Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Tue, 05 Sep 2023 17:20:43 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: XSS THROUGH CHAT TEXTING
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/38b9003654ac
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cookie_stealing #xss_vulnerability
Medium
XSS THROUGH CHAT TEXTING
vulnerability name: cross site scripting through chat messages
11 views
Daily Writeups
β€· Title: Google Reverses Third-Party Cookie Phaseout, Privacy Sandbox Relegated to Support Role
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 23 Apr 2025 08:30:00 +0000
════════════════════════
βŒ— Tags: #Technology #Cookie Policy #Digital Privacy #google chrome #Incognito Mode #IP Protection #Online Advertising #Privacy Sandbox #Third_Party Cookies #User Tracking
Daily CyberSecurity
Google Reverses Third-Party Cookie Phaseout, Privacy Sandbox Relegated to Support Role
Google scraps plans to end third-party cookies in Chrome, leaving Privacy Sandbox sidelined and user tracking by ad networks largely unchanged.
39 views
Daily Writeups
β€· Title: MyExpense:1 (VulnHub)
════════════════════════
π€ͺ Author: S4ntiHack
════════════════════════
β΄΅ Time: Tue, 29 Apr 2025 14:54:17 GMT
════════════════════════
βŒ— Tags: #ciberseguridad #cookie_hijacking #pentesting #web #hacking
Medium
MyExpense:1 (VulnHub)
AquΓ­ les explico el paso a paso de la mΓ‘quina MyExpense: 1 de VulnHub donde veremos varias vulnerabilidades (algunas combinadas) como las…
16 views
Daily Writeups
β€· Title: Google Launches DBSC Public Beta: New Feature Binds Sessions to Devices to Combat Cookie Theft
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sat, 02 Aug 2025 00:08:46 +0000
════════════════════════
βŒ— Tags: #Google #chrome #Cookie Theft #cybersecurity #DBSC #Device Bound Session Credentials #google #Passkeys #security #Session Hijacking
Penetration Testing Tools
Google Launches DBSC Public Beta: New Feature Binds Sessions to Devices to Combat Cookie Theft
Google has launched Device Bound Session Credentials (DBSC) in public beta for Chrome on Windows, a new feature that binds authentication sessions to devices to prevent cookie theft.
18 views
Daily Writeups
β€· Title: COOKIE SPIDER’s Malvertising Drops New SHAMOS macOS Malware
════════════════════════
π€ͺ Author: Waqas
════════════════════════
β΄΅ Time: Fri, 22 Aug 2025 23:08:23 +0000
════════════════════════
βŒ— Tags: #Security #Malware #AMOS #Apple #COOKIE SPIDER #Cyber Attack #Cybersecurity #Infostealer #macOS #Malvertising #SHAMOS
Hackread
COOKIE SPIDER’s Malvertising Drops New SHAMOS macOS Malware
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
❀1
20 views
Daily Writeups
β€· Title: The End of Annoying Cookie Banners? The EU Is Finally Considering a New Law
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 23 Sep 2025 09:04:14 +0000
════════════════════════
βŒ— Tags: #Technology #cookie banners #ePrivacy Directive #EU #GDPR #Online Advertising #privacy
Daily CyberSecurity
The End of Annoying Cookie Banners? The EU Is Finally Considering a New Law
9 views
Daily Writeups
β€· Title: Fake Productivity Tools: 5 Malicious Chrome Extensions Hijack Enterprise Sessions
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 19 Jan 2026 00:37:04 +0000
════════════════════════
βŒ— Tags: #Malware #Chrome extensions #Cookie Injection #DataByCloud #Enterprise Security #infosec #malware #NetSuite #Session Hijacking #Socket Threat Research #Workday
Daily CyberSecurity
Fake Productivity Tools: 5 Malicious Chrome Extensions Hijack Enterprise Sessions
A new and sophisticated campaign targeting enterprise environments has been uncovered by Socket’s Threat Research Team. Five malicious Google Chrome extensions, masquerading as productivity …
17 views
Daily Writeups
β€· Title: Manual SQL Injection to Admin Takeover | SQLite Exploitation, Hash Cracking & Cookie Manipulation
════════════════════════
π€ͺ Author: NullSecurityX
════════════════════════
β΄΅ Time: Sat, 14 Feb 2026 15:53:07 GMT
════════════════════════
βŒ— Tags: #cybersecurity #account_takeover #cookie_manipulation #sql_injection #bug_bounty
Medium
Manual SQL Injection to Admin Takeover | SQLite Exploitation, Hash Cracking & Cookie Manipulation
SQLite Exploitation, Hash Analysis & Cookie Manipulation
17 views
Daily Writeups
β€· Title: CISA Flags Actively Exploited Wing FTP Server Flaw
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 16 Mar 2026 18:59:50 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CISA KEV #Cookie Validation #CVE_2025_47813 #cybersecurity #Federal Mandate #infosec #Path Disclosure #threat intelligence #vulnerability management #Wing FTP Server
Daily CyberSecurity
CISA Flags Actively Exploited Wing FTP Server Flaw
CISA adds a Wing FTP Server flaw (CVE-2025-47813) to its KEV catalog. The actively exploited cookie vulnerability exposes internal server paths. Update now.
