Daily Writeups
@Daily_Writeups
3.65K subscribers
4 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.65K subscribers
Daily Writeups
⤷ Title: Industrial Control System (ICS) Honeypot Lab: Simulating and Analyzing Attacker Reconnaissance with…
════════════════════════
𐀪 Author: Mohamed Mostafa Sayed Saber Ali
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 23:02:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #ethical_hacking #industrial_control_system #honeypot
Medium
Industrial Control System (ICS) Honeypot Lab: Simulating and Analyzing Attacker Reconnaissance with Conpot
A hands-on guide to deploying Conpot, exposing ICS protocols, and analyzing attacker reconnaissance with Nmap and Wireshark
34 views
Daily Writeups
⤷ Title: The Typosquatting Trap: Fake Telegram Portal Delivers Stealthy Memory-Resident Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:03:28 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #infosec #Malware Analysis #Memory_Resident Payload #reflective loading #social engineering #Telegram malware #threat intelligence #Typosquatting #Windows Defender Bypass
Daily CyberSecurity
The Typosquatting Trap: Fake Telegram Portal Delivers Stealthy Memory-Resident Malware
Researchers uncover a fake Telegram site distributing stealthy, memory-resident malware that bypasses Windows Defender. Always verify your download URLs.
29 views
Daily Writeups
⤷ Title: Critical Quest KACE Flaw Exploited for Total Network Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:02:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arctic Wolf #Authentication Bypass #CVE_2025_32975 #cybersecurity #Endpoint Management #infosec #network_security #Patch Alert #Quest KACE #Vulnerability
Daily CyberSecurity
Critical Quest KACE Flaw Exploited for Total Network Takeover
Arctic Wolf warns that hackers are actively exploiting a critical Quest KACE vulnerability (CVE-2025-32975) to completely take over enterprise networks.
15 views
Daily Writeups
⤷ Title: Hijacked Accounts and AI Code: The Deadly New Playbook of Iranian APT ‘Boggy Serpens’
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 01:00:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI_Generated Code #Boggy Serpens #Cyberespionage #cybersecurity #Hijacked Accounts #Iranian APT #phishing #Rust malware #threat intelligence #Unit 42
Daily CyberSecurity
Hijacked Accounts and AI Code: The Deadly New Playbook of Iranian APT 'Boggy Serpens'
Unit 42 reveals Iranian APT Boggy Serpens is weaponizing hijacked accounts, AI-generated code, and Rust malware to infiltrate critical infrastructure.
16 views
Daily Writeups
⤷ Title: Day 64 of Reading Cybersecurity — Keygenning & Reverse Engineering (CyberDucky )
════════════════════════
𐀪 Author: CyberDucky
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:27:56 GMT
════════════════════════
⌗ Tags: #reverse_engineering #reading #cybersecurity #hacking
Medium
Day 64 of Reading Cybersecurity — Keygenning & Reverse Engineering (CyberDucky )
Today marks Day 64 of my cybersecurity reading challenge — committing to 15 minutes a day focused on offensive security, reverse…
20 views
Daily Writeups
⤷ Title: Kyubi — VulnNyx Writeup |Written by Atrox
════════════════════════
𐀪 Author: _ATROX_
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:32:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #vulnyx #cybersecurity
Medium
Kyubi — VulnNyx Writeup |Written by Atrox
Gitea · Git Hook RCE · Grafana LFI · Redis · GameOver(lay)
21 views
Daily Writeups
⤷ Title: How I Started Learning Performance Testing with JMeter (From Zero Experience)
════════════════════════
𐀪 Author: Yorn Rothy
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:07:51 GMT
════════════════════════
⌗ Tags: #software_development #qa #software_engineering #penetration_testing #software_testing
Medium
🚀 How I Started Learning Performance Testing with JMeter (From Zero Experience)
I want to share my journey learning performance testing using JMeter.
28 views
Daily Writeups
⤷ Title: THM: Expose
════════════════════════
𐀪 Author: Murad Salem
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 02:06:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #privilege_escalation #tryhackme #linux #cybersecurity
Medium
THM: Expose
1. Room Information
31 views
Daily Writeups
⤷ Title: Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:13:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_22735 #CVE_2026_22737 #cybersecurity #infosec #Java security #patch management #Spring Framework #Spring MVC #Spring WebFlux #Vulnerability
Daily CyberSecurity
Bypassed Boundaries: Two New Vulnerabilities Threaten Spring Framework Apps
Researchers found two flaws in Spring Framework (CVE-2026-22737 & CVE-2026-22735) allowing path bypasses and stream corruption. Patch your apps today.
