Daily Writeups – Telegram
Daily Writeups
@Daily_Writeups
3.33K subscribers
1 photo
110K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.33K subscribers
Daily Writeups
⤷ Title: How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
════════════════════════
𐀪 Author: Sharon Nicole Dube
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 22:23:24 GMT
════════════════════════
⌗ Tags: #pentesting #api_tool #penetration_testing #api #pentesting_methodology
Medium
How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
If you have ever done traditional web application penetration testing, stepping into the world of API security can feel like walking into a…
9 views
Daily Writeups
⤷ Title: StuxCTF | TryHackMe | Walkthrough
════════════════════════
𐀪 Author: Sornphut
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 21:34:07 GMT
════════════════════════
⌗ Tags: #python_programming #tryhackme #tryhackme_walkthrough #tryhackme_writeup #file_upload_vulnerability
Medium
StuxCTF | TryHackMe | Walkthrough
What is the hidden directory?
17 views
Daily Writeups
⤷ Title: HackTheBox Academy | SQL Injection Fundamentals | WriteUp
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 22:20:51 GMT
════════════════════════
⌗ Tags: #htb #hackthebox_writeup #hackthebox_academy #hackthebox_walkthrough #hackthebox
Medium
HackTheBox Academy | SQL Injection Fundamentals | WriteUp
This module aims to develop the skills necessary to identify and exploit SQL injection vulnerabilities, mainly for MySQL databases, and as…
13 views
Daily Writeups
⤷ Title: Exposing an Android SMS-to-Telegram Malware: Reverse Engineering a Real OTP Stealer
════════════════════════
𐀪 Author: razzee
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 22:33:47 GMT
════════════════════════
⌗ Tags: #reverse_engineering #android #malware #ethical_hacking #cybersecurity
Medium
Exposing an Android SMS-to-Telegram Malware: Reverse Engineering a Real OTP Stealer
Technical breakdown of Android malware analysis, reverse engineering APK, SMS interception, and Telegram bot abuse in a real-world…
11 views
Daily Writeups
⤷ Title: How I Built a Lightweight Network Packet Analyzer in Python ️‍♂️
════════════════════════
𐀪 Author: Sriman kundu
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 21:15:06 GMT
════════════════════════
⌗ Tags: #python #programming #ethical_hacking #networking #cybersecurity
Medium
How I Built a Lightweight Network Packet Analyzer in Python 🕵️‍♂️🌐
https://github.com/sriman-git09/network_analyse_V2.0 it’s open source
12 views
Daily Writeups
⤷ Title: How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
════════════════════════
𐀪 Author: Ngobirifalyne
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 22:48:42 GMT
════════════════════════
⌗ Tags: #api_development #api_integration #api #api_security #api_tool
Medium
How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
Penetration testing an API is often described as “shooting in the dark.” Unlike a web application, where you have buttons, forms, and a…
15 views
Daily Writeups
⤷ Title: From Learning APIs to Protecting Systems: My API Security Journey
════════════════════════
𐀪 Author: Sharon Nicole Dube
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 22:24:55 GMT
════════════════════════
⌗ Tags: #cyber_security_solutions #api #cybersecurity #cyber_girl #api_security
Medium
From Learning APIs to Protecting Systems: My API Security Journey
It is with a heavy heart, tears in my eyes, but profound gratitude that I write this. I have to share the sad news that my APISEC walk with…
19 views
Daily Writeups
⤷ Title: Securing AI-Powered APIs: What API Security Looks Like in the Age of LLMs
════════════════════════
𐀪 Author: Veronica Peter
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 21:05:02 GMT
════════════════════════
⌗ Tags: #llm #ai #api_security #api
Medium
Securing AI-Powered APIs: What API Security Looks Like in the Age of LLMs
AI-powered APIs, especially those built around Large Language Models (LLMs) and NLP systems, are changing the way technology works today…
33 views
Daily Writeups
⤷ Title: Beyond the Router: How the Zerobotv9 Botnet is Hijacking Enterprise Automation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:42:35 +0000
════════════════════════
⌗ Tags: #Malware #Akamai SIRT #CVE_2025_68613 #CVE_2025_7544 #Enterprise Security #infosec #IoT Malware #Mirai botnet #n8n vulnerability #Tenda router flaw #Zerobotv9
Daily CyberSecurity
Beyond the Router: How the Zerobotv9 Botnet is Hijacking Enterprise Automation
Akamai SIRT reveals Zerobotv9, a new Mirai-based botnet targeting enterprise n8n workflow platforms and Tenda routers via critical vulnerabilities.
