Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: 【逆向筆記】拆解 jpg中的一句話木馬
════════════════════════
𐀪 Author: segalee
════════════════════════
ⴵ Time: Wed, 20 May 2026 02:01:04 GMT
════════════════════════
⌗ Tags: #malware_analysis #infosec #trojan #blue_team #cybersecurity
Medium
【逆向筆記】拆解 jpg中的一句話木馬
因為預計今年年底報考 TCM 的 PMRP，所以會開始學習有關逆向分析的知識 該系列會針對獲得的樣本進行逆向分析筆記，因為還在學習中如有錯誤請見諒
13 views
Daily Writeups
⤷ Title: Resolute — HTB Writeup
════════════════════════
𐀪 Author: William Shively
════════════════════════
ⴵ Time: Wed, 20 May 2026 01:01:59 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #windows #active_directory #hackthebox
Medium
Resolute — HTB Writeup
Introduction:
17 views
Daily Writeups
⤷ Title: TryHackMe — Wonderland | Full Walkthrough
════════════════════════
𐀪 Author: Shikhali Jamalzade
════════════════════════
ⴵ Time: Wed, 20 May 2026 00:50:29 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybersecurity #web_penetration_testing #ctf_writeup #penetration_testing
Medium
TryHackMe — Wonderland | Full Walkthrough
Author: Shikhali Jamalzade GitHub: github.com/alisalive LinkedIn: linkedin.com/in/camalzads
34 views
Daily Writeups
⤷ Title: GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 20 May 2026 09:31:15 +0530
════════════════════════
⌗ Tags: No_Tags
28 views
Daily Writeups
⤷ Title: The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:06:15 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber Security #GitHub Token Rotation #Grafana Labs #Incident Response #infosec #Mini Shai_Hulud #npm Worm #Ransom Demand #Source Code Theft #supply chain attack
Daily CyberSecurity
The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
Grafana Labs confirms a targeted cyberattack and source code theft after a missed token from the Mini Shai-Hulud npm worm left a repository exposed.
26 views
Daily Writeups
⤷ Title: Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 03:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8711 #Denial of Service #F5 Security Advisory #Heap Buffer Overflow #NGINX JavaScript #njs module #Patch Alert #Remote Code Execution #reverse proxy #Web Infrastructure
Daily CyberSecurity
Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
F5 warns of a critical 9.2 CVSS flaw (CVE-2026-8711) in NGINX JavaScript (njs). Unauthenticated attackers can trigger heap overflows and potential RCE.
18 views
Daily Writeups
⤷ Title: Solidity Basics Part 1: Language Fundamentals
════════════════════════
𐀪 Author: Hacker MD
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:31:00 GMT
════════════════════════
⌗ Tags: #web3 #solidity #ethereum #smart_contracts #bug_bounty
Medium
Solidity Basics Part 1: Language Fundamentals
Series: Web3 Security Zero se Advance | Article #5 By HackerMD | 25 min read
14 views
Daily Writeups
⤷ Title: ️ Understanding Phishing Attack-SOC”Security Operation Center”
════════════════════════
𐀪 Author: Zoningxtr
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:07:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #python #penetration_testing #web_development #bug_bounty
Medium
🛡️ Understanding Phishing Attack-SOC”Security Operation Center”
🎣 “The Email Looked Legitimate… And That Was the Real Weapon”
17 views
Daily Writeups
⤷ Title: Linux Privilege Escalation: Enumeration | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:17:27 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #enumeration #tryhackme_walkthrough #linux
Medium
Linux Privilege Escalation: Enumeration | TryHackMe | Walkthrough
Task 3 OS Enumeration
21 views
Daily Writeups
⤷ Title: Ethical Hacking Skills for Strong Cybersecurity Foundations
════════════════════════
𐀪 Author: Adhiraj Kasabe
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:50:16 GMT
════════════════════════
⌗ Tags: #ethical_hacking_course #ethical_hacking #ethical_hacking_training #artificial_intelligence #ai
Medium
Ethical Hacking Skills for Strong Cybersecurity Foundations
The Ethical Hacking Foundation Certification kinda helps professionals pick up the essential knowledge to spot vulnerabilities, make sense…
34 views
Daily Writeups
⤷ Title: Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 20 May 2026 10:42:06 +0530
════════════════════════
⌗ Tags: No_Tags
26 views
Daily Writeups
⤷ Title: Kernel Chaos: Linus Torvalds Blasts “Drive-By” AI Bug Reports Paralyzing Linux Maintainers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:48:05 +0000
════════════════════════
⌗ Tags: #Linux #AI Bug Reports #Automated Vulnerability Submissions #Bug Regression #Code Review Fatigue #DevSecOps 2026 #Drive_By Patching #Linus Torvalds #Linux Kernel Development #Open Source Maintainers #Security Mailing List Bottleneck
Daily CyberSecurity
Kernel Chaos: Linus Torvalds Blasts “Drive-By” AI Bug Reports Paralyzing Linux Maintainers
The integration of automated artificial intelligence workflows engineered to unearth and submit security vulnerabilities has begun to heavily impact the Linux Kernel development ecosystem. In his …
21 views
Daily Writeups
⤷ Title: Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:45:58 +0000
════════════════════════
⌗ Tags: #Malware #AppleSeed #cyber_espionage #HelloDoor #infosec #Kimsuky #MemLoad #PebbleDash #Rust Backdoor #threat intelligence #TryCloudflare #VSCode Remote Tunneling
Daily CyberSecurity
Kimsuky Core Upgrades Weaponize Rust Backdoors and VSCode Remote Tunneling
Kimsuky APT evolves its arsenal with "HelloDoor," a new Rust-based backdoor, and hijacks trusted VSCode Remote Tunneling to bypass corporate firewalls.
