Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: The Art Of Dirty Power: Abusing Voltage To Unlock ESP32 Behaviors
════════════════════════
𐀪 Author: Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:37:45 GMT
════════════════════════
⌗ Tags: #embedded_systems #makers #esp32_tutorial #hacking #esp32
Medium
The Art Of Dirty Power: Abusing Voltage To Unlock ESP32 Behaviors
I used to baby the ESP32. Treated it like a delicate little modem from a bygone era. Perfect 3.3 volts. Clean grounds. Neat jumper wires…
23 views
Daily Writeups
⤷ Title: Turning a “Feature” into a “Vulnerability” — Collaboration Feature Exposed Every Username in the…
════════════════════════
𐀪 Author: Raman Gautam | rghx
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:07:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #enumeration #hacking #ethical_hacking #web_app_security
Medium
Turning a “Feature” into a “Vulnerability” — Collaboration Feature Exposed Every Username in the System
👋 Hello Hacker,
19 views
Daily Writeups
⤷ Title: React2Shell Crisis Breakdown: How To Instantly Protect Your Projects
════════════════════════
𐀪 Author: Tara Prasad Routray
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 02:44:32 GMT
════════════════════════
⌗ Tags: #technology #javascript #web_development #cybersecurity #hacking
Medium
React2Shell Crisis Breakdown: How To Instantly Protect Your Projects
A critical React vulnerability shocked the developer community — yet thousands remain safe without knowing why. Here’s the clear…
20 views
Daily Writeups
⤷ Title: Instant Root via Unauthenticated Docker Engine API (TCP/2375)From Low-Priv Container → Full ROOT…
════════════════════════
𐀪 Author: Nano
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 02:41:21 GMT
════════════════════════
⌗ Tags: #ctf_writeup #ctf #hacker #cybersecurity #hacking
Medium
Instant Root via Unauthenticated Docker Engine API (TCP/2375)From Low-Priv Container → Full ROOT…
-NANO IS HERE –:)
16 views
Daily Writeups
⤷ Title: Are hackers using AI to crack password now ? 100 % yes ‍↕️
════════════════════════
𐀪 Author: Sir Lakewest
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 02:19:05 GMT
════════════════════════
⌗ Tags: #ethical_hacking #hacking #cybersecurity #ai #cyberattack
Medium
Are hackers using AI to crack password now ? 100 % yes 🙂‍↕️
Brief summary catch up :
15 views
Daily Writeups
⤷ Title: AI to the rescue. When hackers found our server, our AI Agent defended us.
════════════════════════
𐀪 Author: Juan Pelaez
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:19:47 GMT
════════════════════════
⌗ Tags: #react #infosec #aws #nextjs #devops
Medium
AI to the rescue. When hackers found our server, our AI Agent defended us.
A Critical Next.js Vulnerability Almost Took Down Our Healthcare Scheduling Platform. This is a Real-World Account of CVE-2025–55182…
23 views
Daily Writeups
⤷ Title: My Advent of Cyber 2025 Journey: Exploring AI, Malware, Phishing, and More
════════════════════════
𐀪 Author: Kavindu Sahan
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 02:26:24 GMT
════════════════════════
⌗ Tags: #advent_of_cyber #ai_security #tryhackme #tryhackme_aoc #aoc2025
Medium
My Advent of Cyber 2025 Journey: Exploring AI, Malware, Phishing, and More
Every December, the cybersecurity world lights up with one of the best learning events of the year: TryHackMe’s Advent of Cyber. The 2025…
23 views
Daily Writeups
⤷ Title: The Suspicious Choclate.exe
════════════════════════
𐀪 Author: Tryhacking
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 02:09:19 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #tryhackme #events #cybersecurity
Medium
The Suspicious Choclate.exe
A shiny USB labelled “SOCMAS Party Playlist” appears on your desk. Inside is a mysterious file called chocolate.exe.
It looks festive, but…
27 views
Daily Writeups
⤷ Title: TwoMillion Hack The Box: Write Up/Walkthrough
════════════════════════
𐀪 Author: isa
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 02:35:31 GMT
════════════════════════
⌗ Tags: #hack_the_box_writeup #hackthebox #hackthebox_writeup #hackthebox_walkthrough #2million
Medium
TwoMillion Hack The Box: Write Up/Walkthrough
The ninth machine I solved.
