Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: When Static Analysis Turns Dangerous: Command Injection in NASA’s Cobra Tool
════════════════════════
𐀪 Author: dark-haxor
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 19:20:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #cobra #static_code_analyzer #penetration_testing #static_code_analysis
Medium
🐍 When Static Analysis Turns Dangerous: Command Injection in NASA’s Cobra Tool
What is Cobra?
32 views
Daily Writeups
⤷ Title: Binary to Behavior: Decode Threats with the Unified “Malware-Check” Analysis Engine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:26:41 +0000
════════════════════════
⌗ Tags: #Open Source Tool #binary analyzer #cybersecurity tools #DevSecOps #Docker sandbox #dynamic analysis #malware analysis #malware_check #MobSF #reverse engineering #SARIF #Static Analysis #YARA
Penetration Testing Tools
Binary to Behavior: Decode Threats with the Unified "Malware-Check" Analysis Engine
Detect backdoors, ransomware, and privacy leaks. Malware-Check combines YARA rules, Docker sandboxing, and MobSF for deep static and dynamic analysis.
35 views
Daily Writeups
⤷ Title: How to Build a World-Class SAST Program from Scratch
════════════════════════
𐀪 Author: Vikrant Waghmode
════════════════════════
ⴵ Time: Wed, 06 May 2026 21:44:00 GMT
════════════════════════
⌗ Tags: #semgrep #application_security #cybersecurity #static_code_analysis
Medium
How to Build a World-Class SAST Program from Scratch
A practitioner’s guide to transforming static analysis security testing — from creating the vision to selecting the right tools through…
12 views
Daily Writeups
⤷ Title: From Deep Link to Shell: Easy $3000 Android Crits.
════════════════════════
𐀪 Author: tinopreter
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 23:19:13 GMT
════════════════════════
⌗ Tags: #android #hackerone #static_code_analysis #rce #deeplink
Medium
From Deep Link to Shell: Easy $3000 Android Crits.
Akwaaba! gang, another part of my Static Android App Hacking series, today our focus is on exploiting Deep Links to achieve RCE. An easy…
35 views
Daily Writeups
⤷ Title: Cloudflare Launches Drop for Temporary and Permanent Static Site Hosting
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 03:17:10 +0000
════════════════════════
⌗ Tags: #Technology #cloudflare #Cloudflare Drop #Static Website #Web Hosting
Daily CyberSecurity
Cloudflare Launches Drop for Temporary and Permanent Static Site Hosting
Network service provider Cloudflare recently introduced an innovative feature named Drop. This capability allows users to host purely static websites effortlessly. According to its core design log…
27 views
Daily Writeups
⤷ Title: Intro to Malware…… | THM Walkthrough | by Dharavath Nagaraju
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:40:16 GMT
════════════════════════
⌗ Tags: #sandboxing #static_and_dynamic #malware_analysis #cybersecurity #tryhackme
Medium
Intro to Malware…… | THM Walkthrough | by Dharavath Nagaraju
This room introduces the fundamentals of malware analysis and the techniques used to safely investigate malicious software. It covers the…
41 views
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
27 views
Daily Writeups
⤷ Title: Cisco FMC Flaw CVE-2026-20316 Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 21:43:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Actively Exploited #Cisco FMC #Cisco Secure Firewall #CVE_2026_20316 #Known Exploited Vulnerability #Static Credentials
Daily CyberSecurity
Cisco FMC Flaw CVE-2026-20316 Exploited in the Wild
TL;DR Cisco is warning about a Cisco FMC vulnerability under active attack. Tracked as CVE-2026-20316, it lets a remote attacker log in using a hidden static account. Cisco confirms exploitation, …
26 views
Daily Writeups
⤷ Title: Day 26: Cross-Site Scripting (XSS) - Hacker Sidekick Certified Vibe Hacker CTF Walkthrough
════════════════════════
𐀪 Author: Sofia Batala
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 04:08:16 GMT
════════════════════════
⌗ Tags: #xss_attack #xss_vulnerability #hacker_sidekick #static_code_analysis #ctf
Medium
Day 26: Cross-Site Scripting (XSS) - Hacker Sidekick Certified Vibe Hacker CTF Walkthrough
## Challenge: User-provided data is rendered in HTML templates without proper encoding, allowing JavaScript injection attacks. What…
32 views
Daily Writeups
⤷ Title: Build Self-Hosted SAST with pipeline DefectDojo
════════════════════════
𐀪 Author: Rizqi Ramadhan Andriono
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 13:41:47 GMT
════════════════════════
⌗ Tags: #defectdojo #static_code_analysis #security #penetration_testing #sonarqube
Medium
Build Self-Hosted SAST with pipeline DefectDojo
Static application security testing with DefectDojo as main dashboard using open source tools; SonarQube Community version, , OSV, Semgrep…
12 views
Daily Writeups
⤷ Title: Part II: Analytic Tools
════════════════════════
𐀪 Author: EW
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 14:07:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #devsecops #software_development #static_analysis #application_security
Medium
Part II: Analytic Tools
Static vs. Dynamic Analysis: Two Essential Lenses for Secure Software
11 views
Daily Writeups
⤷ Title: Free models + open-source SAST + offensive Skills matched frontier CVE finds. Cost: about $0.