30 views
Daily Writeups
⤷ Title: Urgent Patch: Massive Google Chrome Update Patches 26 Flaws, Including 3 Critical Bugs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:03:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #browser security #Critical Vulnerabilities #CVE_2026_4439 #cybersecurity #google chrome #infosec #Patch Alert #security update #V8 Engine #WebGL
Daily CyberSecurity
Urgent Patch: Massive Google Chrome Update Patches 26 Flaws, Including 3 Critical Bugs
Google releases an urgent Chrome update patching 26 security flaws, including 3 critical WebGL and Base vulnerabilities. Update to version 146 today.
19 views
Daily Writeups
⤷ Title: IDOR in a JWT-Protected Card Viewer API | CodeReviewLab Writeup
════════════════════════
𐀪 Author: Zaid Arif
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 03:59:48 GMT
════════════════════════
⌗ Tags: #idor #source_code_review #code_review #bug_bounty
Medium
IDOR in a JWT-Protected Card Viewer API | CodeReviewLab Writeup
Secure code review, for AppSec engineers, is in many ways our version of LeetCode. It’s not about solving well-defined problems, but about…
22 views
Daily Writeups
⤷ Title: How to do DCSync Attack
════════════════════════
𐀪 Author: Zoroya
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 03:51:45 GMT
════════════════════════
⌗ Tags: #active_directory #ethical_hacking #technology #cybersecurity #hacking
Medium
How to do DCSync Attack
The DCSync Attack is one of the powerful attack technique in Active Directory that allow an attacker to impersonate as a Domain Controller…
31 views
Daily Writeups
⤷ Title: What is a Man-in-the-middle(MITM) Attack? Networking — Day 12
════════════════════════
𐀪 Author: 0xSmit
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:34:26 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #technology #web_development #information_security
Medium
What is a Man-in-the-middle(MITM) Attack? Networking — Day 12
A Man-in-the-Middle Attack happens when an attacker secretly intercepts communication between two parties. The attacker can read, steal, or…
24 views
Daily Writeups
⤷ Title: Ethical Hacking for Beginners — Day 2: Viruses, Malware, Cyber Attacks & Security Testing
════════════════════════
𐀪 Author: HusnaAnjum
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:03:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #virus #ethical_hacking #malware
Medium
Ethical Hacking for Beginners — Day 2: Viruses, Malware, Cyber Attacks & Security Testing
Introduction
33 views
Daily Writeups
⤷ Title: HTB Cicada: From Password Spraying to Token Abuse
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 04:01:30 GMT
════════════════════════
⌗ Tags: #active_directory #hackthebox #cybersecurity #penetration_testing #offensive_security
Medium
HTB Cicada: From Password Spraying to Token Abuse
Reconnaissance
35 views
Daily Writeups
⤷ Title: DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 11:55:00 +0530
════════════════════════
⌗ Tags: No_Tags
33 views
Daily Writeups
⤷ Title: Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 10:46:00 +0530
════════════════════════
⌗ Tags: No_Tags
30 views
Daily Writeups
⤷ Title: 54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 00:22:00 +0530
════════════════════════
⌗ Tags: No_Tags
32 views
Daily Writeups
⤷ Title: Beyond the Proxy: How KnoxSpy Cracks MDM and Certificate Pinning for Mobile App Sec
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 06:58:56 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Android Security #Appknox #Burp Suite Alternative #Certificate Pinning Bypass #Flutter Security #iOS Pentesting #KnoxSpy #MDM Security #mobile security #Pentesting Tools
Penetration Testing Tools
Beyond the Proxy: How KnoxSpy Cracks MDM and Certificate Pinning for Mobile App Sec
Tired of Burp Suite failing on MDM and pinned apps? KnoxSpy by Appknox offers runtime hooking to bypass security and intercept Flutter, Android, and iOS traffic.
41 views
Daily Writeups
⤷ Title: Shadow in the Silicon: The DarkSword Exploit Chain and the New Era of iOS Spyware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 06:47:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #DarkSword #GhostBlade #GhostKnife #GhostSaber #Google Threat Intelligence #iOS 18.7 #iPhone Spyware #iVerify #Lookout #PARS Defense #UNC6353 #zero_day exploit
Penetration Testing Tools
Shadow in the Silicon: The DarkSword Exploit Chain and the New Era of iOS Spyware
A nascent exploit arsenal targeting the iPhone, christened DarkSword, has emerged within the clandestine bazaar of spyware. Forensic
21 views
Daily Writeups
⤷ Title: The Seven-Stage Shadow: How the Kratos Phishing Kit Nearly Snared a Cybersecurity CEO
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 06:43:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Secure Web #Cyber Security 2026 #Identity Security #JPMorgan Chase Spoof #Kratos Phishing Kit #Microsoft 365 Phishing #Nylas #Outpost24 #PhaaS #SpearPhishing #Specops Software
Penetration Testing Tools
The Seven-Stage Shadow: How the Kratos Phishing Kit Nearly Snared a Cybersecurity CEO
A nefarious endeavor was orchestrated to ensnare the chief executive of a Swedish cybersecurity conglomerate with a missive
❤1
24 views