Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: The AI-Powered Cybercrime Factory: Unmasking the Bluekit “All-in-One” Phishing Revolution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:30:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Phishing #Bluekit #Credential Theft #cybersecurity #infosec #Phishing_as_a_Service #Quishing #Session Hijacking #social engineering #Threat Intel #Varonis
Daily CyberSecurity
The AI-Powered Cybercrime Factory: Unmasking the Bluekit "All-in-One" Phishing Revolution
Varonis uncovers Bluekit, a new phishing-as-a-service kit using AI and 40+ templates to automate session hijacking and credential theft. See how it works.
27 views
Daily Writeups
⤷ Title: Cookies Explained: How Websites Remember You, And How Attackers Exploit It
════════════════════════
𐀪 Author: Amarachi Onyekachi
════════════════════════
ⴵ Time: Tue, 05 May 2026 06:42:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #cybersecurity #cookies #web_security #session_management
Medium
Cookies Explained: How Websites Remember You, And How Attackers Exploit It
How cookies work, why they matter, and how attackers exploit them.
36 views
Daily Writeups
⤷ Title: Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:01:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Wicket #CVE_2026_40010 #CVE_2026_43646 #CVE_2026_43975 #infosec #Java security #Patch Alert #Path Traversal #Session Fixation #web development #XSS
Daily CyberSecurity
Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass
Apache Wicket 10.9.0 fixes 3 Critical flaws: Path Traversal (CVE-2026-43975), Session Fixation, and Resource Guard bypass. Secure your Java apps and patch now!
13 views
Daily Writeups
⤷ Title: A Simple Session Management Bug Every Beginner Bug Hunter Should Test.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Fri, 15 May 2026 10:23:43 GMT
════════════════════════
⌗ Tags: #simple_bugs #bug_bounty #session_management #p4_bugs
Medium
A Simple Session Management Bug Every Beginner Bug Hunter Should Test.
When beginners start bug bounty hunting, most of them spend hours testing XSS payloads, SQL injection, IDORs, and other well-known…
26 views
Daily Writeups
⤷ Title: Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:04:06 +0000
════════════════════════
⌗ Tags: #Malware #@antv Malicious Packages #atool Maintainer Account #CI/CD Secret Stealer #Claude Code Backdoor #OIDC Token Hijacking #Session P2P Network #Shai_Hulud npm Attack #Sigstore Provenance Forgery #Software Supply Chain Worm #Visual Studio Code Malware
Penetration Testing Tools
Shai-Hulud Malware Hits @antv Ecosystem, Poisoning Hundreds of npm Packages
The npm ecosystem has been subjected to a massive, highly coordinated supply-chain assault. Within a compressed one-hour envelope,
34 views
Daily Writeups
⤷ Title: Anonymity Stripped: Unsecured Kibana and Dozzle Dashboards Leak 22 Million FTF Live Video Chat Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:05 +0000
════════════════════════
⌗ Tags: #Data Leak #Burhan LTD #Cooy Ads Ltd #Data Leak Cybernews #De_anonymization Risk #Dozzle Docker Logs #FTF Live Video Chat #Real_time Token Leak #Regional CERT Escalation #Session Metadata Exposure #Unsecured Kibana Dashboard
Penetration Testing Tools
Anonymity Stripped: Unsecured Kibana and Dozzle Dashboards Leak 22 Million FTF Live Video Chat Records
The FTF Live video-chat ecosystem, which explicitly guaranteed its consumer base absolute anonymity during randomized social interactions, has
25 views
Daily Writeups
⤷ Title: Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 07:26:35 +0000
════════════════════════
⌗ Tags: #Malware #Chromium Browsers #Clipboard Hijacker #Control Flow Flattening #Cyber Security #Discord Token Stealer #Gremlin Stealer #infosec #Infostealer #MFA Bypass #Session Hijacking #Unit 42
Daily CyberSecurity
Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker
Unit 42 exposes the new Gremlin stealer. It uses memory-resident techniques to hijack active browser session tokens and completely bypass MFA.
15 views
Daily Writeups
⤷ Title: Splunk Patches High-Severity Bugs Granting DoS and Internal Log Leaks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 01:20:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #CVE_2026_20238 #CVE_2026_20239 #CVE_2026_20240 #Cyber Security #Denial of Service #infosec #Log Leak #Session Cookie Exposure #Splunk AI Toolkit #Splunk Enterprise
Daily CyberSecurity
Splunk Patches High-Severity Bugs Granting DoS and Internal Log Leaks
Splunk releases coordinated patches for CVE-2026-20240 and adjacent flaws exposing raw session cookies, data filters, and triggering server DoS.
18 views
Daily Writeups
⤷ Title: A Simple Session Management Bug Every Beginner Bug Hunter Should Test.
════════════════════════
𐀪 Author: kjulius
════════════════════════
ⴵ Time: Sat, 23 May 2026 08:18:09 GMT
════════════════════════
⌗ Tags: #simple_bugs #bug_bounty #session_management #p4_bugs
Medium
A Simple Session Management Bug Every Beginner Bug Hunter Should Test.
