Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Windows 11 Agenda View is Back, But Built on WebView 2 with Performance Overhead
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 02:55:55 +0000
════════════════════════
⌗ Tags: #Windows #Agenda View #Microsoft 365 Copilot #Microsoft Teams #Performance Overhead #WebView 2 #Windows 11 #Windows Shell Experience Host
Daily CyberSecurity
Windows 11 Agenda View is Back, But Built on WebView 2 with Performance Overhead
Windows 11's missing Agenda View returns, but its WebView 2 implementation causes high CPU usage. Microsoft accepts the trade-off for easier Copilot/Teams integration.
9 views
Daily Writeups
⤷ Title: Frogblight Android Banking Trojan Targets Turkey via Fake E-Gov Smishing and WebView
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 00:32:19 +0000
════════════════════════
⌗ Tags: #Malware #Android trojan #banking malware #Coper #Frogblight #MaaS #smishing #spyware #Turkey #WebView
Daily CyberSecurity
Frogblight Android Banking Trojan Targets Turkey via Fake E-Gov Smishing and WebView
Frogblight, a new Android banking Trojan, is targeting Turkey via smishing with fake e-government apps. It uses WebView to steal credentials and is linked to the Coper MaaS family. It is being actively developed.
28 views
Daily Writeups
⤷ Title: Google Patches High-Severity “WebView” Flaw in Chrome 143
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 01:44:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #CVE_2026_0628 #Gal Weizman #google chrome #software update #vulnerability management #WebView #zero_day
Daily CyberSecurity
Google Patches High-Severity “WebView” Flaw in Chrome 143
Google has announced an important security update for the Stable channel of its Chrome browser, rolling out patches to Windows, Mac, and Linux users to address a high-severity vulnerability that c…
60 views
Daily Writeups
⤷ Title: Android WebView Exploitation: From Deep Link to Account Takeover
════════════════════════
𐀪 Author: BaymaxPop23
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:28:15 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #application_security #webview #android_security
Medium
Android WebView Exploitation: From Deep Link to Account Takeover
How a malicious deep link can exfiltrate session cookies and compromise user accounts with a single click
24 views
Daily Writeups
⤷ Title: Tek Bir Link ile Uygulamayı Ele Geçirmek: Deep Link ve WebView İstismarı
════════════════════════
𐀪 Author: Mustafa AĞYAR
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:08:45 GMT
════════════════════════
⌗ Tags: #webview #application_security #cybersecurity #mobile_security #deeplink
Medium
Tek Bir Link ile Uygulamayı Ele Geçirmek: Deep Link ve WebView İstismarı
Mobil Dünyanın Arka Kapıları: WebView ve DeepLink Zafiyetleri
6 views
Daily Writeups
⤷ Title: How I Stole a Crypto Key from an Android App: A Deep Dive into WebView JavaScript Bridge Abuse
════════════════════════
𐀪 Author: @4b6o07
════════════════════════
ⴵ Time: Fri, 01 May 2026 10:04:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #mobile_security #webview_vulnerabilities #cybersecurity
Medium
How I Stole a Crypto Key from an Android App: A Deep Dive into WebView JavaScript Bridge Abuse
Lab: Mobile Hacking Lab — Exchange
Package: com.mobilehackinglab.exchange
Platform: Android API 33, arm64 (Pixel 6 AVD)
18 views
Daily Writeups
⤷ Title: Disrupted: How the “Trapdoor” Ad Fraud Ring Weaponized 455 Android Apps for 659 Million Daily Fake Bids
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 08:01:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Ad Fraud Pipeline #Android Malvertising #Anti_Analysis Evasion #C2 Domains #Cyber Security #HUMAN Satori #infosec #mobile security #Touch Event Simulation #Trapdoor Malware #WebView Exploit
Daily CyberSecurity
Disrupted: How the "Trapdoor" Ad Fraud Ring Weaponized 455 Android Apps for 659 Million Daily Fake Bids
HUMAN's Satori team disrupted Trapdoor, an Android ad fraud ring using 455 apps and hidden WebViews to fake 659 million daily ad bids.
22 views
Daily Writeups
⤷ Title: 1-Click Account Takeover via Misconfigured WebView
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview
Medium
One Click Account Takeover via Misconfigured WebView
TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…
9 views
Daily Writeups
⤷ Title: One Click Account Takeover via Misconfigured WebView
════════════════════════
𐀪 Author: abdelnasser
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:35:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #android_pentesting #android_security #pentesting #webview
Medium
One Click Account Takeover via Misconfigured WebView
TL;DR: A retail Android app had a WebView exposed via deep link. JS was enabled, the url parameter accepted any scheme including…
12 views
Daily Writeups
⤷ Title: From a “Hey, {name} ” Banner to Full Account Takeover | Chaining 4 Bugs Through a Rewards WebView
════════════════════════
𐀪 Author: Fares Walid (SirBugs)
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 01:34:22 GMT
════════════════════════
⌗ Tags: #account_takeover #bug_bounty #android #webview
Medium
From a “Hey, {name} 👋” Banner to Full Account Takeover | Chaining 4 Bugs Through a Rewards WebView
Hey folks 😀 Hope you are doing great today! ❤
18 views
Daily Writeups
⤷ Title: Flutter WebView and Deep Link Security: The Doors You Left Open
════════════════════════
𐀪 Author: Abdulrahman Mohamed
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 04:42:00 GMT
════════════════════════
⌗ Tags: #webview #application_security #flutter #android #security
Medium
Flutter WebView and Deep Link Security: The Doors You Left Open
Flutter Under the Hood, Part 7 of 9: WebView bridges, deep links and exported components. The attack surface that has nothing to do with…
11 views