Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: Living Off the HTA Land: How Hackers Weaponize a 1999 Windows Utility for Silent Malware Delivery
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:04:27 +0000
════════════════════════
⌗ Tags: #Malware #Amatera Info Harvester #ClickFix Social Engineering LummaStealer #ClipBanker Crypto Stealer #CountLoader Staging Framework #Emmenhtal Loader #HTML Application HTA Payload #Living off the Land Binaries #MSHTA Weaponization Malware Delivery #mshta.exe Windows Binary #PurpleFox Rootkit Lineage
Penetration Testing Tools
Living Off the HTA Land: How Hackers Weaponize a 1999 Windows Utility for Silent Malware Delivery
Threat actors are increasingly weaponizing MSHTA, a legacy Windows utility, as a highly efficient conduit to execute malicious
15 views
Daily Writeups
⤷ Title: New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 08:40:14 +0000
════════════════════════
⌗ Tags: #Malware #.NET malware #Cyber Security #Environment Variables #FortiGuard Labs #infosec #Infostealer #PawsRunner #Phishing Lure #PureLogs #Steganography Loader #TXZ Archive
Daily CyberSecurity
New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer
FortiGuard Labs warns of PawsRunner, a new .NET steganography loader hiding PureLogs infostealer payloads inside cat images to bypass corporate EDR.
16 views
Daily Writeups
⤷ Title: Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:35 +0000
════════════════════════
⌗ Tags: #Malware #Chromium Browsers #Clipboard Hijacker #Control Flow Flattening #Cyber Security #Discord Token Stealer #Gremlin Stealer #infosec #Infostealer #MFA Bypass #Session Hijacking #Unit 42
Daily CyberSecurity
Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
Unit 42 exposes the new Gremlin stealer. It uses memory-resident techniques to hijack active browser session tokens and completely bypass MFA.
17 views
Daily Writeups
⤷ Title: I Found a Prompt Injection Vulnerability in DeepHat - And They Never Responded
════════════════════════
𐀪 Author: Tanmoy M.
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:27:15 GMT
════════════════════════
⌗ Tags: #ai_security #cybersecurity #bug_bounty #llm #prompt_injection
Medium
I Found a Prompt Injection Vulnerability in DeepHat - And They Never Responded
I Found a Prompt Injection Vulnerability in DeepHat (Kindo’s Cybersecurity AI) — And They Never Responded DeepHat is an AI assistant built by Kindo, positioned specifically as a …
19 views
Daily Writeups
⤷ Title: Abusing LLMNR/NBT-NS Poisoning for Initial Active Directory Foothold
════════════════════════
𐀪 Author: Md Fahim Al Shihab
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:29:57 GMT
════════════════════════
⌗ Tags: #active_directory #hackthebox #cybersecurity #cpt #hacking
Medium
Abusing LLMNR/NBT-NS Poisoning for Initial Active Directory Foothold
Introduction
20 views
Daily Writeups
⤷ Title: The Hidden Career Path: How Ethical Hacking in Delhi Is Creating India’s Most Recession-Proof…
════════════════════════
𐀪 Author: Varun Papnai
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:22:07 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #cybersecurity
Medium
The Hidden Career Path: How Ethical Hacking in Delhi Is Creating India’s Most Recession-Proof…
While thousands of students debate between engineering degrees and MBA programs, a smaller group of people is quietly walking into one of…
17 views
Daily Writeups
⤷ Title: SOCIAL ENGINEERING(Zphisher)
════════════════════════
𐀪 Author: BlueTeamMal
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:56:45 GMT
════════════════════════
⌗ Tags: #social_engineering #hacking #cybersecurity
Medium
ZPHISHER HANDS ON LAB
1.I used Zphisher as it’s the one of the simplest tool for social engineering.
18 views
Daily Writeups
⤷ Title: A Full Network Revision — part 1
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:55:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #infosec #cyber_security_awareness #web_development
Medium
A Full Network Revision — part 1
(I have explained in short cause revision are meant to be shorter and more easily understandable so if you want proper explanation go to my…
20 views
Daily Writeups
⤷ Title: Peluang dan Risiko Hukum Penerapan AI di Penetration Testing
════════════════════════
𐀪 Author: Aditya Fathan
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:22:51 GMT
════════════════════════
⌗ Tags: #hacker #ai #penetration_testing #cybersecurity #technology
Medium
Peluang dan Risiko Hukum Penerapan AI di Penetration Testing
Di era digital yang modern, ancaman cybersecurity merupakan salah satu ancaman yang sangat berbahaya. Ancaman siber kini menjadi tantangan…
20 views
Daily Writeups
⤷ Title: Why Cyber Security is the Hottest Career in India in 2026
════════════════════════
𐀪 Author: Itmgoi
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:51:17 GMT
════════════════════════
⌗ Tags: #technology #engineering_career #cybersecurity #artificial_intelligence #ethical_hacking
Medium
Why Cyber Security is the Hottest Career in India in 2026
Every 39 seconds, a cyber attack happens somewhere in the world. By 2026, cyber security has become one of the most important — and most…
32 views
Daily Writeups
⤷ Title: Day 7: Email Footprinting -What an Email Address Gives Away Before You Click Send
════════════════════════
𐀪 Author: Adarsh Vardhan
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:31:40 GMT
════════════════════════
⌗ Tags: #osint #netwroking #cybersecurity #email #ethical_hacking
Medium
Day 7: Email Footprinting -What an Email Address Gives Away Before You Click Send
30 days. Public. Still going.
