Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Blind SQL Injection with conditional responses
════════════════════════
𐀪 Author: Bea Dela Cruz
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 03:17:08 GMT
════════════════════════
⌗ Tags: #conditional_response #sql_injection #blind_sql_injection
Medium
Blind SQL Injection with conditional responses
The application does not display the SQL query results or any error messages, but it does return a distinct and specific response when the…
34 views
Daily Writeups
⤷ Title: Beyond the IDE: How Google’s New Android CLI Enables 3x Faster Agent-Led Development
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:42:43 +0000
════════════════════════
⌗ Tags: #Android #Agentic AI #AI Agents #Android CLI #Android Knowledge Base #Android SDK #Android Skills #Android Studio #CI/CD #DevOps #Mobile Development
Daily CyberSecurity
Beyond the IDE: How Google’s New Android CLI Enables 3x Faster Agent-Led Development
Google launches the Android CLI for agent-centric workflows. Reduce LLM token usage by 70% and accelerate app development 3x with official AI-ready tools.
33 views
Daily Writeups
⤷ Title: The Infinite Factory: How “Vibe Coding” Sparked a 104% Explosion in AI-Generated Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:30:36 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #App Store #Appfigures 2026 #Apple Security #Claude Code #GitHub Copilot #Ledger Live Scam #Micro_apps #Mobile App Trends #Replit #Vibe Coding
Daily CyberSecurity
The Infinite Factory: How "Vibe Coding" Sparked a 104% Explosion in AI-Generated Apps
AI didn't kill the app—it became the production line. Discover how Vibe Coding fueled a 104% surge in new apps and the security risks facing Apple in 2026.
19 views
Daily Writeups
⤷ Title: One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:11:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BNB Smart Chain #crypto drainer #Cyfirma #Drainer_as_a_Service #ERC_20 Approve #infosec #QR Code Scam #Telegram Phishing #Trust Wallet #USDT #Web3 security
Daily CyberSecurity
One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
A new QR code "drainer" targets Trust Wallet users on Telegram. It exploits the ERC-20 approve mechanism to wipe USDT. Learn how to protect your assets now.
17 views
Daily Writeups
⤷ Title: The High-End Interregnum: Why Global Part Shortages Just Pushed the New Mac Studio to October
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 05:49:11 +0000
════════════════════════
⌗ Tags: #Technology #Apple #Creative Professionals #M4 Max #M5 Ultra #Mac mini #Mac Studio #MacBook Pro #Mark Gurman #Semiconductor Shortage #Supply Chain #WWDC 2026
Daily CyberSecurity
The High-End Interregnum: Why Global Part Shortages Just Pushed the New Mac Studio to October
Apple’s next Mac Studio is reportedly delayed until October. Global memory shortages and a pivot toward MacBook production have left power users in the lurch.
16 views
Daily Writeups
⤷ Title: That’s how I turned a simple parameter into full email content injection in a trusted password…
════════════════════════
𐀪 Author: mickoz
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:06:13 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #api_security #web_security
Medium
That’s how I turned a simple parameter into full email content injection in a trusted password reset flow
بِسْمِ اللَّـهِ الرَّحْمَٰنِ الرَّحِيمِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَىٰ الْمَبْعُوثِ رَحْمَةً لِلْعَالَمِينَ ﷺ
12 views
Daily Writeups
⤷ Title: API Vulnerabilities — The Modern Attack Surface Most Hunters Underestimate
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 05:39:47 GMT
════════════════════════
⌗ Tags: #security #hacking #bug_bounty #linux #cybersecurity
Medium
🔗 API Vulnerabilities — The Modern Attack Surface Most Hunters Underestimate
✍️ Introduction
13 views
Daily Writeups
⤷ Title: How I Found a GraphQL Endpoint Leaking Millions
════════════════════════
𐀪 Author: Prateekpulastya
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 05:29:43 GMT
════════════════════════
⌗ Tags: #data_leak_prevention #graphql #bug_bounty #vulnerability_management #bug_bounty_writeup
Medium
How I Found a GraphQL Endpoint Leaking Millions
User Records Without Authentication
14 views
Daily Writeups
⤷ Title: From Alert Lists to Exploit Graphs: How Auditor Core Changes the Security Calculus
════════════════════════
𐀪 Author: Eldor Zufarov
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:21:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #devsecops #risk_management #software_architecture
Medium
From Alert Lists to Exploit Graphs: How Auditor Core Changes the Security Calculus
By Eldor Zufarov, Founder of Auditor Core
18 views
Daily Writeups
⤷ Title: Fui a un Congreso de Ciberseguridad
════════════════════════
𐀪 Author: FN8
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:47:12 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #español #ciberseguridad
Medium
Fui a un Congreso de Ciberseguridad
Fui a un congreso de ciberseguridad ViCONgal… y salí con más hambre que nunca.
