Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: Phishing — Phishmas Greetings: Day 12 Advent Of Cyber 2025 TryHackMe
════════════════════════
𐀪 Author: Bridget
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 13:40:25 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme #phishing #social_engineering #spam
Medium
Phishing — Phishmas Greetings: Day 12 Advent Of Cyber 2025 TryHackMe
Learn how to spot phishing emails from Malhare’s Eggsploit Bunnies sent to TBFC users. Day 12 Advent of cyber 2025 tryhackme
36 views
Daily Writeups
⤷ Title: People Call Me a Hacker. I’m Just Curious.
════════════════════════
𐀪 Author: Sohankrishnaa
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 13:35:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #startupş #software_engineering #programming
Medium
People Call Me a Hacker. I’m Just Curious.
station.uwu, also known as Sohan Krishna Annavarapu, is a young security researcher, hacker, and full-stack developer exploring web…
45 views
Daily Writeups
⤷ Title: HMAC Authentication for API Security: A Comprehensive Implementation Guide for Node.js
════════════════════════
𐀪 Author: Mohanpathi S
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 12:11:02 GMT
════════════════════════
⌗ Tags: #api_security #cryptography #nodejs #expressjs #hmac
Medium
HMAC Authentication for API Security: A Comprehensive Implementation Guide for Node.js
Modern API security faces a critical vulnerability that authentication tokens and HTTPS encryption alone cannot address: request integrity…
52 views
Daily Writeups
⤷ Title: APIs: Your Weakest Link — Why API Attacks Are Exploding in 2025
════════════════════════
𐀪 Author: JSOC IT BLOG
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 15:41:51 GMT
════════════════════════
⌗ Tags: #enterprise_security_risks #application_security #ai_driven_cyber_threats #api_security #api_attacks_breaches
Medium
APIs: Your Weakest Link — Why API Attacks Are Exploding in 2025
The Hidden Attack Vector Compromising 95% of Organizations
46 views
Daily Writeups
⤷ Title: One Unchecked Box, One Billion Records: The Human Error Problem
════════════════════════
𐀪 Author: Patrick Walsh
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 15:06:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #hacking #elasticsearch #aws
Medium
One Unchecked Box, One Billion Records: The Human Error Problem
The misconfiguration epidemic that training can’t fix
41 views
Daily Writeups
⤷ Title: Infinity Learning lab: Whispers from SQS— Writeup
════════════════════════
𐀪 Author: Hubert
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 14:44:24 GMT
════════════════════════
⌗ Tags: #hacking #cloud_security #ctf_writeup #cybersecurity #ethical_hacking
Medium
Infinity Learning lab: Whispers from SQS— Writeup
This is a description the steps I took to solve Infinity Learning lab — Whispers from SQS[1]. It is classified as an medium AWS (Amazon…
27 views
Daily Writeups
⤷ Title: Forensics Challenge: Riddle Registry — Finding Flags in PDF Metadata
════════════════════════
𐀪 Author: vulnhunter
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 14:39:43 GMT
════════════════════════
⌗ Tags: #hacking #ctf #digital_marketing #self_improvement #cybersecurity
Medium
Forensics Challenge: Riddle Registry — Finding Flags in PDF Metadata
Sometimes in CTFs, the hardest-looking files hide the easiest flags.  This challenge is a great reminder that forensics is not always…
16 views
Daily Writeups
⤷ Title: YARA Rules — YARA mean one! | AoC 2025 Day — 13 | By Mynk
════════════════════════
𐀪 Author: Mayank Shukla
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 14:26:38 GMT
════════════════════════
⌗ Tags: #hacking #adventofcyber_4 #tryhackme
Medium
YARA Rules — YARA mean one! | AoC 2025 Day — 13 | By Mynk
Learn how YARA rules can be used to detect anomalies.
