Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Token IMpersonation
════════════════════════
𐀪 Author: Mert Baykal
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 16:47:07 GMT
════════════════════════
⌗ Tags: #ethical_hacking #delegate #token_impersonation #impersonate #kerberoasting
Medium
Token IMpersonation
Token IMpersonation : Token Taklidi › Token: temelde bilgisayarlarimiz için cookies(çerezler) bunlar kimlik bilgilerimizi saglamadan…
19 views
Daily Writeups
⤷ Title: Upbit Solana Hack: 100 Billion Tokens Stolen, Exchange Delay Avoids Penalties
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:46:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BONK #Crypto Exchange #Financial Supervisory Service #Regulatory Gap #Solana #Solana Exploit #Token Hack #Upbit
Penetration Testing Tools
Upbit Solana Hack: 100 Billion Tokens Stolen, Exchange Delay Avoids Penalties
Hackers siphoned more than 100 billion tokens from Upbit in just 54 minutes, exploiting a flaw in Solana
12 views
Daily Writeups
⤷ Title: API Keys, Tokens, and Secrets: How They Leak and How Developers Can Avoid It
════════════════════════
𐀪 Author: Anishamudani
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 21:38:20 GMT
════════════════════════
⌗ Tags: #api_token #api_security #config_json #token_mismanagement
Medium
API Keys, Tokens, and Secrets: How They Leak and How Developers Can Avoid It
Welcome back to NINI’S SIMPLE GUIDE TO API SECURITY.
24 views
Daily Writeups
⤷ Title: Hackers Abuse “Device Codes” to Bypass Security and Seize Microsoft 365 Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:50:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #cybersecurity #Device Authorization #MFA Bypass #Microsoft 365 #OAuth 2.0 #phishing #Proofpoint #social engineering #Token Theft
Daily CyberSecurity
Hackers Abuse "Device Codes" to Bypass Security and Seize Microsoft 365 Accounts
Proofpoint warns of a surge in device code phishing where attackers abuse Microsoft 365 OAuth flows to hijack accounts and bypass MFA.
20 views
Daily Writeups
⤷ Title: One Click to “God Mode”: The Critical OpenClaw Flaw That Handed Attackers Your Master Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 08:54:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI agent safety #Clawdbot #cybersecurity news #depthfirst security #Moltbot #OpenClaw #RCE vulnerability #Remote Code Execution #token exfiltration #v2026.1.29 patch
Daily CyberSecurity
One Click to "God Mode": The Critical OpenClaw Flaw That Handed Attackers Your Master Keys
A high-severity flaw in OpenClaw (formerly Clawdbot) allows 1-click Remote Code Execution. Update to v2026.1.29 immediately to prevent total account takeover.
44 views
Daily Writeups
⤷ Title: GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 01:58:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CI/CD #CVE_2025_7659 #Denial of Service #DevOps Security #gitlab #graphql #Markdown Vulnerability #Patch Alert #Token Theft #Web IDE
Daily CyberSecurity
GitLab Patch Alert: High-Severity Web IDE Flaw Exposes Private Repos
GitLab fixes critical CVE-2025-7659 (CVSS 8.0). Unauthenticated attackers can steal tokens via Web IDE. Update to v18.8.4 now to secure your code.
21 views
Daily Writeups
⤷ Title: Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:42:22 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure #Credential Theft #DPAPI #EntraID #NGC tokens #post_exploitation #red teaming #SpecterBroker #Tech News 2026 #Token Broker #WAM #Windows Authentication Manager
Penetration Testing Tools
Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
SpecterBroker is a new post-exploitation powerhouse that extracts and decrypts Windows authentication tokens (WAM/TBRes) for full EntraID and Azure takeover.
23 views
Daily Writeups
⤷ Title: The Double-Mint Disaster: How a 2.7 Million Dollar Reentrancy Attack Pierced the Solv Protocol
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 04:08:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bitcoin DeFi #Blockchain Security #Crypto News 2026 #ERC_3525 #ERC_721 #Reentrancy Attack #Smart Contract Hack #Solv Protocol #SolvBTC #Token Minting Error #Web3 Exploits
Penetration Testing Tools
The Double-Mint Disaster: How a 2.7 Million Dollar Reentrancy Attack Pierced the Solv Protocol
The Solv protocol, operating atop the Bitcoin blockchain, has endured a devastating smart contract attack. A malefactor exploited
10 views
Daily Writeups
⤷ Title: Windows Security Tokens (Part 2) — Token Groups and Privileges
════════════════════════
𐀪 Author: Indigo Shadow
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 04:05:21 GMT
════════════════════════
⌗ Tags: #windows_privilege #windows_security_tokens #windows_integrity_levels #token_groups #ethical_hacking
Medium
Windows Security Tokens (Part 2) — Token Groups and Privileges
How are Groups and Privileges used by Windows in granting access? What about Integrity Levels?
35 views
Daily Writeups
⤷ Title: Principal | Medium | Linux
════════════════════════
𐀪 Author: Mkirahmet
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 14:57:29 GMT
════════════════════════
⌗ Tags: #token #javascript #hackthebox_writeup #linux
Medium
Principal | Medium | Linux
From Zero to Root: Exploiting a JWT Design Flaw and Abusing SSH Certificate Trust
27 views