Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.33K subscribers
1 photo
111K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.33K subscribers
Daily Writeups
⤷ Title: The Trojan Coding Assistant: How a Compromised Token Pushed a Shadow Release of Cline
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:15:17 +0000
════════════════════════
⌗ Tags: #Malware #Cline CLI #GitHub Actions #npm security #OIDC #OpenClaw #package.json #software provenance #supply chain attack #Tech News 2026 #web shells
Penetration Testing Tools
The Trojan Coding Assistant: How a Compromised Token Pushed a Shadow Release of Cline
An incident has transpired within the npm registry involving the Cline CLI utility; for a duration of several
4 views
Daily Writeups
⤷ Title: Edge Fatigue: How Two 9.8 Zero-Days are Dismantling Ivanti’s Mobile Management Fleet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:14:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA KEV #CVE_2026_1281 #CVE_2026_1340 #Cybersecurity 2026 #EPMM #Ivanti #Mobile Device Management #Palo Alto Networks #RCE #Unit 42 #zero_day
Penetration Testing Tools
Edge Fatigue: How Two 9.8 Zero-Days are Dismantling Ivanti’s Mobile Management Fleet
Two nascent zero-day vulnerabilities within the Ivanti mobile device management ecosystem are currently being exploited in live offensives,
11 views
Daily Writeups
⤷ Title: The Bitwise Blunder: How a Single Typo in Firefox’s Engine Opened the Door to RCE
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:11:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #bug bounty #Cyber Security 2026 #Firefox #Garbage Collection #Ion JIT #JavaScript Engine #Mozilla #RCE #SpiderMonkey #Type Confusion #WebAssembly
Penetration Testing Tools
The Bitwise Blunder: How a Single Typo in Firefox’s Engine Opened the Door to RCE
A critical Remote Code Execution (RCE) vulnerability has been unearthed within SpiderMonkey, the JavaScript engine powering Mozilla Firefox.
13 views
Daily Writeups
⤷ Title: Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:04:12 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BOF #Cloud SSO #Cobalt Strike #Credential Guard #DPAPI #Kerberos #LSA Whisperer #LsaCallAuthenticationPackage #LSASS #Pentesting #PPL #red teaming #SpecterOps #Windows Security
Penetration Testing Tools
Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS
Interact with Kerberos and DPAPI without opening an LSASS handle. LSA Whisperer BOF uses official APIs to bypass PPL and Credential Guard during red teaming.
16 views
Daily Writeups
⤷ Title: Total Takeover Threat: Critical IceWarp Flaws Trigger Emergency Server Patches
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 04:27:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arbitrary File Read #Cross_Site Scripting #Cyber Security #Enterprise Email #IceWarp #infosec #Patch Alert #security update #Server Security #XSS
Daily CyberSecurity
Total Takeover Threat: Critical IceWarp Flaws Trigger Emergency Server Patches
IceWarp urges immediate patching for critical flaws allowing unauthorized server access, XSS, and arbitrary file reading. Update your instances today.
18 views
Daily Writeups
⤷ Title: Critical Undertow Flaw (CVSS 9.6) Strikes HPE Telco Service Activator
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 04:20:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_12543 #Cyber Security #Host Header Validation #HPE Service Activator #Patch Alert #Session Hijacking #Telecommunications Security #Undertow HTTP Server #Web Cache Poisoning
Daily CyberSecurity
Critical Undertow Flaw (CVSS 9.6) Strikes HPE Telco Service Activator
Critical Undertow HTTP server flaw CVE-2025-12543 (CVSS 9.6) impacts HPE Telco Service Activator, allowing cache poisoning and session hijacking. Patch now.
14 views
Daily Writeups
⤷ Title: The AI Disclosure: X Trials Mandatory Labels as Community Notes Gets Suspension Power
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:46:03 +0000
════════════════════════
⌗ Tags: #Technology #Account Suspension #AI labels #AI_generated content #Community Notes #digital transparency #Elon Musk #Grok AI #Misinformation #social media news 2026 #twitter #X
Daily CyberSecurity
The AI Disclosure: X Trials Mandatory Labels as Community Notes Gets Suspension Power
X is testing a new "AI-Generated" toggle for all posts. Fail to disclose synthetic content, and Community Notes could trigger a permanent account suspension.
15 views
Daily Writeups
⤷ Title: Full Organization Account Takeover (ATO) by Changing One Parameter
════════════════════════
𐀪 Author: Mohamed Fares
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:48:12 GMT
════════════════════════
⌗ Tags: #ato #bug_bounty #bug_bounty_tips #hackerone #bug_bounty_writeup
Medium
Full Organization Account Takeover (ATO) by Changing One Parameter
Sometimes, hacking is not about complex payloads.
21 views
Daily Writeups
⤷ Title: Mining Wayback URLs for High-Impact Vulnerability Discovery
════════════════════════
𐀪 Author: Nitin Gavhane
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:31:01 GMT
════════════════════════
⌗ Tags: #reconnaissance #vulnerability #ethical_hacking #bug_bounty_writeup #bug_bounty
Medium
Mining Wayback URLs for High-Impact Vulnerability Discovery
Hi everyone, let me start with a simple question.