When beginners start bug bounty hunting, most of them spend hours testing XSS payloads, SQL injection, IDORs, and other well-known…
22 views
Daily Writeups
⤷ Title: VaultJacking: Exploiting Google Sync Infrastructure via Intercepted PINs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:41:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cross_site authentication data theft #Google Workspace proxy environment hijacking #iCloud Keychain vs Google security architecture #multi_platform synchronized repository dump #PhishU Adversary_in_the_Middle framework #session cookie token theft mitigations #synchronization PIN credential exfiltration #unauthorized trusted device registry #VaultJacking Google password phishing #WebAuthn hardware perimeter bypass
Information Security News
VaultJacking: Exploiting Google Sync Infrastructure via Intercepted PINs
The Genesis of the VaultJacking Attack Vector A solitary numeric PIN can transform Google’s password repository into an unsecured gateway. Consequently, the emerging VaultJacking phishing methodol…
12 views
Daily Writeups
⤷ Title: Cryptographic Paradigm Shift: Google Officially Launches Device Bound Session Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 31 May 2026 10:26:03 +0000
════════════════════════
⌗ Tags: #Google #browser session hijacking defense #cookie refresh token rotation #Device Bound Session Credentials #Google Chrome DBSC protocol #hardware bound authentication security #infostealer malware protection #macOS Secure Enclave key pairs #session cookie theft mitigation #W3C web security standards #Windows TPM cryptographic binding
Information Security News
Device Bound Session Credentials: Google Neutralizes Cookie Theft
Google debuts Device Bound Session Credentials (DBSC). Learn how this hardware-anchored TPM protocol stops session hijacking and cookie theft.
38 views
Daily Writeups
⤷ Title: Weaponizing Management Consoles: The FortiClient EMS Exploitation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 03:25:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arctic Wolf Labs report #CVE_2026_35616 vulnerability #EKZ Infostealer analysis #endpoint security bypass #FortiClient EMS exploit #session cookie hijacking
Information Security News
FortiClient EMS Exploit: EKZ Infostealer Malware Guide
Analyze the recent FortiClient EMS exploit. Learn how attackers leverage CVE-2026-35616 to deliver EKZ Infostealer and bypass endpoint protection.
14 views
Daily Writeups
⤷ Title: phpBB Authentication Bypass Fixed in Version 3.3.17
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Jun 2026 03:35:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Aikido Security #authentication bypass #Forum Security #phpBB #Session Hijacking #Web Vulnerability
Information Security News
phpBB Authentication Bypass Fixed in Version 3.3.17
A critical phpBB authentication bypass in 3.3.16 and earlier lets attackers hijack any user session with a single HTTP request. Update now.
10 views
Daily Writeups
⤷ Title: Payroll Pirate Hijacks Sessions to Steal Paychecks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 07:25:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM Phishing #Business Email Compromise #MFA Bypass #Payroll Fraud #Payroll Pirate #Session Hijacking
Information Security News
Payroll Pirate Hijacks Sessions to Steal Paychecks
BushidoToken details Payroll Pirate, an AiTM phishing campaign that hijacks authenticated sessions to redirect payroll payments to attackers.
12 views
Daily Writeups
⤷ Title: $900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
════════════════════════
𐀪 Author: Abhi Sharma
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:31:01 GMT
════════════════════════
⌗ Tags: #information_security #session_flaw #bug_bounty #programming #cybersecurity
Medium
$900 Session Flaw: Deprovisioned Users Retain Access After Permission Removal
Hi Everyone! Recently, while testing a SaaS platform (let’s call it ExampleCenter), I came across a very interesting access control issue…
16 views
Daily Writeups
⤷ Title: Session Fixation
════════════════════════
𐀪 Author: Ahemd ashraf
════════════════════════
ⴵ Time: Tue, 07 Jul 2026 21:06:39 GMT
════════════════════════
⌗ Tags: #session_fixation #bugbounty_writeup #bug_bounty_tips
Medium
Session Fixation
Title
22 views
Daily Writeups
⤷ Title: pretix Patches Two Critical Session Takeover and SSRF Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 13:14:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #API Key Leak #CVE_2026_13602 #CVE_2026_13603 #Payment Plugins #pretix #Session Takeover #ssrf
Daily CyberSecurity
pretix Patches Two Critical Session Takeover and SSRF Flaws
The pretix team shipped version 2026.5.3 to fix two critical flaws. The update also covers 2026.4.5 and 2026.3.5.post1, plus several payment plugins. Both bugs rate critical, so admins should patc…
13 views
Daily Writeups
⤷ Title: The Wristband Problem
════════════════════════
𐀪 Author: Sentinel Layer
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 03:01:02 GMT
════════════════════════
⌗ Tags: #web_security #authentication #application_security #cybersecurity #session_hijacking
Medium
The Wristband Problem
The Wristband Problem! A few years ago I stayed at an all-inclusive resort for a friend’s wedding. At check-in, they scanned my ID, took a photo, and clipped a paper wristband around my wrist …
8 views
Daily Writeups
⤷ Title: Session Management | TryHackMe WalkThrough
════════════════════════
𐀪 Author: Cyrus Isaac
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:57:38 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #session_management #tryhackme_writeup
Medium
Session Management | TryHackMe WalkThrough
Task1: Introduction
23 views
Daily Writeups
⤷ Title: Logout Security Testing Checklist
════════════════════════
𐀪 Author: Varshith Reddy
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 06:20:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #session_management #authentication #web_security
Medium
Logout Security Testing Checklist
Session Invalidation
10 views