21 views
Daily Writeups
β€· Title: Google Chrome Update Disrupts Infostealer Cookie Theft
════════════════════════
π€ͺ Author: Deeba Ahmed
════════════════════════
β΄΅ Time: Sat, 11 Apr 2026 12:11:10 +0000
════════════════════════
βŒ— Tags: #Security #Malware #Chrome #Cookie #Cybersecurity #DBSC #Google #Infostealer
Hackread
Google Chrome Update Disrupts Infostealer Cookie Theft
Google adds Device Bound Session Credentials (DBSC) to Chrome 146, using hardware keys to block infostealer use of stolen session cookies on Windows.
40 views
Daily Writeups
β€· Title: The End of Cookie Theft: How Google’s New Hardware-Locked Sessions Kill Hijacking
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 13 Apr 2026 08:29:39 +0000
════════════════════════
βŒ— Tags: #Google #browser security #Cookie Theft #cybersecurity #data privacy #DBSC #Google Chrome #Infosec #secure enclave #Session Hijacking #TPM
Penetration Testing Tools
The End of Cookie Theft: How Google’s New Hardware-Locked Sessions Kill Hijacking
Session hijacking has long persisted as one of the most insidious adversarial techniques; the necessity of a password
11 views
Daily Writeups
β€· Title: The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 20 May 2026 07:42:37 +0000
════════════════════════
βŒ— Tags: #Malware #.NET Resource Obfuscation #Chromium Identity Theft #Code Virtualization Bytecode #Cookie Protection Bypass #Cryptojacking Clipboard Hijacker #Gremlin Stealer Malware #Unit 42 Palo Alto Networks #WebSocket Session Hijacking #XOR Encoded Payload #Zero Detection C2 Infrastructure
Information Security News
The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets - Information Security News
The exfiltration of administrative credentials and volatile session tokens increasingly manifests not as a rudimentary brute-force incursion, but as a meticulously obfuscated mechanism engineered to maintain absolute silence until the definitive moment of…
11 views
Daily Writeups
β€· Title: Broken Authentication | TryHackMe
════════════════════════
π€ͺ Author: Ryca
════════════════════════
β΄΅ Time: Fri, 29 May 2026 06:48:04 GMT
════════════════════════
βŒ— Tags: #broken_authentication #cybersecurity #tryhackme #brute_force #cookie_manipulation
Medium
Broken Authentication | TryHackMe
Learn how to defeat logins and other authentication mechanisms to allow you access to unpermitted areas.Learn how to defeat logins and…
33 views
Daily Writeups
β€· Title: Cryptographic Paradigm Shift: Google Officially Launches Device Bound Session Credentials
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sun, 31 May 2026 10:26:03 +0000
════════════════════════
βŒ— Tags: #Google #browser session hijacking defense #cookie refresh token rotation #Device Bound Session Credentials #Google Chrome DBSC protocol #hardware bound authentication security #infostealer malware protection #macOS Secure Enclave key pairs #session cookie theft mitigation #W3C web security standards #Windows TPM cryptographic binding
Information Security News
Device Bound Session Credentials: Google Neutralizes Cookie Theft
Google debuts Device Bound Session Credentials (DBSC). Learn how this hardware-anchored TPM protocol stops session hijacking and cookie theft.
38 views
Daily Writeups
β€· Title: Perimeter Peril: Bypassing Authentication via Palo Alto Networks GlobalProtect
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 01 Jun 2026 04:03:26 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cookie re_authentication flaw #CVE_2026_0257 authentication bypass #Palo Alto Networks exploit #PAN_OS GlobalProtect vulnerability #Rapid7 threat intelligence #VPN edge perimeter security
Information Security News
CVE-2026-0257 Authentication Bypass: VPN Exploit Guide
Learn about the active CVE-2026-0257 authentication bypass in PAN-OS. Discover how attackers exploit GlobalProtect VPNs and find key mitigations.
22 views
Daily Writeups
β€· Title: Server Doesn’t Own the Cookies! We Do.
════════════════════════
π€ͺ Author: Previous-Will0071
════════════════════════
β΄΅ Time: Thu, 09 Jul 2026 21:15:28 GMT
════════════════════════
βŒ— Tags: #ethical_hacking #cookie_security #authentication #cybersecurity #web_security
Medium
Server Doesn’t Own the Cookies! We Do.
OverTheWire Natas Level 5 β†’ Level 6
28 views