Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: ShadowLink Exposed: How Your Home Router Became a Puppet for Corporate Supply Chain Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:09:12 +0000
════════════════════════
⌗ Tags: #Malware #Asus #CVE_2024_21833 #cybersecurity #GitHub Actions #malware #proxy network #ShadowLink #supply chain attack #TP_Link #Xygeni
Penetration Testing Tools
ShadowLink Exposed: How Your Home Router Became a Puppet for Corporate Supply Chain Attacks
The compromise of a residential router may initially appear as a localized grievance, while the manipulation of code
17 views
Daily Writeups
⤷ Title: GoHPTS (go-http-proxy-to-socks) v1.14.0:
════════════════════════
𐀪 Author: Shadowy Pycoder
════════════════════════
ⴵ Time: Fri, 22 May 2026 07:52:17 GMT
════════════════════════
⌗ Tags: #golang #proxy #hacking
Medium
GoHPTS (go-http-proxy-to-socks) v1.14.0:
In this new update I added HTTP/2, HTTP/3, and pcap capture support to GoHPTS, my open-source Go proxy tool. It already supported…
16 views
Daily Writeups
⤷ Title: Poisoned Code: Stealthy Malicious Go Module Backdoor Discovered in Long-Running Typosquat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 09:01:53 +0000
════════════════════════
⌗ Tags: #Malware #DNS TXT backdoor #Go module #proxy.golang.org #rce #Remote Code Execution #shopspring/decimal #shopsprint/decimal #Socket Security #supply chain attack #typosquat
Daily CyberSecurity
Poisoned Code: Stealthy Malicious Go Module Backdoor Discovered in Long-Running Typosquat
Security researchers have exposed a malicious Go module backdoor hidden inside the shopsprint/decimal package that executes code using stealthy DNS TXT records.
20 views
Daily Writeups
⤷ Title: The Strategic Encroachment of Red Lamassu Across the Eurasian Telecommunications Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 06:37:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Black Lotus Labs threat intelligence #command and control infrastructure #DLL side loading vulnerability #JFMBackdoor Windows exploit #proxy network routing #PwC Threat Intelligence #Red Lamassu cyber espionage #Showboat Linux malware #state sponsored hacking Asia #telecom supply chain attack
Information Security News
Red Lamassu Cyber Espionage: Malware Targets Telecom Cores
State-backed Red Lamassu cyber espionage operations weaponize Showboat and JFMBackdoor malware to quietly penetrate and control telecom network infrastructure.
9 views
Daily Writeups
⤷ Title: New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 01:30:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Axios #CVE_2026_44492 #CVE_2026_44494 #infosec #Node.js #Prototype Pollution #Proxy Bypass
Daily CyberSecurity
New Patches Eradicate Dangerous Axios Proxy Vulnerabilities
New Axios proxy vulnerabilities expose apps. A critical prototype pollution gadget allows full traffic interception. Secure patches are now available.
16 views
Daily Writeups
⤷ Title: FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 20:12:42 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Malware #Alarum #Cybersecurity #FBI #Google #Israel #NetNut #Popa #Proxy #Residential Proxy
Hackread
FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network
FBI and Google disrupt NetNut after domains linked to its residential proxy network are seized, exposing abuse of 2m TVs and streaming devices worldwide.
20 views
Daily Writeups
⤷ Title: Fools Mate | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 10:59:56 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #proxy #tryhackme #tryhackme_writeup #burpsuite
Medium
Fools Mate | TryHackMe | Walkthrough
This Position mate in A8 one move
11 views
Daily Writeups
⤷ Title: Claude Code Was Caught Secretly Tagging Users — Here’s How to Take Back Control
════════════════════════
𐀪 Author: Aikeyfounder
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 03:49:37 GMT
════════════════════════
⌗ Tags: #claude_code #api_security #proxy_architecture #privacy #developer_tools
Medium
Claude Code Was Caught Secretly Tagging Users — Here’s How to Take Back Control
When a developer decompiled the Claude Code binary, they found something that shouldn’t have been there: three months of hidden identity…
16 views
Daily Writeups
⤷ Title: Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 13:15:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #control_plane traffic #CVE_2026_16242 #hosted control planes #Konnectivity vulnerability #Kubernetes Security #mitm #proxy server
Daily CyberSecurity
Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic
A critical Konnectivity vulnerability lets a remote attacker slip into a cluster without any credentials. Tracked as CVE-2026-16242, it carries a CVSS score of 9.4. The flaw sits in the Konnectivi…
21 views
Daily Writeups
⤷ Title: VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:50:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #active directory #Operation STANDOFF #proxy botnet #Raccoon Stealer #Russian_speaking threat group #Telegram account farm #VMRay
Daily CyberSecurity
VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub
At a glance Actor or group Unnamed Russian-speaking crew tracked as Operation STANDOFF; self-branded “GG Influence” and “ggstandoff” Activity type Pay-per-install malware, …
14 views
Daily Writeups
⤷ Title: H96 Android TV Boxes Used for Ad Fraud and Residential Proxies
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 14:15:10 +0000
════════════════════════
⌗ Tags: #Security #Android #Android TV #Backdoors #BitSight #Cybersecurity #Fuyao #H96 #Malware #Proxy #Residential Proxy
Hackread
H96 Android TV Boxes Used for Ad Fraud and Residential Proxies
Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners' home internet connections.
