Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: New FvncBot Android Trojan Targets mBank Users with HVNC and H.264 Screen Streaming
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 00:19:40 +0000
════════════════════════
⌗ Tags: #Malware #Android trojan #apk0day #banking malware #FvncBot #H.264 #HVNC #mBank #WebSocket C2
Daily CyberSecurity
New FvncBot Android Trojan Targets mBank Users with HVNC and H.264 Screen Streaming
A unique Android banking trojan, FvncBot, targets mBank (Poland) customers. It uses HVNC and H.264 to stream screens and performs web-inject attacks via FCM/WebSocket C2.
22 views
Daily Writeups
⤷ Title: Web Security Academy: Websockets— Manipulating WebSocket messages to exploit vulnerabilities
════════════════════════
𐀪 Author: Octavian I.
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 21:19:08 GMT
════════════════════════
⌗ Tags: #tutorial #websocket #web_security #cybersecurity #hacking
Medium
Web Security Academy: Websockets— Manipulating WebSocket messages to exploit vulnerabilities
A simple case of WebSocket message manipulation
18 views
Daily Writeups
⤷ Title: Exploiting WebSocket Information Disclosure to Achieve Account Deletion (IDOR)
════════════════════════
𐀪 Author: Waleed Osama
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 01:38:29 GMT
════════════════════════
⌗ Tags: #web_development #idor #hacking #bug_bounty #websocket
Medium
Exploiting WebSocket Information Disclosure to Achieve Account Deletion (IDOR)
🔍 Quick Overview
26 views
Daily Writeups
⤷ Title: WebSocket Misconfiguration Leading to DOM Manipulation and Denial of Service in a Web Chat…
════════════════════════
𐀪 Author: Waleed Osama
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 04:21:37 GMT
════════════════════════
⌗ Tags: #websocket #bug_bounty #hacking #penetration_testing #web_development
Medium
WebSocket Misconfiguration Leading to DOM Manipulation and Denial of Service in a Web Chat…
✅ Quick Overview (Polished Version)
30 views
Daily Writeups
⤷ Title: The StreamSpy Breach: Patchwork’s Stealthy New Trojan Targets Pakistan Defense
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 03:25:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #DoNot Group #InfoSec 2026 #MSBuild #Pakistan Defense #Patchwork APT #Python RAT #QiAnXin #Spyder Malware #StreamSpy #WebSocket C2
Penetration Testing Tools
The StreamSpy Breach: Patchwork’s Stealthy New Trojan Targets Pakistan Defense
The hacking group known as Patchwork—also referred to as Dropping Elephant and Maha Grass—has once again come under
14 views
Daily Writeups
⤷ Title: WebSocket Penetration Testing: How to Test for WebSocket Hijacking, IDOR, Injection & More
════════════════════════
𐀪 Author: Assassin
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 15:50:37 GMT
════════════════════════
⌗ Tags: #burpsuite_extension #penetration_testing #bug_bounty #cybersecurity #websocket
Medium
WebSocket Penetration Testing: How to Test for WebSocket Hijacking, IDOR, Injection & More
Understanding WebSocket security, common attack vectors, and a purpose-built toolkit to test them.
62 views
Daily Writeups
⤷ Title: Total Dominion: The CVSS 10.0 Flaw in Nanobot Allowing Hackers to Hijack Your WhatsApp
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:55:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Assistant #Critical Vulnerability #CVE_2026_2577 #CVSS 10.0 #Nanobot #QR code theft #session takeover #Tech News 2026 #Tenable #WebSocket hijacking #WhatsApp
Penetration Testing Tools
Total Dominion: The CVSS 10.0 Flaw in Nanobot Allowing Hackers to Hijack Your WhatsApp
Security researchers from Tenable have unearthed a critical vulnerability, designated CVE-2026-2577, within the prominent AI assistant Nanobot, a
18 views
Daily Writeups
⤷ Title: Phantom Protocol (Razzify) .
════════════════════════
𐀪 Author: mayhack
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 20:44:50 GMT
════════════════════════
⌗ Tags: #razzify #hacking #websocket #ctf #cybersecurity
Medium
Phantom Protocol (Razzify) .
Challenge Overview
22 views
Daily Writeups
⤷ Title: Critical CISA Advisory Unmasks Severe Flaws in EV2GO Charging Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 28 Feb 2026 03:50:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA advisory #Critical Infrastructure #CVE_2026_24731 #EV Charging Security #EV2GO #ICS #ICSA_26_057_04 #industrial control systems #infosec #OCPP #WebSocket Vulnerability
Daily CyberSecurity
Critical CISA Advisory Unmasks Severe Flaws in EV2GO Charging Networks
CISA issues an urgent ICS advisory (ICSA-26-057-04) for the EV2GO charging platform. Critical 9.4 severity flaws allow for session hijacking and station impersonation.
44 views
Daily Writeups
⤷ Title: EV Charging Grid Alert: Critical Flaws Exposed in Everon OCPP Backends
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 00:22:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_26288 #cybersecurity #EV Charging Security #Everon #infosec #OCPP #Session Hijacking #Smart Grid #threat intelligence #WebSocket Vulnerability
Daily CyberSecurity
EV Charging Grid Alert: Critical Flaws Exposed in Everon OCPP Backends
Critical authentication flaws (CVE-2026-26288) in Everon's OCPP backend allowed hackers to hijack EV chargers, forcing a complete platform shutdown.
19 views