Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: OAuth Misconfigurations: Real-World Examples and Exploitation Tips
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 22:17:13 GMT
════════════════════════
⌗ Tags: #oauth #careers #cybersecurity #bug_bounty #technology
Medium
OAuth Misconfigurations: Real-World Examples and Exploitation Tips
A practical guide to identifying, understanding, and exploiting common OAuth implementation flaws in modern web applications.
35 views
Daily Writeups
⤷ Title: How Android Broke Me into Tech: From Bricking Phones to Bounty Hunting
════════════════════════
𐀪 Author: Bryan Cruse
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:32:47 GMT
════════════════════════
⌗ Tags: #bug_bounty #technology #android #androiddev #tech
Medium
How Android Broke Me into Tech: From Bricking Phones to Bounty Hunting
Look, I’m gonna be real with you — this whole thing started because I was broke, sleep-deprived, and desperately needed something to keep…
21 views
Daily Writeups
⤷ Title: Vibe Coding: The Wake-Up Call for CISOs
════════════════════════
𐀪 Author: Taimur Ijlal
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:26:58 GMT
════════════════════════
⌗ Tags: #vibe_coding #artificial_intelligence #application_security #generative_ai_tools #cybersecurity
Medium
Vibe Coding: The Wake-Up Call for CISOs
Why Shift Left Alone Won’t Save You Anymore
23 views
Daily Writeups
⤷ Title: Hack The System — NeoVault
════════════════════════
𐀪 Author: محمد بن إبراهيم
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 22:14:23 GMT
════════════════════════
⌗ Tags: #ctf #penetration_testing #cybersecurity #hacking #hackthebox
Medium
Hack The System — NeoVault
بسم الله الرحمن الرحيم
25 views
Daily Writeups
⤷ Title: PicoCTF Writeup: Bookmarklet Encryption Challenge
════════════════════════
𐀪 Author: Veyron92i
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 22:06:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #pentesting #bookmarklet #picoctf
Medium
🧪PicoCTF Writeup: Bookmarklet Encryption Challenge
By: Veyron92i
Category: Web Exploitation
Platform: PicoCTF
Difficulty: Easy
Challenge Name: Bookmarklet
25 views
Daily Writeups
⤷ Title: AI Prompt Caching for Context Engineering: Optimizing OPEX and User Experience
════════════════════════
𐀪 Author: Michael Rico
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 22:10:13 GMT
════════════════════════
⌗ Tags: #context_engineering #cybersecurity #performance_optimization #prompt_caching #ai_optimization
Medium
AI Prompt Caching for Context Engineering: Optimizing OPEX and User Experience
We implemented Anthropic’s prompt caching in the SentrySearch threat intelligence platform to address high operational costs and slow…
19 views
Daily Writeups
⤷ Title: A Secret Store Is NOT A Substitute For Actually Protecting Your API Keys
════════════════════════
𐀪 Author: Andrew Zuo
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:58:44 GMT
════════════════════════
⌗ Tags: #api_key #secret_store #api_security #secret_management_tools #cybersecurity
Medium
A Secret Store Is NOT A Substitute For Actually Protecting Your API Keys
I was in Cloudflare the other day and I saw this:
21 views
Daily Writeups
⤷ Title: Beyond Passwords: Unmasking the True Face of Hacking
════════════════════════
𐀪 Author: Asjad Butt
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:53:38 GMT
════════════════════════
⌗ Tags: #ethical_hacking #tech #vulnerability #cybersecurity #information_security
Medium
Beyond Passwords: Unmasking the True Face of Hacking
We’ve all seen the movies. The hooded figure hunched over a glowing screen, lines of code scrolling at lightning speed, culminating in the…
24 views
Daily Writeups
⤷ Title: X-Wing: PQC Key Encapsulation, But Better
════════════════════════
𐀪 Author: Prof Bill Buchanan OBE FRSE
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:30:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #cryptography #pqc
Medium
X-Wing: PQC Key Encapsulation, But Better
We are migrating away from ECDH towards a post-quantum method. This involves the usage of key encapsulation, and where we generate a secret…
31 views
Daily Writeups
⤷ Title: Grievance, Greed, Glory: The Triple Motive Behind the Western Sydney University Cyber Hack
════════════════════════
𐀪 Author: Dinesh Dino
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:22:19 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #australia #university #cybersecurity #cybercrime
Medium
Grievance, Greed, Glory: The Triple Motive Behind the Western Sydney University Cyber Hack
In a case that has shaken the Australian higher education sector and sparked debate across cybersecurity circles, a former engineering…
35 views
Daily Writeups
⤷ Title: How I Forged a Facebook JWT to Impersonate Any User on Wit.ai (No Secret Verification)
════════════════════════
𐀪 Author: Ramzy Bouyahya
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 22:50:27 GMT
════════════════════════
⌗ Tags: #facebook_bug_bounty #facebook #meta_bug_bounty #wit #bug_bounty_writeup
Medium
How I Forged a Facebook JWT to Impersonate Any User on Wit.ai (No Secret Verification)
During a routine test of Wit.ai’s Facebook login integration, I discovered a critical vulnerability where the backend fails to verify the…
41 views
Daily Writeups
⤷ Title: FrogPost: postMessage Security Testing Tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:07:02 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Chrome extension #cybersecurity #DOM_based XSS #FrogPost #Fuzzing #Iframes #postMessage #security testing #Vulnerability Analysis #web security
Penetration Testing Tools
FrogPost: postMessage Security Testing Tool
FrogPost is a powerful Chrome extension for security researchers, enabling live monitoring, analysis, and fuzzing of postMessage communications to find iframe vulnerabilities.
