Daily Writeups
@Daily_Writeups
3.47K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.47K subscribers
Daily Writeups
⤷ Title: JavaScript: Simple Demo — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:07:07 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #tryhackme_walkthrough #javascript #tryhackme_pre_security
Medium
JavaScript: Simple Demo — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
Room: JavaScript: Simple Demo
Room URL: https://tryhackme.com/room/javascriptsimpledemo
Difficulty: Medium
Please…
19 views
Daily Writeups
⤷ Title: TryHackMe Payload — AI Supply Chain Security Walkthrough
════════════════════════
𐀪 Author: Jose A Ruiz Marquez
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:52:03 GMT
════════════════════════
⌗ Tags: #ai #supply_chain #cybersecurity #tryhackme_walkthrough #tryhackme
Medium
TryHackMe Payload — AI Supply Chain Security Walkthrough
A Practical DFIR Investigation into Malicious ML Artefacts, Unsafe Deserialization, and Inference-Time Manipulation
15 views
Daily Writeups
⤷ Title: Penetration Testing Frameworks (TryHackMe Room)
════════════════════════
𐀪 Author: Amr Sebie
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:43:05 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #tryhackme_walkthrough #tryhackme_writeup #ctf
Medium
Penetration Testing Frameworks (TryHackMe Room)
Lab link:https://tryhackme.com/room/penetrationtestingframeworks
17 views
Daily Writeups
⤷ Title: Prompt Injection Walkthrough | TryHackMe
════════════════════════
𐀪 Author: Akash Kumar
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:42:57 GMT
════════════════════════
⌗ Tags: #tryhackme #prompt_injection_attack #writing_prompts #ai_injection_prompt #llm_prompt_injection
Medium
Prompt Injection Walkthrough | TryHackMe
Room: https://tryhackme.com/room/promptinjectionls
Youtube Link : https://youtu.be/apQ-HQPbOTA https://youtu.be/6gQrEz0xBMY
15 views
Daily Writeups
⤷ Title: Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
════════════════════════
𐀪 Author: Dhruv Thakur
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:03:13 GMT
════════════════════════
⌗ Tags: #openid_connect #sso #aml #api_security #oauth
Medium
Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
When you click “Sign in with Google” on some app you just downloaded, something interesting happens. The app gets access to your data. Your…
25 views
Daily Writeups
⤷ Title: NestJS Rate Limiting Using @nestjs/throttler
════════════════════════
𐀪 Author: Ravi Mewada
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #backend #rate_limiting #nodejs #api_security #nestjs
Medium
NestJS Rate Limiting Using @nestjs/throttler
When we build APIs, one thing that is really important, for security is rate limiting.
31 views
Daily Writeups
⤷ Title: Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 29 May 2026 11:27:41 +0530
════════════════════════
⌗ Tags: No_Tags
27 views
Daily Writeups
⤷ Title: Algorithmic Infiltration: Microsoft Unmasks Generative AI Poisoning in Cryptojacking Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:43:30 +0000
════════════════════════
⌗ Tags: #Malware #autorun.dll sideloading exploit #cryptocurrency harvesting evasion techniques #Dynu dynamic DNS infrastructure #Fake hardware monitoring cryptojacker #HWMonitor FurMark cloned malware #Microsoft Defender registry exclusions #poisoned AI chatbot search results #ScreenConnect remote access trojan #SimpleRunPE.exe process injection #smart GPU throttling miner
Information Security News
Fake Hardware Monitoring Cryptojacker Hijacks High-End GPUs
Microsoft exposes a stealthy fake hardware monitoring cryptojacker mimicking FurMark and HWMonitor. It masks its GPU usage to avoid detection.
28 views
Daily Writeups
⤷ Title: Race Conditions Are Simpler Than You Think (Here’s How I Test for Them)
════════════════════════
𐀪 Author: Decline
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:48:49 GMT
════════════════════════
⌗ Tags: #bugbounty_writeup #bug_hunting #bug_bounty #bug_bounty_tips #bug_bounty_writeup
Medium
Race Conditions Are Simpler Than You Think (Here’s How I Test for Them)
I used to hear “race condition” and zone out. Sounded like something you needed a PhD for. Multi-threading. Timing windows. Complex stuff. Then I actually found one by accident and realized how …
22 views
Daily Writeups
⤷ Title: Web Server Attacks — I
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:49:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_server_attacks #tryhackme
Medium
Web Server Attacks — I
Enumerate and identify misconfigurations across Apache, Nginx, Node.js, and Python HTTP Server.
