Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Tor Browser and the Dark Web: A Beginner’s Guide to Anonymity and Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:55:52 +0000
════════════════════════
⌗ Tags: #How To #.onion #Anonymity #dark web #Deep Web #Internet #Onion Routing #Online Safety #online security #privacy #security #tor browser #vpn
Daily CyberSecurity
Tor Browser and the Dark Web: A Beginner's Guide to Anonymity and Security
Learn about Tor Browser, the Dark Web, and how to navigate it safely. This guide covers installation, configuration, security precautions, and the potential risks of exploring the dark web.
24 views
Daily Writeups
⤷ Title: CVE-2025-27840: How a Tiny ESP32 Chip Could Crack Open Bitcoin Wallets Worldwide
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:46:49 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bitcoin #cryptocurrency #cryptography #CVE_2025_27840 #cybersecurity #Electrum #ESP32 #Hacking #hardware #IoT security #private key #wallet
Daily CyberSecurity
CVE-2025-27840: How a Tiny ESP32 Chip Could Crack Open Bitcoin Wallets Worldwide
A critical vulnerability (CVE-2025-27840) in ESP32 microcontrollers threatens billions of IoT devices and the security of Bitcoin wallets. Exploits range from private key theft to forged transactions.
21 views
Daily Writeups
⤷ Title: Nationwide Smishing Scam Targets Toll Road Users, Stealing Payment Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:40:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #Cybercrime #cybersecurity #Data Theft #E_ZPass #phishing #smishing #Toll Road Scam #Wang Duo Yu
Daily CyberSecurity
Nationwide Smishing Scam Targets Toll Road Users, Stealing Payment Data
A widespread smishing campaign targeting toll road users across multiple U.S. states is stealing payment credentials. Learn how scammers are impersonating E-ZPass and other toll systems to trick victims
19 views
Daily Writeups
⤷ Title: npm Malware Targets Atomic and Exodus Wallets to Steal Crypto Funds
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:30:50 +0000
════════════════════════
⌗ Tags: #Malware #Atomic Wallet #crypto wallets #Exodus Wallet #JavaScript threats #npm malware #pdf_to_office #ReversingLabs #supply chain attack #Web3 security
Daily CyberSecurity
npm Malware Targets Atomic and Exodus Wallets to Steal Crypto Funds
A fake npm package named pdf-to-office has been discovered injecting malicious code into Atomic and Exodus crypto wallets, redirecting funds and stealing data
20 views
Daily Writeups
⤷ Title: TROX Stealer: Urgency-Themed MaaS Malware Targets Consumer Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:28:56 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Threats #Infostealer #MaaS #Nuitka #phishing #Sublime Research #Telegram exfiltration #TROX Stealer #WebAssembly malware
Daily CyberSecurity
TROX Stealer: Urgency-Themed MaaS Malware Targets Consumer Data
TROX Stealer exploits urgency via phishing emails to deliver obfuscated MaaS malware that steals credit cards, browser data, and crypto wallets
20 views
Daily Writeups
⤷ Title: Smishing Triad: eCrime Group Targets 121+ Countries with Advanced Smishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:18:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #eCrime #financial fraud #Fraud #identity theft #Lighthouse kit #Phishing Kit #smishing #Smishing Triad #SMS phishing #Wang Duo Yu
Daily CyberSecurity
Smishing Triad: eCrime Group Targets 121+ Countries with Advanced Smishing
Silent Push reveals Smishing Triad's widespread SMS phishing campaigns targeting 121+ countries. The group uses sophisticated kits to steal credentials and financial data.
16 views
Daily Writeups
⤷ Title: Malicious NPM Packages Target PayPal Users to Steal Sensitive Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:16:26 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Data Theft #dependency confusion #FortiGuard Labs #Information stealing #javascript #Malicious packages #npm #NPM packages #Package manager #paypal #Software security #supply chain attack
Daily CyberSecurity
Malicious NPM Packages Target PayPal Users to Steal Sensitive Data
FortiGuard Labs discovers malicious NPM packages targeting PayPal users. Attackers use deceptive tactics to steal usernames, paths, and hostnames
23 views
Daily Writeups
⤷ Title: Urgent: Yii 2 Vulnerability CVE-2024-58136 Under Active Exploit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:10:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_4990 #CVE_2024_58136 #Exploit #patch #php #Remote Code Execution #security #web framework #Yii 2
Daily CyberSecurity
Urgent: Yii 2 Vulnerability CVE-2024-58136 Under Active Exploit
CVE-2024-58136: A security vulnerability in the Yii 2 PHP framework is being actively exploited. Learn about the risk and necessary updates.
22 views
Daily Writeups
⤷ Title: $10,000 worth GitHub Access Tokens | Secret Search Operators
════════════════════════
𐀪 Author: It4chis3c
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 05:09:51 GMT
════════════════════════
⌗ Tags: #hidden #github #bug_bounty #secrets #access_token
Medium
$10,000 worth GitHub Access Tokens | Secret Search Operators
Secret but basic GitHub dorks & search operators that can lead to $10k bounty worth Acess Tokens.