56 views
Daily Writeups
⤷ Title: Proofpoint Exposes TA829 & UNK_GreenSec’s Dual-Nature Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:52:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #Cybercriminal Overlap #Espionage #Morpheus ransomware #Proofpoint #RomCom #Russian APT #TA829 #threat intelligence #TransferLoader #UNK_GreenSec
Daily CyberSecurity
Proofpoint Exposes TA829 & UNK_GreenSec's Dual-Nature Campaigns
Proofpoint reveals two Russian threat clusters (TA829 & UNK_GreenSec) blending financial cybercrime with state-aligned espionage, using RomCom and TransferLoader malware.
26 views
Daily Writeups
⤷ Title: Critical RCE in MCP Inspector Exposes AI Devs to Web-Based Exploits (CVE-2025-49596)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:36:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #0.0.0.0_day #AI Development #AI security #CVE_2025_49596 #cybersecurity #Machine Context Protocol #MCP #MCP Inspector #Oligo Security #rce #Remote Code Execution #Vulnerability
Daily CyberSecurity
Critical RCE in MCP Inspector Exposes AI Devs to Web-Based Exploits (CVE-2025-49596)
15 views
Daily Writeups
⤷ Title: From Code to Crypto Theft: DOJ Charges Four North Koreans for Infiltrating U.S. Companies and Laundering $900K in Virtual Currency
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:20:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #DOJ #DPRK #fbi #money laundering #national security #North Korea #Remote IT Jobs #Sanctions Evasion #scam #Stolen Identities
Daily CyberSecurity
From Code to Crypto Theft: DOJ Charges Four North Koreans for Infiltrating U.S. Companies and Laundering $900K in Virtual Currency
The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.
9 views
Daily Writeups
⤷ Title: North Korea’s AI-Powered Cybercrime: Deepfakes & Fake Personas Infiltrate 300+ US Companies via Remote IT Jobs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:13:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #artificial intelligence #Cybercrime #cybersecurity #deepfake #identity theft #Jasper Sleet #Microsoft Threat Intelligence #North Korea #Remote IT Workers #Sanctions Evasion #Storm_0287
Daily CyberSecurity
North Korea's AI-Powered Cybercrime: Deepfakes & Fake Personas Infiltrate 300+ US Companies via Remote IT Jobs
Microsoft exposes North Korea’s Jasper Sleet (Storm-0287) using AI-enhanced deepfakes and fake personas to secure remote IT jobs at 300+ US firms, funding the DPRK regime and stealing data.
14 views
Daily Writeups
⤷ Title: DOJ Dismantles North Korean IT Job Scam: Stolen Identities & Laundering Funded DPRK Weapons
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:53:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #DOJ #DPRK #fbi #money laundering #national security #North Korea #Remote IT Jobs #Sanctions Evasion #scam #Stolen Identities
Daily CyberSecurity
DOJ Dismantles North Korean IT Job Scam: Stolen Identities & Laundering Funded DPRK Weapons
The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.
25 views
Daily Writeups
⤷ Title: Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:44:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #APT_C_36 #AsyncRAT #Blind Eagle #Colombia #Cybercrime #Exposed C2 #Latin America #phishing #rat #Remcos #Remote Access Trojan #Trustwave #VBS Malware
Daily CyberSecurity
Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
Trustwave exposes Blind Eagle (APT-C-36) leveraging exposed infrastructure and VBS malware in phishing campaigns, targeting Colombian banks with blatant disregard for concealment.
17 views
Daily Writeups
⤷ Title: Google Patches Actively Exploited Chrome Zero-Day: CVE-2025-6554
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:34:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #chrome #CVE_2025_6554 #cybersecurity #Exploited in Wild #google chrome #JavaScript Engine #rce #Remote Code Execution #Type Confusion #V8 #Vulnerability #zero_day
Daily CyberSecurity
Google Patches Actively Exploited Chrome Zero-Day: CVE-2025-6554
Google has urgently patched a high-severity zero-day (CVE-2025-6554) in Chrome's V8 JavaScript engine. This type confusion flaw is actively exploited in the wild, risking RCE.
24 views
Daily Writeups
⤷ Title: gf: Tu Aliado Indispensable para el Reconocimiento y Detección de Vulnerabilidades en Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:01:29 GMT
════════════════════════
⌗ Tags: #infosec #penetration_testing #ethical_hacking #cybersecurity #bug_bounty
Medium
gf: Tu Aliado Indispensable para el Reconocimiento y Detección de Vulnerabilidades en Bug Bounty
Descubre gf y sus patrones para filtrar datos sensibles, detectar vulnerabilidades y optimizar tu reconocimiento en pentesting y bug bounty.
19 views
Daily Writeups
⤷ Title: Flash USDT Explained – For Educational Purposes Only
════════════════════════
𐀪 Author: Picaga
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 00:10:07 GMT
════════════════════════
⌗ Tags: #cryptocurrency #defi #programming #cybersecurity #web3
Medium
Flash USDT Explained – For Educational Purposes Only
Flash USDT is a term used to describe fake USDT wallet reflections that don’t involve real blockchain transactions. These can be created…
13 views