21 views
Daily Writeups
⤷ Title: High-Severity XSS Flaw in Angular i18n Turns Language Files into Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:38:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular #Application Security #Cross_Site Scripting #CVE_2026_27970 #i18n #ICU Messages #infosec #Internationalization #Patch Alert #Web Security #XSS
Daily CyberSecurity
High-Severity XSS Flaw in Angular i18n Turns Language Files into Backdoors
Angular patches a high-severity 7.6 CVSS XSS flaw (CVE-2026-27970). Attackers can weaponize i18n translation files to steal data and hijack user sessions.
8 views
Daily Writeups
⤷ Title: From Chat App to Dark Web: How Telegram Became the New Hub for Cybercrime
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:27:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #cybersecurity #Cyfirma #dark web #Digital Black Market #Hacktivism #Malware_as_a_Service #ransomware #Telegram #threat intelligence
Daily CyberSecurity
From Chat App to Dark Web: How Telegram Became the New Hub for Cybercrime
Cyfirma reveals how Telegram has replaced the dark web as the ultimate digital black market, making tools like malware and data theft available to anyone.
5 views
Daily Writeups
⤷ Title: The Fake Security Checkup: How a Rogue ‘Google’ App Hijacks Your Digital Life
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:22:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #browser security #Cyber Threats #cybersecurity #Google_prism #Malwarebytes #mobile surveillance #phishing #PWA malware #social engineering #Tech News
Daily CyberSecurity
The Fake Security Checkup: How a Rogue 'Google' App Hijacks Your Digital Life
Cybercriminals are using a fake Google security checkup (google-prism) to trick you into installing powerful PWA malware. Learn how to spot the trap.
5 views
Daily Writeups
⤷ Title: The Invisible Trap: How Hackers Weaponize the Internet’s Root Infrastructure (.arpa) to Bypass Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:16:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.arpa domain #dangling domains #Domain Hijacking #Infoblox #infosec #infrastructure abuse #IPv6 tunnel #phishing #reverse DNS #TDS #traffic distribution system
Daily CyberSecurity
The Invisible Trap: How Hackers Weaponize the Internet’s Root Infrastructure (.arpa) to Bypass Security
Infoblox uncovers a novel phishing tactic abusing the .arpa TLD. Attackers hijack internet "plumbing" to bypass firewalls and deliver brand-impersonation scams.
9 views
Daily Writeups
⤷ Title: OpenAI Exposes the Massive Global Underworld of Malicious AI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:11:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Scams #ChatGPT #Cyber Special Operations #cyber_espionage #Disrupting Malicious Uses of AI #influence operations #infosec #OpenAI #Operation Date Bait #Operation False Witness #Rybar
Daily CyberSecurity
OpenAI Exposes the Massive Global Underworld of Malicious AI
OpenAI’s Feb 2026 report reveals "cyber special operations," Cambodian "Date Bait" scams, and Russian content farms using AI to automate global disruption.