44 views
Daily Writeups
⤷ Title: When Identity is the Attack Path
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 21 May 2026 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
42 views
Daily Writeups
⤷ Title: Microsoft’s Retired IE Tool MSHTA Now Being Used in Fileless Malware Attacks
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 21 May 2026 10:18:11 +0000
════════════════════════
⌗ Tags: #Security #Malware #Microsoft #Cyber Attack #Cybersecurity #Fileless #LOLBIN #MSHTA #Vulnerability
Hackread
Microsoft’s Retired IE Tool MSHTA Now Being Used in Fileless Malware Attacks
Despite Internet Explorer’s retirement, hackers are abusing the legacy MSHTA utility in stealthy fileless malware attacks targeting Windows users.
43 views
Daily Writeups
⤷ Title: The Quota Crunch: Google Triples Antigravity CLI Allocations After New Limits Spark Developer Outrage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 10:43:14 +0000
════════════════════════
⌗ Tags: #Technology #Anti_Abuse Filtering Engine Regression #Antigravity CLI Gemini Allocation Limits #Antigravity Migration June 2026 #Automated Compute Throttling Bug #Gemini 3.5 Flash Model Quota #Gemini CLI Deprecation #Google AI Studio Integration #Google IO 2026 #Terminal Based AI Coding Agents #Weekly Allocation Reset
Daily CyberSecurity
The Quota Crunch: Google Triples Antigravity CLI Allocations After New Limits Spark Developer Outrage
Google triples developer compute allocations for the new Antigravity CLI after an unannounced usage limit triggered instant throttling bugs and mass outcry.
18 views
Daily Writeups
⤷ Title: The Kill Switch: How an Automated Google Cloud Error Instantly Wiped Out the Railway Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 10:34:50 +0000
════════════════════════
⌗ Tags: #Technology #503 Service Unavailable #Anti_Abuse Filtering Engine Regression #Cloud Control Plane Blackout #Cross Cloud Data Preservation #GCP Automated Account Outage #Google Cloud Platform Post Mortem #Hyperscale Hypervisor Failover #Multi Cloud Synchronization #Railway App Google Cloud Suspension #Railway Metal Infrastructure
Daily CyberSecurity
The Kill Switch: How an Automated Google Cloud Error Instantly Wiped Out the Railway Platform
Railway suffered an 8-hour platform-wide blackout after Google Cloud's automated anti-abuse system incorrectly suspended its multi-million-dollar account.
15 views
Daily Writeups
⤷ Title: Predating Stuxnet: How the “fast16” Malware Secretly Sabotaged Nuclear Weapons Simulations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:04:53 +0000
════════════════════════
⌗ Tags: #Malware #AUTODYN #Cyber Sabotage #Equation Group #fast16 #infosec #LS_DYNA #Lua Virtual Machine #Nuclear Weapon Design #Stuxnet #Symantec Threat Hunter #Uranium Compression
Daily CyberSecurity
Predating Stuxnet: How the "fast16" Malware Secretly Sabotaged Nuclear Weapons Simulations
Symantec exposes fast16, a 2005 cyber-sabotage framework designed to inject an in-memory Lua engine and corrupt uranium-compression weapons simulations.
15 views
Daily Writeups
⤷ Title: How Triage Assist is raising the bar in crowdsourced security
════════════════════════
𐀪 Author: Stijn Bogaerts
════════════════════════
ⴵ Time: Thu, 21 May 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Product Updates
Intigriti
How Triage Assist is raising the bar in crowdsourced security
Triage Assist is a suite of AI tools embedded in the Intigriti platform, operated by our triage team. It's part of a broader direction on AI-leveling with the future hacker.
14 views
Daily Writeups
⤷ Title: The Digital Wild West: Why I’m Finally Paying Attention to Cybersecurity
════════════════════════
𐀪 Author: Cyberfox
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:16:12 GMT
════════════════════════
⌗ Tags: #life_lessons #hacking #technology #privacy #cybersecurity
Medium
The Digital Wild West: Why I’m Finally Paying Attention to Cybersecurity
A beginner’s guide to understanding cyber crime, ethical hacking, and how to stay safe online.
15 views
Daily Writeups
⤷ Title: #Lab 1 — Excessive Trust in Client-Side Controls — PortSwigger Web Security Academy
════════════════════════
𐀪 Author: Thewatchdog13
════════════════════════
ⴵ Time: Thu, 21 May 2026 08:58:17 GMT
════════════════════════
⌗ Tags: #ethical_hacking #portswigger_lab #penetration_testing #websecurityacademy #cybersecurity
Medium
#Lab 1 — Excessive Trust in Client-Side Controls — PortSwigger Web Security Academy
Introduction
16 views
Daily Writeups
⤷ Title: TryHackMe Room “ContAInment ”Walkthrough & Key Steps
════════════════════════
𐀪 Author: gh0st
════════════════════════
ⴵ Time: Thu, 21 May 2026 09:56:34 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity
Medium
TryHackMe Room “ContAInment ”Walkthrough & Key Steps
by gh0st
20 views