14 views
Daily Writeups
⤷ Title: Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:43:11 +0000
════════════════════════
⌗ Tags: #Technology #Automated Enforcement Algorithms #Cloud Concentration Risk #Google Cloud Account Suspension #Infrastructure Automation Failure #Multi_Cloud Redundancy #Non_Enterprise Build Throttle #Railway Outage 2026 #Site Reliability Engineering #Unilateral Cloud Termination #UniSuper GCP Incident
Daily CyberSecurity
Google Cloud Abruptly Shuts Down Railway, Sparking Catastrophic Infrastructure Outage
Developer cloud platform Railway suffers a widespread, catastrophic infrastructure outage after Google Cloud abruptly suspends its corporate account.
12 views
Daily Writeups
⤷ Title: Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:39:53 +0000
════════════════════════
⌗ Tags: #Data Leak #Credential Harvesting Payload #Cryptographic Token Rotation #Developer Endpoint Isolation #Forensic Log Analysis #GitHub Copilot Leak #GitHub Enterprise Server #GitHub Source Code Breach #supply chain attack #TeamPCP Syndicate #VS Code Extension Worm
Daily CyberSecurity
Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories
GitHub confirms a perimeter breach by TeamPCP. An administrative VS Code extension supply-chain worm exfiltrated 3,800 proprietary core source repositories.
11 views
Daily Writeups
⤷ Title: Multi-Stage PyInstaller Loader Weaponizes AMSI Patching to Deploy XWorm RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:13:42 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #Cyber Security #defense evasion #infosec #Malware Analysis #Point Wild #PyInstaller Loader #rat #Remote Access Trojan #VirtualProtect #XWorm
Daily CyberSecurity
Multi-Stage PyInstaller Loader Weaponizes AMSI Patching to Deploy XWorm RAT
Point Wild exposes a sophisticated PyInstaller loader using in-memory AMSI patching and SHA-512 decryption to drop XWorm V7.4. Patch now!
15 views
Daily Writeups
⤷ Title: How I Discovered Account Takeover (ATO) via XSS and Open redirect
════════════════════════
𐀪 Author: JEETPAL
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:45:24 GMT
════════════════════════
⌗ Tags: #bug_bounty #bugbounty_writeup #bug_bounty_hunter #bug_bounty_tips #bug_bounty_writeup
Medium
How I Discovered Account Takeover (ATO) via XSS and Open redirect
Hello Everyone,
15 views
Daily Writeups
⤷ Title: How I Bypassed OTP Verification on Quick Heal — Account Takeover Without Valid OTP [RESOLVED]
════════════════════════
𐀪 Author: PradyumnTiwareNexus
════════════════════════
ⴵ Time: Wed, 20 May 2026 05:27:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cybersecurity #web_security #infosec
Medium
🔐 How I Bypassed OTP Verification on Quick Heal — Account Takeover Without Valid OTP [RESOLVED]
👋 Hey Hackers!
13 views
Daily Writeups
⤷ Title: The Day My Non-Tech Friend Asked Me to ‘Hack’ His Ex’s Instagram
════════════════════════
𐀪 Author: Vijay Kumar Gupta
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:46:00 GMT
════════════════════════
⌗ Tags: #life #hacking #careers #cybersecurity #non_tech
Medium
The Day My Non-Tech Friend Asked Me to ‘Hack’ His Ex’s Instagram
Or: How I Learned to Say No (And Why You Should Too)
15 views
Daily Writeups
⤷ Title: Two Critical Attacks, One Week: NGINX Is Being Exploited and Your Email Gateway Has 7 Open Wounds
════════════════════════
𐀪 Author: Yuvraj Singh
════════════════════════
ⴵ Time: Wed, 20 May 2026 06:29:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #email_security #vulnerability #tech_news_today
Medium
Two Critical Attacks, One Week: NGINX Is Being Exploited and Your Email Gateway Has 7 Open Wounds
CVE-2026–42945 is live in the wild. SEPPMail has a CVSS 10.0 flaw. If either is in your stack, this is your five-alarm briefing.
20 views