6 views
Daily Writeups
⤷ Title: Bridging the Gap: North Korean APT37 Deploys ‘Ruby Jumper’ to Infiltrate Isolated Air-Gapped Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:05:18 +0000
════════════════════════
⌗ Tags: #Malware #Air_gap attack #APT37 #Cloud C2 #infosec #North Korean APT #Ruby Jumper #ScarCruft #SNAKEDROPPER #THUMBSBD #USB malware #VIRUSTASK
Daily CyberSecurity
Bridging the Gap: North Korean APT37 Deploys 'Ruby Jumper' to Infiltrate Isolated Air-Gapped Networks
Zscaler unmasked APT37's "Ruby Jumper" campaign, which uses weaponized USBs and cloud services to bypass network isolation and steal data from air-gapped systems.
5 views
Daily Writeups
⤷ Title: The High Cost of ‘Free’: How PiviGames Became a Lovecraftian Malware Hub for HijackLoader and ACRStealer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:00:00 +0000
════════════════════════
⌗ Tags: #Malware #ACRStealer #DLL Sideloading #G DATA #Gaming Security #HijackLoader #infosec #Infostealer #Malvertising #Malware Analysis #Piracy Risks #PiviGames
Daily CyberSecurity
The High Cost of 'Free': How PiviGames Became a Lovecraftian Malware Hub for HijackLoader and ACRStealer
G DATA reveals how pirated gaming site PiviGames distributes ACRStealer via "spaghetti code" HijackLoader and DLL sideloading, causing total account takeovers.
6 views
Daily Writeups
⤷ Title: Guía de Waybackurls: Extracción de URLs Históricas para Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #hacking #cheatsheet #technology
Medium
Guía de Waybackurls: Extracción de URLs Históricas para Bug Bounty
Domina Waybackurls para encontrar endpoints ocultos, parámetros sensibles y archivos JS antiguos en tus auditorías de seguridad.
6 views
Daily Writeups
⤷ Title: HTB Knife: PHP 8.1.0-dev Supply Chain Backdoor RCE to Root
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 23:46:26 GMT
════════════════════════
⌗ Tags: #ctf #ethical_hacking #penetration_testing #cybersecurity #hackthebox
Medium
HTB Knife: PHP 8.1.0-dev Supply Chain Backdoor RCE to Root
First, add your IP to /etc/hosts to make the target accessible while conducting scans.
13 views
Daily Writeups
⤷ Title: Driftingblue6 Walkthrough (Educational & Defensive Analysis)
════════════════════════
𐀪 Author: cyber_public_school
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 23:13:06 GMT
════════════════════════
⌗ Tags: #ethical_hacking #information_security #vulnerability #cybersecurity #oscp
Medium
🔥Driftingblue6 Walkthrough (Educational & Defensive Analysis)
By cyber_public_school | Cyber Security Researcher
16 views
Daily Writeups
⤷ Title: North Korean “StegaBin” Campaign Targets Developers with Steganographic Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:53:18 +0000
════════════════════════
⌗ Tags: #Malware #Contagious Interview #Famous Chollima #infosec #Lazarus Group #npm Security #pastebin #Socket #StegaBin #steganography #supply chain attack #truffleHog
Daily CyberSecurity
North Korean "StegaBin" Campaign Targets Developers with Steganographic Malware
Socket uncovers "StegaBin," a North Korean malware campaign hiding C2 URLs in Pastebin essays to steal developer secrets via 26 typosquatted npm packages.
18 views
Daily Writeups
⤷ Title: Security Alert: Android March 2026 Update Targets Actively Exploited Zero-Day
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:12:34 +0000
════════════════════════
⌗ Tags: #Android #Vulnerability Report #Android security #CVE_2026_0006 #CVE_2026_21385 #infosec #Patch Alert #Qualcomm #rce #Remote Code Execution #vulnerability management #zero_day
Daily CyberSecurity
Security Alert: Android March 2026 Update Targets Actively Exploited Zero-Day
Google’s March 2026 Android update fixes 129 flaws, including CVE-2026-21385—a high-severity Qualcomm vulnerability currently being exploited in the wild.
18 views