16 views
Daily Writeups
⤷ Title: Why Your Employees Are Your Biggest Security Risk (And How Hackers Know It)
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 14:25:52 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #employees #social_engineering #ethical_hacking
Medium
Why Your Employees Are Your Biggest Security Risk (And How Hackers Know It)
Dark art of social engineering: where a simple “urgent” email can cost your company millions
14 views
Daily Writeups
⤷ Title: My first test: Firewall & Network Troubleshooting
════════════════════════
𐀪 Author: Oluwadamilare Adeosun
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 15:54:21 GMT
════════════════════════
⌗ Tags: #writing #infosec #cybersecurity #technology #medium
Medium
My first test: Firewall & Network Troubleshooting
I thought that everything will be smooth after deploying the lab, then i decided to do a mini exercise but i found out that there are…
14 views
Daily Writeups
⤷ Title: Your Security Scanner Misses 97% of AI-Generated Backdoors
════════════════════════
𐀪 Author: AhmedAbdelmenem
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 15:50:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #technology #supply_chain_security #ai_security
Medium
Your Security Scanner Misses 97% of AI-Generated Backdoors
Research shows even specialized detection tools fail — and every sprint ships vulnerable code to production
13 views
Daily Writeups
⤷ Title: From Abstract to Acumen — Anatomy of a Modern BEC Attack
════════════════════════
𐀪 Author: Cyb3rhawk
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 15:22:36 GMT
════════════════════════
⌗ Tags: #threat_hunting #infosec #blue_team #cbse #microsoft_365
Medium
From Abstract to Acumen — Anatomy of a Modern BEC Attack
During a recent threat hunt, I investigated a BEC campaign that moved from a standard credential phish to OAuth persistence using a…
20 views
Daily Writeups
⤷ Title: Documenting My Journey Into Penetration Testing
════════════════════════
𐀪 Author: Written by k41r0s3
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 15:40:49 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #penetration_testing
Medium
Documenting My Journey Into Penetration Testing
It all started with a question I couldn’t answer: “What do you actually want to be?” Fresh out of university, I had projects spanning cloud
29 views
Daily Writeups
⤷ Title: When Frontend Assumptions Break: Observing Server-Side Command Execution in React & Next.js
════════════════════════
𐀪 Author: Shikhar Sinha
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 15:18:12 GMT
════════════════════════
⌗ Tags: #ethical_hacking #nodejs #react #nextjs #penetration_testing
Medium
When Frontend Assumptions Break: Observing Server-Side Command Execution in React & Next.js
⚠️[CVE-2025–55182]⚠️
28 views
Daily Writeups
⤷ Title: OWASP Top 10 2025: IAAA Failures — TryHackMe Walkthrough
════════════════════════
𐀪 Author: farshad moradi shahrbabak
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 15:29:39 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #ctf #cybersecurity #owasp
Medium
OWASP Top 10 2025: IAAA Failures — TryHackMe Walkthrough
You can learn in depth about the OWASP Top 10 and the OWASP Top 10 (2025) through this article: In a World Full of Vulnerabilities, OWASP…
40 views
Daily Writeups
⤷ Title: Web Challenge: Bypassing Login with a Hidden Dev Header
════════════════════════
𐀪 Author: vulnhunter
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 14:23:04 GMT
════════════════════════
⌗ Tags: #social_media #ctf #ethical_hacking #cybersecurity #web_development
Medium
Web Challenge: Bypassing Login with a Hidden Dev Header
When solving web challenges in CTFs, sometimes the vulnerability isn’t complex crypto or heavy exploitation — it’s developer mistakes left…
58 views
Daily Writeups
⤷ Title: Compromised IAM Credentials Power a Large AWS Crypto Mining Campaign
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 22:05:00 +0530
════════════════════════
⌗ Tags: No_Tags
46 views
Daily Writeups
⤷ Title: Rogue NuGet Package Poses as Tracer.Fody, Steals Cryptocurrency Wallet Data
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 21:09:00 +0530
════════════════════════
⌗ Tags: No_Tags
42 views
Daily Writeups
⤷ Title: Amazon: Russian GRU hackers favor misconfigured devices over vulnerabilities
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 17:55:38 +0000
════════════════════════
⌗ Tags: #Security #0day #Amazon #APT44 #AWS #Curly COMrades #Cyber Attack #Cyber Crime #Cybersecurity #GRU #Malware #Russia #Sandworm #Seashell Blizzard #Vulnerability
Hackread
Amazon: Russian GRU hackers favor misconfigured devices over vulnerabilities
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
33 views
Daily Writeups
⤷ Title: You Are Awesome PDF! (SSRF VM Challenge)
════════════════════════
𐀪 Author: Josh Beck
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 16:44:53 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #bug_bounty
Medium
You Are Awesome PDF! (SSRF VM Challenge)
Lab Objective:
22 views