Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Boost Your GitHub Actions Security with sisakulint: Fast SAST for YAML
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 00:17:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #blue team #CI/CD Security #cybersecurity #GitHub Actions #OWASP #SAST #security tool #sisakulint #Static Analysis #YAML
Penetration Testing Tools
Boost Your GitHub Actions Security with sisakulint: Fast SAST for YAML
Discover sisakulint, a fast SAST tool for GitHub Actions. It validates YAML files against security guidelines, prevents malicious code, and supports autofix.
27 views
Daily Writeups
⤷ Title: PoCGen: AI Tool Automates Exploit Generation for npm Vulnerabilities with LLMs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:12:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cybersecurity #Dynamic Analysis #Exploit Generation #large language model #LLM #npm #PoC #PoCGen #proof_of_concept #Security Research #Static Analysis #University of Stuttgart #Vulnerability
Daily CyberSecurity
PoCGen: AI Tool Automates Exploit Generation for npm Vulnerabilities with LLMs
PoCGen is a new AI tool using LLMs, static, and dynamic analysis to automate PoC exploit generation for npm vulnerabilities, achieving high success rates at low cost.
15 views
Daily Writeups
⤷ Title: Kereva: Static analysis for LLM-powered Python applications
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 00:59:10 +0000
════════════════════════
⌗ Tags: #Code Assessment #Bias #Code Scanner #cybersecurity #Hallucination #Kereva #Large Language Model #LLM #performance #Prompt Injection #python #security tool #Static Analysis #vulnerability
Penetration Testing Tools
Kereva: Static analysis for LLM-powered Python applications
Kereva LLM Code Scanner is a static analysis tool for Python LLM code, detecting security risks, performance issues, and vulnerabilities like prompt injection.
24 views
Daily Writeups
⤷ Title: BinPool: Unlock Deeper Vulnerability Discovery in Binaries with This New Dataset
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 16 Jul 2025 00:04:20 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Binary Analysis #BinPool #CVE #CWE #cybersecurity #Debian #machine learning #Static Analysis #Vulnerability Discovery
Penetration Testing Tools
BinPool: Unlock Deeper Vulnerability Discovery in Binaries with This New Dataset
BinPool is a Python-based dataset of 603 CVEs from vulnerable and patched Debian binaries, enabling advanced vulnerability discovery through ML and static analysis.
25 views
Daily Writeups
⤷ Title: MalBuster Walkthrough: Static PE Triage for Beginners
════════════════════════
𐀪 Author: Furkanctiner
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 10:14:51 GMT
════════════════════════
⌗ Tags: #static_analysis #malware_analysis #tryhackme_walkthrough #tryhackme #cybersecurity
Medium
MalBuster Walkthrough: Static PE Triage for Beginners🔥
Hey everyone! 👋  This week I worked through the MalBuster TryHackMe room and took notes the way I wish someone had explained them to me…
13 views
Daily Writeups
⤷ Title: Next-Gen AI Security Engineers Arrive: New AI-SAST Tools Find Logic Flaws and 50+ Zero-Days in Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 14 Oct 2025 03:51:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI_SAST #Code Security #Corgea #LLM #Penetration Testing #Static Analysis #Vulnerability Detection #ZeroPath
Penetration Testing Tools
Next-Gen AI Security Engineers Arrive: New AI-SAST Tools Find Logic Flaws and 50+ Zero-Days in Code
New AI-SAST tools like ZeroPath and Corgea are using LLM reasoning to find business logic flaws and zero-days in source code, dramatically reducing false positives and human effort.
17 views
Daily Writeups
⤷ Title: Binary Architect: ELFSPIRIT Framework Analyzes, Patches, and Camouflages ELF Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 06 Nov 2025 04:23:34 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Binary Manipulation #cybersecurity #ELF Format #ELFSPIRIT #Malware Research #rootkit #Static Analysis
Penetration Testing Tools
Binary Architect: ELFSPIRIT Framework Analyzes, Patches, and Camouflages ELF Files
ELFSPIRIT is a versatile framework for static analysis and injection, allowing users to manipulate, patch, and camouflage every byte within ELF files for research.
28 views
Daily Writeups
⤷ Title: Unmasking the Code: JS Analyzer Automates JavaScript Recon & Secret Discovery
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 04:44:55 +0000
════════════════════════
⌗ Tags: #Open Source Tool #API Discovery #bug bounty #Burp Suite #InfoSec 2026 #JavaScript #JS Analyzer #Pentesting #Recon #secret scanning #Static Analysis
Information Security News
Unmasking the Code: JS Analyzer Automates JavaScript Recon & Secret Discovery
JS Analyzer A powerful Burp Suite extension for JavaScript static analysis. Extracts API endpoints, URLs, secrets, and email addresses from JavaScript files with intelligent noise filtering. The g…
43 views
Daily Writeups
⤷ Title: Beyond the Signature: Unveiling ThreatShield’s AI-Driven Malware Analysis Platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 16:21:06 +0000
════════════════════════
⌗ Tags: #Open Source Tool #behavioral analysis #cybersecurity tools #dynamic analysis #Infosec #machine learning #malware analysis #sandboxing #Static Analysis #Tech News 2026 #Threat Detection #ThreatShield
Penetration Testing Tools
Beyond the Signature: Unveiling ThreatShield’s AI-Driven Malware Analysis Platform
ThreatShield combines static, dynamic, and machine learning analysis to deliver deep, explainable insights into malicious files and suspicious behaviors.