22 views
Daily Writeups
⤷ Title: The Hidden XSS: A Bug Hidden in the Mist
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 15:10:05 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #ethical_hacking #hacker
Medium
The Hidden XSS: A Bug Hidden in the Mist
From Subdomain Chaos to an Unexpected XSS A beginner’s bug bounty journey that led to a hidden Self-XSS on Paytm, with the help of some…
17 views
Daily Writeups
⤷ Title: One Random Recon, One Real Bounty: The Paytm Story
════════════════════════
𐀪 Author: SIDDHANT SHUKLA
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 15:08:57 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #programming #hacking #vulnerability
Medium
One Random Recon, One Real Bounty: The Paytm Story
From countless dead ends to a single Swagger UI payload — the unexpected breakthrough that changed my bug hunting journey forever.
24 views
Daily Writeups
⤷ Title: How Burp Suite AI Makes Vulnerability Testing Easy and Fast
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:59:32 GMT
════════════════════════
⌗ Tags: #technology #bug_bounty #ai #burpsuite #penetration_testing
Medium
How Burp Suite AI Makes Vulnerability Testing Easy and Fast
beginner-friendly guide to Burp Suite’s AI features
16 views
Daily Writeups
⤷ Title: How I Found a Bug in a Government Website (And Got Recognized for It) ️)
════════════════════════
𐀪 Author: Abhijeet Kumawat
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:56:22 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #infosec #secrets
Medium
How I Found a Bug in a Government Website (And Got Recognized for It) 🇮🇳🛡️)
Free Article Link
11 views
Daily Writeups
⤷ Title: A Hacker’s Instinct: The Power You Unlock When You Stop Looking and Start Seeing
════════════════════════
𐀪 Author: Akash Ghosh
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:43:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #infosec #technology #bug_bounty
Medium
A Hacker’s Instinct: The Power You Unlock When You Stop Looking and Start Seeing
Part 3 of my recon evolution series — now with more brains, bugs, and breakthroughs.
14 views
Daily Writeups
⤷ Title: How My Name Crashed a Welcome Party: SSI to RCE Surprise! with $$$$
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:31:01 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #bug_bounty #money #cybersecurity
Medium
How My Name Crashed a Welcome Party: SSI to RCE Surprise! with $$$$🎉
Free Link🎈
17 views
Daily Writeups
⤷ Title: ️‍♂️ Bug Bounty Secrets They Don’t Tell You: Tricks From 100+ Reported Bugs
════════════════════════
𐀪 Author: Abhijeet Kumawat
════════════════════════
ⴵ Time: Sun, 13 Apr 2025 14:24:06 GMT
════════════════════════
⌗ Tags: #bug_bounty #ai #hacking #cybersecurity #secrets
Medium
🕵️‍♂️ Bug Bounty Secrets They Don’t Tell You: Tricks From 100+ Reported Bugs
“The real game isn’t always in what you learn — it’s in what others forget to mention.” 😎
15 views
Daily Writeups
⤷ Title: Bug Bounty Recon Starter Pack: Tools, Coffee, Existential Crisis
════════════════════════
𐀪 Author: Akash Ghosh
════════════════════════
ⴵ Time: Sat, 12 Apr 2025 11:18:33 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #bug_bounty #bug_bounty_tips
Medium
Bug Bounty Recon Starter Pack: Tools, Coffee, Existential Crisis
Part 2 of my hacker brain series — because recon ain’t one-size-fits-all.
14 views
Daily Writeups
⤷ Title: 5 Web Vulnerabilities That Paid Me the Most (And How to Find Them!)
════════════════════════
𐀪 Author: Abhijeet Kumawat
════════════════════════
ⴵ Time: Sat, 12 Apr 2025 11:13:04 GMT
════════════════════════
⌗ Tags: #hacking #vulnerability #cybersecurity #ai #bug_bounty
Medium
💰5 Web Vulnerabilities That Paid Me the Most (And How to Find Them!)
🚀Free Article Link
17 views
Daily Writeups
⤷ Title: Intigriti Bug Bytes #223 - April 2025 🚀
════════════════════════
𐀪 Author: Intigriti
════════════════════════
ⴵ Time: Fri, 11 Apr 2025 00:00:00 GMT
════════════════════════
⌗ Tags: #Bug Bytes
Intigriti
Bug Bytes #223 | April 2025 Bug Bounty Highlights & Tools
Dive into April’s Bug Bytes: bug bounty wins, platform & program updates, the HackDonalds challenge, and top tools & resources for security researchers.
17 views
Daily Writeups
⤷ Title: HOW I GOT RCE BY THIS ‘ Single quotation Mark
════════════════════════
𐀪 Author: Amerghaith
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 15:26:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #sql_injection #bug_bounty #rce_vulnerability
Medium
HOW I GOT RCE BY THIS ‘ Single quotation Mark
Hi Everyone,My name is Amer Ghaith
I’m Bug Bounty Hunter,Cyebr Security Student At Amman Arab University.
15 views
Daily Writeups
⤷ Title: Account Takeover Based on Deep Understanding of the Target
════════════════════════
𐀪 Author: Erfan Tavakoli
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 15:00:02 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #writeup #cybersecurity #bug_bounty_tips #bug_bounty
Medium
Account Takeover Based on Deep Understanding of the Target
Hi there! Maverick here, and in this write-up, I’ll walk you through an interesting account takeover scenario.
14 views