25 views
Daily Writeups
⤷ Title: Broken Authentication | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:48:04 GMT
════════════════════════
⌗ Tags: #broken_authentication #cybersecurity #tryhackme #brute_force #cookie_manipulation
Medium
Broken Authentication | TryHackMe
Learn how to defeat logins and other authentication mechanisms to allow you access to unpermitted areas.Learn how to defeat logins and…
33 views
Daily Writeups
⤷ Title: Rising Chinese PhaaS Ecosystem Bypasses Modern Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:33:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese PhaaS #Digital Wallet Fraud #Google Threat Intelligence #MFA Bypass #Phishing_as_a_Service #Real_Time Interception #threat intelligence
Daily CyberSecurity
Rising Chinese PhaaS Ecosystem Bypasses Modern Security Controls
Discover how the Chinese PhaaS ecosystem uses real-time interception and AI automation to bypass MFA and exploit digital wallets.
28 views
Daily Writeups
⤷ Title: China-Based Red Lamassu Targets Telecoms Across Asia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:37:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Calypso APT #cyber_espionage #JFMBackdoor #PwC Threat Intelligence #Red Lamassu #Telecommunications cyberattack
Daily CyberSecurity
China-Based Red Lamassu Targets Telecoms Across Asia
Learn how the Red Lamassu threat actor targets telecom networks with the newly discovered JFMBackdoor malware framework.
34 views
Daily Writeups
⤷ Title: Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:33:06 +0000
════════════════════════
⌗ Tags: #Malware #DPAPILoader #Fileless Malware #Fox_IT #Lazarus Group #Memory_Only Malware #RemotePE #RemotePELoader #threat intelligence
Daily CyberSecurity
Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT
Fox-IT uncovers a sophisticated Lazarus memory-only toolset used to compromise financial firms via an evasive three-stage malware pipeline.
17 views
Daily Writeups
⤷ Title: What Actually Happens When You Use AI to Hunt Bug Bounties in 2026
════════════════════════
𐀪 Author: Masood Nfc
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:47:50 GMT
════════════════════════
⌗ Tags: #programming #artificial_intelligence #cybersecurity #hacking #bug_bounty
Medium
What Actually Happens When You Use AI to Hunt Bug Bounties in 2026
The honest workflow, not the Twitter version.
15 views
Daily Writeups
⤷ Title: 20 Web Developer Mistakes That Make a Penetration Tester’s Job Easy
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:38:45 GMT
════════════════════════
⌗ Tags: #information_security #cyber_security_awareness #bug_bounty #cybersecurity #pentesting
Medium
20 Web Developer Mistakes That Make a Penetration Tester’s Job Easy
I have been on the other side of your codebase. Here is exactly what I look for and what you should fix before I find it.
12 views
Daily Writeups
⤷ Title: Day 5 — Identifying Entry Points in Web Applications
════════════════════════
𐀪 Author: Z3r0D4y
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:01:03 GMT
════════════════════════
⌗ Tags: #api #cybersecurity #bug_bounty #web_security #infosec
Medium
Day 5 — Identifying Entry Points in Web Applications
When testing a web application, one of the most important phases is identifying entry points.
9 views
Daily Writeups
⤷ Title: From Zero to System Root: The Power of Vulnerability Chaining in Web Penetration Testing
════════════════════════
𐀪 Author: Vivek Bhatt
════════════════════════
ⴵ Time: Fri, 29 May 2026 07:57:09 GMT
════════════════════════
⌗ Tags: #ethical_hacking #remote_code_execution #application_security #red_teaming #chaining_vulnerabilities
Medium
From Zero to System Root: The Power of Vulnerability Chaining in Web Penetration Testing
How a sequence of low and medium-severity flaws can be weaponized to achieve full infrastructure compromise.
10 views
Daily Writeups
⤷ Title: Why Subdomain Takeovers Are Still the Easiest Bounty Money in 2026
════════════════════════
𐀪 Author: Masood Nfc
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:50:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #programming #hacking
Medium
Why Subdomain Takeovers Are Still the Easiest Bounty Money in 2026
Thirty minutes of work. Four figure payouts. The vuln class that refuses to die.
11 views
Daily Writeups
⤷ Title: I Built an Enterprise Home Network SOC Platform — Here’s How
════════════════════════
𐀪 Author: Muhammad zubair
════════════════════════
ⴵ Time: Fri, 29 May 2026 08:16:49 GMT
════════════════════════
⌗ Tags: #programming #cybersecurity #hacking #network_security #technology
Medium
I Built an Enterprise Home Network SOC Platform — Here’s How
As a cybersecurity student and intern, I always wanted to monitor my home network like a real Security Operations Center. So I built one.
11 views