29 views
Daily Writeups
⤷ Title: From Web to Root: Exploiting Kioptrix Level 2 Walkthrough
════════════════════════
𐀪 Author: Robert Perez
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:28:06 GMT
════════════════════════
⌗ Tags: #ethical_hacking #linux #penetration_testing #ctf #cybersecurity
Medium
From Web to Root: Exploiting Kioptrix Level 2 Walkthrough
Overview
20 views
Daily Writeups
⤷ Title: Peak Hill | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:10:38 GMT
════════════════════════
⌗ Tags: #python #tryhackme_writeup #python_programming #tryhackme_walkthrough #tryhackme
Medium
Peak Hill | TryHackMe | Walkthrough
Initial Access
23 views
Daily Writeups
⤷ Title: FREE Bash Scripting Course (Limited Time)
════════════════════════
𐀪 Author: Harsh Kanojia
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:31:01 GMT
════════════════════════
⌗ Tags: #cyber_sphere #ai #cybersecurity #harsh_kanojia #ethical_hacking
Medium
FREE Bash Scripting Course (Limited Time)
Cybersecurity isn’t just about tools.
It’s about automation.
38 views
Daily Writeups
⤷ Title: LetsDefend SOC127 — SQL Injection Detected
════════════════════════
𐀪 Author: Winuka Ambegoda
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:09:03 GMT
════════════════════════
⌗ Tags: #lets_defend #soc #log_analysis #sql_injection
Medium
LetsDefend SOC127 — SQL Injection Detected
Today we will be analysing the Lets Defend SIEM alert with Event ID 235. Feel free to check out my many other investigations too. We will…
41 views
Daily Writeups
⤷ Title: How I Found a Business Logic Vulnerability in SaaS applicationThat Allowed Unlimited Trial…
════════════════════════
𐀪 Author: Sreejihkn
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 06:20:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #information_security #cyber_security_awareness #bug_bounty
Medium
How I Found a Business Logic Vulnerability in SaaS applicationThat Allowed Unlimited Trial…
Hey everyone, I’m Sreejith, a security researcher. In this writeup I’ll walk you through how I discovered a business logic vulnerability in…
33 views
Daily Writeups
⤷ Title: The Hidden Attack Surface: PDF Metadata & Information Leakage
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 04:56:35 GMT
════════════════════════
⌗ Tags: #data_protection #software_architecture #backend_development #data_security #application_security
Medium
The Hidden Attack Surface: PDF Metadata & Information Leakage
What your PDFs reveal about your infrastructure — and how to stop the reconnaissance in C# / .NET
21 views
Daily Writeups
⤷ Title: PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
════════════════════════
𐀪 Author: Kiell Tampubolon
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 04:54:58 GMT
════════════════════════
⌗ Tags: #application_security #devsecops #secure_coding #cybersecurity #pdf
Medium
PDF Injection Attacks: What Developers Don’t Know Can Hurt Them
How malicious content can hide in PDFs through template injection, JavaScript execution, and user input vulnerabilities — and how to…
14 views
Daily Writeups
⤷ Title: BITSCTF
════════════════════════
𐀪 Author: LiGhTZod
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 05:51:58 GMT
════════════════════════
⌗ Tags: #unity #hacking #gamehacking #ctf
Medium
BITSCTF
Tuff Game:
9 views
Daily Writeups
⤷ Title: Most People Ignore Data Breach Emails. That’s Exactly What Hackers Want
════════════════════════
𐀪 Author: Arshad
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 05:46:09 GMT
════════════════════════
⌗ Tags: #scam #data #technology #internet #hacking
Medium
Most People Ignore Data Breach Emails. That’s Exactly What Hackers Want
Ignoring that breach notification is a mistake. Here’s what you must do instead.
12 views
Daily Writeups
⤷ Title: CupidBot
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 06:06:44 GMT
════════════════════════
⌗ Tags: #cupid_bot #ctf_writeup #tryhackme #tryhackme_writeup #cupid_bot_ctf
Medium
CupidBot
This AI bot knows more than just love letters.
13 views
Daily Writeups
⤷ Title: MoneyBox | VulnHub Walkthrough
════════════════════════
𐀪 Author: Arjun c u
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 16:15:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #easy #vulnhub #capture_the_flag #moneybox
Medium
MoneyBox | VulnHub Walkthrough by Arjun C U
Introduction
21 views
Daily Writeups
⤷ Title: The Browser Security Details I Used to Ignore (Until I Realised They Hold the Keys to Everything)
════════════════════════
𐀪 Author: Vidya Penumarthi
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 06:25:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_development #ethical_hacking #networking #computer_science
Medium
The Browser Security Details I Used to Ignore (Until I Realised They Hold the Keys to Everything)
When I first started learning web security, I focused on the loud things. -SQL injection. -XSS payloads. -Authentication bypass tricks.
25 views