18 views
Daily Writeups
⤷ Title: Best Telegram OSINT Tools
════════════════════════
𐀪 Author: Sumit Raj
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 05:40:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint_tool #infosec #osint
Medium
Best Telegram OSINT Tools
Hi you might know me on twitter by 0xsumitttt ,so recently I was discovering OSINT tools and i came through some amazing OSINT tools to…
20 views
Daily Writeups
⤷ Title: Shadow AI in the Workplace: The Hidden Security Risks of Unauthorized AI Tool Usage
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:14:44 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #information_security #cybersecurity #ethical_hacking #ai
Medium
Shadow AI in the Workplace: The Hidden Security Risks of Unauthorized AI Tool Usage
Introduction: The Silent Rise of Uncontrolled AI
39 views
Daily Writeups
⤷ Title: Uncovering Port Scanning Activity: Network Analysis with Nmap & Wireshark
════════════════════════
𐀪 Author: Nadia Fairuz
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 04:49:39 GMT
════════════════════════
⌗ Tags: #network_security #nmap #wireshark #ethical_hacking #cybersecurity
Medium
Uncovering Port Scanning Activity: Network Analysis with Nmap & Wireshark
Abstract
44 views
Daily Writeups
⤷ Title: Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 13:04:00 +0530
════════════════════════
⌗ Tags: No_Tags
40 views
Daily Writeups
⤷ Title: systeminformer: monitor system resources, debug software and detect malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:15:43 +0000
════════════════════════
⌗ Tags: #Open Source Tool #systeminformer
Penetration Testing Tools
systeminformer: monitor system resources, debug software and detect malware
systeminformer is a free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware
31 views
Daily Writeups
⤷ Title: The “Covered List” Reprieve: How FCC Notice DA-26-351 Is Reshaping National Network Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:13:39 +0000
════════════════════════
⌗ Tags: #Technology
Penetration Testing Tools
The "Covered List" Reprieve: How FCC Notice DA-26-351 Is Reshaping National Network Security
FCC directive DA-26-351 grants conditional approval for select routers and drones, exempting them from the Covered List. Explore the impact on network security.
14 views
Daily Writeups
⤷ Title: The Open Vault: How a Flaw in the Rhadamanthys Control Panel Saved 70,000 Victims
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:10:08 +0000
════════════════════════
⌗ Tags: #Malware #API Vulnerability #C2 Server #Command and Control #cybersecurity #Infostealer #malware #Rhadamanthys #SANS CTI Summit 2026 #threat intelligence #Victim Notification
Penetration Testing Tools
The Open Vault: How a Flaw in the Rhadamanthys Control Panel Saved 70,000 Victims
A vulnerability within the control panel of the Rhadamanthys infostealer unexpectedly provided a rare opportunity to safeguard victims,
15 views
Daily Writeups
⤷ Title: The $10,000 Pocket Pick: How Hackers Can Drain Your iPhone Without Unlocking It
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:04:04 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apple Wallet #Contactless Payment #cybersecurity #Express Transit Mode #Fraud Prevention #iPhone security #Marques Brownlee #NFC Attack #Veritasium #visa
Penetration Testing Tools
The $10,000 Pocket Pick: How Hackers Can Drain Your iPhone Without Unlocking It
A disconcerting narrative regarding the iPhone and the surreptitious theft of funds from a locked device has once
14 views
Daily Writeups
⤷ Title: The Phantom Hypervisor: How Payouts King Uses QEMU to Hide Ransomware Inside Virtual Machines
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 08:01:37 +0000
════════════════════════
⌗ Tags: #Malware #3AM Ransomware #Alpine Linux #CitrixBleed 2 #Cyber Security #EDR evasion #GOLD ENCOUNTER #Payouts King #QEMU #ransomware #Sophos #Virtualization Security
Penetration Testing Tools
The Phantom Hypervisor: How Payouts King Uses QEMU to Hide Ransomware Inside Virtual Machines
Ransomware syndicates are increasingly adopting the clandestine practice of concealing their malicious artifacts not merely adjacent to the
14 views
Daily Writeups
⤷ Title: Digital Squatters in the Ivory Tower: How “Hazy Hawk” Hijacked Harvard, MIT, and Stanford Subdomains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 07:58:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.edu domains #CNAME records #cybersecurity #Dangling DNS #DNS hijacking #DNS Sanitation #Hazy Hawk #Higher Education Security #Infoblox #Subdomain Takeover
Penetration Testing Tools
Digital Squatters in the Ivory Tower: How "Hazy Hawk" Hijacked Harvard, MIT, and Stanford Subdomains
A network of American universities has become ensnared in a pervasive assault that targeted not their instructional infrastructures
13 views