in the WebLogic Server Core component this July. Most allow a full Oracle WebLogic Server takeover. The top issue, CVE-2026-60206, carries a CVSS score of 9.9 and can…
23 views
Daily Writeups
⤷ Title: IRGC Claims Strike on AWS Bahrain Data Center
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 08:08:38 +0000
════════════════════════
⌗ Tags: #Technology #Amazon Web Services #AWS #Bahrain #Cloud Outage #Data Center Security #Iran #IRGC
Daily CyberSecurity
IRGC Claims Strike on AWS Bahrain Data Center
Iran’s Islamic Revolutionary Guard Corps has issued a statement of striking military significance. According to the IRGC, its Aerospace Force fired several cruise missiles at the AWS Bahrain…
15 views
Daily Writeups
⤷ Title: Daxin Malware Resurfaces in Taiwan Alongside New Stupig Backdoor
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 08:00:57 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #cyber_espionage #Daxin #Stupig #Symantec #Taiwan
Daily CyberSecurity
Daxin Malware Resurfaces in Taiwan Alongside New Stupig Backdoor
At a Glance Actor or group Unnamed China-linked espionage group (per Symantec’s 2022 attribution) Activity type Suspected long-term cyber espionage Targets Taiwan-based subsidiary of a multi…
9 views
Daily Writeups
⤷ Title: What is Cross-Site Scripting (XSS)? A Complete Beginner’s Guide
════════════════════════
𐀪 Author: Mahendra Patil
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 09:54:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #xss_attack #bug_bounty #owasp_top_10 #web_security
Medium
What is Cross-Site Scripting (XSS)? A Complete Beginner’s Guide
In this blog, we’ll take a deep dive into Cross-Site Scripting (XSS) from both an attacker’s and a defender’s perspective. We’ll begin by…
11 views