════════════════════════
𐀪 Author: MixBanana
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 11:19:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #open_source #static_analysis #application_security #artificial_intelligence
Medium
Free models + open-source SAST + offensive Skills matched frontier CVE finds. Cost: about $0.
Subtitle: Everyone argued about Sol and Mythos. I wired tools and Skills into cheap models and got the same class of bugs on public code.
13 views
Daily Writeups
⤷ Title: We Built the Only Java Static Analyzer That Finds What Semgrep, CodeQL, and the We Built the Only…
════════════════════════
𐀪 Author: Suman Lamichhane
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 16:17:56 GMT
════════════════════════
⌗ Tags: #java #cybersecurity #application_security #static_analysis #spring_boot
Medium
We Built the Only Java Static Analyzer That Finds What Semgrep, CodeQL, and the We Built the Only Java Static Analyzer That Finds…
The problem nobody talks aboutICLR 2025 IRIS Paper All Miss
14 views
Daily Writeups
⤷ Title: We Found Authorization Vulnerabilities in Two of GitHub’s Most-Starred Java Repositories — Semgrep…
════════════════════════
𐀪 Author: Suman Lamichhane
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 15:01:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #spring_boot #application_security #java #static_analysis
Medium
We Found Authorization Vulnerabilities in Two of GitHub’s Most-Starred Java Repositories — Semgrep and CodeQL Both Missed Them
110,000 combined stars. Zero authorization findings from the industry-standard scanners. Here’s what a purpose-built tool found instead.
27 views
Daily Writeups
⤷ Title: How does a SAST scanner decide which line of code to flag?
════════════════════════
𐀪 Author: Codeunderfire
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 00:19:53 GMT
════════════════════════
⌗ Tags: #software_engineering #devsecops #static_analysis #secure_coding #application_security
Medium
How does a SAST scanner decide which line of code to flag?
A SAST scanner parses source code into a syntax tree, follows how values move through it, and flags the exact line where a tainted input…
24 views
Daily Writeups
⤷ Title: What a Real-World Security Audit Taught Me About the Vulnerabilities That Just Won’t Die
════════════════════════
𐀪 Author: PWNXOTUS
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 16:23:07 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #security_audit #cybersecurity #application_security #static_code_analysis
Medium
What a Real-World Security Audit Taught Me About the Vulnerabilities That Just Won’t Die
Every year, OWASP publishes its Top 10. Every year, security teams cite it in training decks. And yet, when you actually dig into a…
13 views
Daily Writeups
⤷ Title: Practical Malware Analysis — Lab 1–1: Basic Static Analysis Writeup
════════════════════════
𐀪 Author: Mahmoud Alawady
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 20:15:36 GMT
════════════════════════
⌗ Tags: #malware_analysis #static_analysis #cybersecurity #malware #hacking
Medium
Practical Malware Analysis — Lab 1–1
A basic static analysis of Lab 1-1 from Practical Malware Analysis book covering imports, strings, compilation details and IOCs
13 views
Daily Writeups
⤷ Title: Practical Malware Analysis — Lab 1–2: Basic Static Analysis Writeup
════════════════════════
𐀪 Author: Mahmoud Alawady
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 14:19:25 GMT
════════════════════════
⌗ Tags: #reverse_engineering #malware_analysis #static_malware_analysis #cybersecurity #hacking
Medium
Practical Malware Analysis — Lab 1–2: Basic Static Analysis Writeup
A basic static analysis of Lab 1–2 from Practical Malware Analysis book covering imports, strings and IOCs
32 views
Daily Writeups
⤷ Title: Practical Malware Analysis — Lab 1–4: Basic Static Analysis Write-up
════════════════════════
𐀪 Author: Mahmoud Alawady
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 22:51:03 GMT
════════════════════════
⌗ Tags: #malware_analysis #malware #static_analysis #cybersecurity #hacking
Medium
Practical Malware Analysis — Lab 1–4: Basic Static Analysis Write-up
In this lab, we will analyze lab 1–4 from Practical Malware Analysis book. The goal is to examine the malware sample Lab01–04.exe using…
49 views
Daily Writeups
⤷ Title: I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 00:00:51 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #application_security #static_analysis #mcps
Medium
I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
In the previous post in this series I built a 10-test harness for the MCP 2026–07–28 authorization rules. A quickstart-style server passed…
23 views