13 views
Daily Writeups
⤷ Title: Dysphoria Botnet Infects 296,000 IoT Devices, Hides C2 in ENS and SNS Records
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 07:07:04 +0000
════════════════════════
⌗ Tags: #Malware #DDoS #Dysphoria Botnet #Ethereum Name Service #IoT Security #Proxy Botnet #router security #Shadowserver
Information Security News
Dysphoria Botnet Infects 296,000 IoT Devices, Hides C2 in ENS and SNS Records
A home router can appear entirely functional – broadcasting Wi-Fi and sitting quietly on a shelf for years – while silently routing someone else’s attack traffic. Researchers hav…
38 views
Daily Writeups
⤷ Title: VPN vs Proxy: Which One Do You Actually Need for Safe Browsing?
════════════════════════
𐀪 Author: Tanveer
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 12:27:22 GMT
════════════════════════
⌗ Tags: #digital #computers #proxy #vpn #hacking
Medium
VPN vs Proxy: Which One Do You Actually Need for Safe Browsing?
You hit connect on a free browser extension, watch the icon turn green, and instantly feel a sense of relief. You figure your web traffic…
21 views
Daily Writeups
⤷ Title: AI Proxies Explained: How AI Gateways Work and Where the Security Risks Are
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Thu, 10 Sep 2026 05:41:24 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #proxy #cybersecurity #ai
Medium
AI Proxies Explained: How AI Gateways Work and Where the Security Risks Are
AI applications rarely talk directly to an AI model in a simple production environment.
31 views
Daily Writeups
⤷ Title: 364M Users Exposed to CVE-2026-90711: 9.1 CVSS proxy-addr IP Spoofing Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 01:16:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_90711 #IP spoofing #Node.js #proxy_addr #Vulnerability
Daily CyberSecurity
364M Users Exposed to CVE-2026-90711: 9.1 CVSS proxy-addr IP Spoofing Flaw
Security researchers have disclosed a severe proxy-addr IP spoofing flaw affecting popular Node.js applications. This misconfiguration vulnerability, tracked as CVE-2026-90711, allows unauthentica…
16 views
Daily Writeups
⤷ Title: High-Severity Squid Proxy Vulnerabilities Need Immediate Patches
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 00:30:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_33515 #CVE_2026_47729 #CVE_2026_61642 #proxy #request smuggling #Squid
Daily CyberSecurity
High-Severity Squid Proxy Vulnerabilities Need Immediate Patches
Three Squid proxy vulnerabilities expose networks to request smuggling and stack buffer overflow attacks. Network administrators must immediately patch their caching servers to prevent unauthorize…
11 views
Daily Writeups
⤷ Title: Exim 4.100.1 Patches Four Security Vulnerabilities
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 21 Sep 2026 00:34:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_94054 #CVE_2026_94056 #CVE_2026_94057 #Exim #Exim Vulnerability #Mail Server Security #PROXY Protocol #SMTP Smuggling
Daily CyberSecurity
Exim 4.100.1 Patches Four Security Vulnerabilities
TL;DR Exim shipped version 4.100.1 on September 18, 2026. It fixes four flaws, including two high-severity Proxy Protocol bugs, a GnuTLS use-after-free, and SMTP smuggling. Three of the four have …
43 views
Daily Writeups
⤷ Title: Mellowtel Browser Extensions Turn Homes Into Proxy Nodes
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 15:00:58 +0000
════════════════════════
⌗ Tags: #Malware #Browser Extensions #Chrome Security #Mellowtel #Privacy Risk #proxy network #Residential Proxy #SDK #Spur
Information Security News
Mellowtel Browser Extensions Turn Homes Into Proxy Nodes
A Harmless Timer With a Hidden Job The most innocent timer in Chrome could do very different work. Meanwhile, the user saw only a familiar start button. The Spur team discovered that the Mellowtel…
39 views
Daily Writeups
⤷ Title: ClingSTUN Linux Backdoor Turns Unpatched IoT Devices Into Proxy Nodes
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 06 Oct 2026 06:30:02 +0000
════════════════════════
⌗ Tags: #Malware #botnet #ClingSTUN #FortiGuard Labs #IoT security #Linux Malware #proxy backdoor #Router Vulnerabilities #STUN
Daily CyberSecurity
ClingSTUN Linux Backdoor Turns Unpatched IoT Devices Into Proxy Nodes
At a Glance Malware family ClingSTUN, a Linux back-connect proxy backdoor Threat actor Unknown; no attribution Targets Internet-facing IoT and edge devices; victim counts not disclosed Delivery ve…
15 views
Daily Writeups
⤷ Title: Apache Traffic Server Fixes 15 Flaws, Including CVSS 10.0 Plugin Bug and Cache Poisoning
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 01:49:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Traffic Server #Cache Poisoning #CVE_2026_111811 #CVE_2026_111813 #CVE_2026_111816 #Proxy Security #request smuggling
Daily CyberSecurity
Apache Traffic Server Fixes 15 Flaws, Including CVSS 10.0 Plugin Bug and Cache Poisoning
TL;DR Apache disclosed 15 Apache Traffic Server vulnerabilities, including a CVSS 10.0 flaw in the experimental magick plugin. Several bugs allow request smuggling and cache poisoning. Versions 9.…
10 views