41 views
Daily Writeups
⤷ Title: POSTURA: Graph-Based Security Analysis That Understands Context
════════════════════════
𐀪 Author: Arunabh Majumdar
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 18:44:33 GMT
════════════════════════
⌗ Tags: #application_security #llm_agent #static_analysis #neo4j #open_source
Medium
POSTURA: Graph-Based Security Analysis That Understands Context
Static scanners find vulnerabilities. They can’t tell you which ones matter.
14 views
Daily Writeups
⤷ Title: Binary to Behavior: Decode Threats with the Unified “Malware-Check” Analysis Engine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:26:41 +0000
════════════════════════
⌗ Tags: #Open Source Tool #binary analyzer #cybersecurity tools #DevSecOps #Docker sandbox #dynamic analysis #malware analysis #malware_check #MobSF #reverse engineering #SARIF #Static Analysis #YARA
Penetration Testing Tools
Binary to Behavior: Decode Threats with the Unified "Malware-Check" Analysis Engine
Detect backdoors, ransomware, and privacy leaks. Malware-Check combines YARA rules, Docker sandboxing, and MobSF for deep static and dynamic analysis.
35 views
Daily Writeups
⤷ Title: CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 29 Jul 2026 01:02:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_45293 #PHP_CodeSniffer #PHPCS #Static Analysis #Supply Chain Security #WordPress Coding Standards #WordPressCS
Daily CyberSecurity
CVE-2026-45293: Arbitrary Code Execution in WordPress Coding Standards, a Tool With 49M+ Installs
TL;DR A flaw in WordPress Coding Standards lets malicious PHP run code on the machine that lints it. Tracked as CVE-2026-45293, the bug carries a CVSS score of 8.6. The advisory calls it “an…
27 views
Daily Writeups
⤷ Title: Part II: Analytic Tools
════════════════════════
𐀪 Author: EW
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 14:07:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #devsecops #software_development #static_analysis #application_security
Medium
Part II: Analytic Tools
Static vs. Dynamic Analysis: Two Essential Lenses for Secure Software
11 views
Daily Writeups
⤷ Title: Free models + open-source SAST + offensive Skills matched frontier CVE finds. Cost: about $0.
════════════════════════
𐀪 Author: MixBanana
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 11:19:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #open_source #static_analysis #application_security #artificial_intelligence
Medium
Free models + open-source SAST + offensive Skills matched frontier CVE finds. Cost: about $0.
Subtitle: Everyone argued about Sol and Mythos. I wired tools and Skills into cheap models and got the same class of bugs on public code.
11 views
Daily Writeups
⤷ Title: We Built the Only Java Static Analyzer That Finds What Semgrep, CodeQL, and the We Built the Only…
════════════════════════
𐀪 Author: Suman Lamichhane
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 16:17:56 GMT
════════════════════════
⌗ Tags: #java #cybersecurity #application_security #static_analysis #spring_boot
Medium
We Built the Only Java Static Analyzer That Finds What Semgrep, CodeQL, and the We Built the Only Java Static Analyzer That Finds…
The problem nobody talks aboutICLR 2025 IRIS Paper All Miss
14 views
Daily Writeups
⤷ Title: We Found Authorization Vulnerabilities in Two of GitHub’s Most-Starred Java Repositories — Semgrep…
════════════════════════
𐀪 Author: Suman Lamichhane
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 15:01:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #spring_boot #application_security #java #static_analysis
Medium
We Found Authorization Vulnerabilities in Two of GitHub’s Most-Starred Java Repositories — Semgrep and CodeQL Both Missed Them
110,000 combined stars. Zero authorization findings from the industry-standard scanners. Here’s what a purpose-built tool found instead.
27 views
Daily Writeups
⤷ Title: How does a SAST scanner decide which line of code to flag?
════════════════════════
𐀪 Author: Codeunderfire
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 00:19:53 GMT
════════════════════════
⌗ Tags: #software_engineering #devsecops #static_analysis #secure_coding #application_security
Medium
How does a SAST scanner decide which line of code to flag?
A SAST scanner parses source code into a syntax tree, follows how values move through it, and flags the exact line where a tainted input…
24 views
Daily Writeups
⤷ Title: Practical Malware Analysis — Lab 1–1: Basic Static Analysis Writeup
════════════════════════
𐀪 Author: Mahmoud Alawady
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 20:15:36 GMT
════════════════════════
⌗ Tags: #malware_analysis #static_analysis #cybersecurity #malware #hacking
Medium
Practical Malware Analysis — Lab 1–1
A basic static analysis of Lab 1-1 from Practical Malware Analysis book covering imports, strings, compilation details and IOCs
12 views
Daily Writeups
⤷ Title: Practical Malware Analysis — Lab 1–4: Basic Static Analysis Write-up
════════════════════════
𐀪 Author: Mahmoud Alawady
════════════════════════
ⴵ Time: Sat, 10 Oct 2026 22:51:03 GMT
════════════════════════
⌗ Tags: #malware_analysis #malware #static_analysis #cybersecurity #hacking
Medium
Practical Malware Analysis — Lab 1–4: Basic Static Analysis Write-up
In this lab, we will analyze lab 1–4 from Practical Malware Analysis book. The goal is to examine the malware sample Lab01–04.exe using…
48 views
Daily Writeups
⤷ Title: I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 00:00:51 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #application_security #static_analysis #mcps
Medium
I Pointed 3 Static Scanners at an MCP Server That Fails 8 Auth Tests. They Found 0, Including Mine
In the previous post in this series I built a 10-test harness for the MCP 2026–07–28 authorization rules. A quickstart-style server passed…
22 views