Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: ShadowLink Exposed: How Your Home Router Became a Puppet for Corporate Supply Chain Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:09:12 +0000
════════════════════════
⌗ Tags: #Malware #Asus #CVE_2024_21833 #cybersecurity #GitHub Actions #malware #proxy network #ShadowLink #supply chain attack #TP_Link #Xygeni
Penetration Testing Tools
ShadowLink Exposed: How Your Home Router Became a Puppet for Corporate Supply Chain Attacks
The compromise of a residential router may initially appear as a localized grievance, while the manipulation of code
14 views
Daily Writeups
⤷ Title: GoHPTS (go-http-proxy-to-socks) v1.14.0:
════════════════════════
𐀪 Author: Shadowy Pycoder
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:52:17 GMT
════════════════════════
⌗ Tags: #golang #proxy #hacking
Medium
GoHPTS (go-http-proxy-to-socks) v1.14.0:
In this new update I added HTTP/2, HTTP/3, and pcap capture support to GoHPTS, my open-source Go proxy tool. It already supported…
15 views
Daily Writeups
⤷ Title: Poisoned Code: Stealthy Malicious Go Module Backdoor Discovered in Long-Running Typosquat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 09:01:53 +0000
════════════════════════
⌗ Tags: #Malware #DNS TXT backdoor #Go module #proxy.golang.org #rce #Remote Code Execution #shopspring/decimal #shopsprint/decimal #Socket Security #supply chain attack #typosquat
Daily CyberSecurity
Poisoned Code: Stealthy Malicious Go Module Backdoor Discovered in Long-Running Typosquat
Security researchers have exposed a malicious Go module backdoor hidden inside the shopsprint/decimal package that executes code using stealthy DNS TXT records.
19 views
Daily Writeups
⤷ Title: The Strategic Encroachment of Red Lamassu Across the Eurasian Telecommunications Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:37:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Black Lotus Labs threat intelligence #command and control infrastructure #DLL side loading vulnerability #JFMBackdoor Windows exploit #proxy network routing #PwC Threat Intelligence #Red Lamassu cyber espionage #Showboat Linux malware #state sponsored hacking Asia #telecom supply chain attack
Information Security News
Red Lamassu Cyber Espionage: Malware Targets Telecom Cores
State-backed Red Lamassu cyber espionage operations weaponize Showboat and JFMBackdoor malware to quietly penetrate and control telecom network infrastructure.
8 views
Daily Writeups
⤷ Title: New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 01:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_44492 #CVE_2026_44494 #infosec #Node.js #Prototype Pollution #Proxy Bypass
Daily CyberSecurity
New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
New Axios proxy vulnerabilities expose apps. A critical prototype pollution gadget allows full traffic interception. Secure patches are now available.
12 views
Daily Writeups
⤷ Title: FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 20:12:42 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Malware #Alarum #Cybersecurity #FBI #Google #Israel #NetNut #Popa #Proxy #Residential Proxy
Hackread
FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network
FBI and Google disrupt NetNut after domains linked to its residential proxy network are seized, exposing abuse of 2m TVs and streaming devices worldwide.
17 views
Daily Writeups
⤷ Title: Fools Mate | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 10:59:56 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #proxy #tryhackme #tryhackme_writeup #burpsuite
Medium
Fools Mate | TryHackMe | Walkthrough
This Position mate in A8 one move
9 views
Daily Writeups
⤷ Title: Claude Code Was Caught Secretly Tagging Users — Here’s How to Take Back Control
════════════════════════
𐀪 Author: Aikeyfounder
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 03:49:37 GMT
════════════════════════
⌗ Tags: #claude_code #api_security #proxy_architecture #privacy #developer_tools
Medium
Claude Code Was Caught Secretly Tagging Users — Here’s How to Take Back Control
When a developer decompiled the Claude Code binary, they found something that shouldn’t have been there: three months of hidden identity…
15 views
Daily Writeups
⤷ Title: Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 13:15:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #control_plane traffic #CVE_2026_16242 #hosted control planes #Konnectivity vulnerability #Kubernetes Security #mitm #proxy server
Daily CyberSecurity
Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic
A critical Konnectivity vulnerability lets a remote attacker slip into a cluster without any credentials. Tracked as CVE-2026-16242, it carries a CVSS score of 9.4. The flaw sits in the Konnectivi…
20 views
Daily Writeups
⤷ Title: VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:50:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #active directory #Operation STANDOFF #proxy botnet #Raccoon Stealer #Russian_speaking threat group #Telegram account farm #VMRay
Daily CyberSecurity
VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub
At a glance Actor or group Unnamed Russian-speaking crew tracked as Operation STANDOFF; self-branded “GG Influence” and “ggstandoff” Activity type Pay-per-install malware, …
12 views
Daily Writeups
⤷ Title: H96 Android TV Boxes Used for Ad Fraud and Residential Proxies
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 14:15:10 +0000
════════════════════════
⌗ Tags: #Security #Android #Android TV #Backdoors #BitSight #Cybersecurity #Fuyao #H96 #Malware #Proxy #Residential Proxy
Hackread
H96 Android TV Boxes Used for Ad Fraud and Residential Proxies
Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners' home internet connections.
11 views
Daily Writeups
⤷ Title: Dysphoria Botnet Infects 296,000 IoT Devices, Hides C2 in ENS and SNS Records
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 07:07:04 +0000
════════════════════════
⌗ Tags: #Malware #DDoS #Dysphoria Botnet #Ethereum Name Service #IoT Security #Proxy Botnet #router security #Shadowserver
Information Security News
Dysphoria Botnet Infects 296,000 IoT Devices, Hides C2 in ENS and SNS Records
A home router can appear entirely functional – broadcasting Wi-Fi and sitting quietly on a shelf for years – while silently routing someone else’s attack traffic. Researchers hav…
15 views