37 views
Daily Writeups
⤷ Title: Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 10:20:00 +0530
════════════════════════
⌗ Tags: No_Tags
31 views
Daily Writeups
⤷ Title: DumpGuard Tool Bypasses Credential Guard to Steal NTLMv1 Hashes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:18:32 +0000
════════════════════════
⌗ Tags: #Open Source Tool #credential dumping #Credential Guard #cybersecurity #DumpGuard #hacking tool #NTLMv1 #Remote Credential Guard #Windows Security
Penetration Testing Tools
DumpGuard Tool Bypasses Credential Guard to Steal NTLMv1 Hashes
DumpGuard, a new tool, exploits the Remote Credential Guard protocol to steal NTLMv1 hashes from modern Windows systems, even when Credential Guard is active.
31 views
Daily Writeups
⤷ Title: Student Sells Hacked Sites: Beima Web Shell Undetectable, Targets .Gov & .Edu
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:08:15 +0000
════════════════════════
⌗ Tags: #Malware #Bangladesh #Beima #Compromised Websites #cPanel #cybercrime #cybersecurity #Howler Cell #Telegram #Web Shell #WordPress
Penetration Testing Tools
Student Sells Hacked Sites: Beima Web Shell Undetectable, Targets .Gov & .Edu
Researchers from Howler Cell have detailed an underground marketplace for compromised websites operated by students and freelancers across
27 views
Daily Writeups
⤷ Title: APT-C-53 Hits Ukraine: New Attack Exploits WinRAR Flaw for Persistence
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:06:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #360 Threat Intelligence #APT_C_53 #CVE_2025_8088 #Cyber Espionage #Directory Traversal #HTA #malware #persistence #Ukraine #Winrar
Penetration Testing Tools
APT-C-53 Hits Ukraine: New Attack Exploits WinRAR Flaw for Persistence
APT-C-53 has once again intensified its distribution of malicious attachments targeting organizations in Ukraine. The latest wave of
11 views
Daily Writeups
⤷ Title: The Proxy Ghost: IPCola’s Network Feeds on User Devices Covertly
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:01:37 +0000
════════════════════════
⌗ Tags: #Malware #Bandwidth Sharing #Covert Monetization #cybercrime #Gaganode #IPCola #NuoChen Technology #Proxy Market #Synthient Research #TV Boxes
Penetration Testing Tools
The Proxy Ghost: IPCola's Network Feeds on User Devices Covertly
The launch of the IPCola service on underground forums in 2023 initially appeared to be yet another proxy
8 views
Daily Writeups
⤷ Title: Google & Warby Parker Partner on AI Smart Glasses to Launch in 2026
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:00:07 +0000
════════════════════════
⌗ Tags: #Google #2026 #AI #Android XR #Gemini #google #Smart Glasses #Spatial Computing #Tech Partnership #Warby Parker #Wearables
Penetration Testing Tools
Google & Warby Parker Partner on AI Smart Glasses to Launch in 2026
On Monday, Warby Parker and Google announced that they are preparing to release AI-powered smart glasses, with the
6 views
Daily Writeups
⤷ Title: Japan Cyber-Shock: Teen Hacked Kaikatsu Club, Used AI to Bypass Defenses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:57:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #Cyber Security #cybercrime #data breach #hacking #Japan #Kaikatsu Club #Osaka Police #Teenage Hacker
Penetration Testing Tools
Japan Cyber-Shock: Teen Hacked Kaikatsu Club, Used AI to Bypass Defenses
At the beginning of the year, Japan was shaken by a scandal surrounding a major data breach involving
7 views
Daily Writeups
⤷ Title: China’s “King of Vulnerabilities” Hacked: Knownsec Leak Exposes Zero-Day Flaws
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:56:14 +0000
════════════════════════
⌗ Tags: #Data Leak #Breach #China #Corporate Espionage #cybersecurity #data leak #Github #Knownsec #Offensive Cyber #SuperHei #zero_day
Penetration Testing Tools
China's "King of Vulnerabilities" Hacked: Knownsec Leak Exposes Zero-Day Flaws
A data leak at the Chinese company Knownsec—long heralded as one of the flagships of the nation’s cybersecurity
8 views
Daily Writeups
⤷ Title: ZeroBoot: New Flaw Bypasses Samsung Galaxy Encryption with Physical Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:47:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Android #cybersecurity #FBE #File Encryption #Physical Access #Race Condition #Samsung Galaxy A25 #vulnerability #ZeroBoot
Penetration Testing Tools
ZeroBoot: New Flaw Bypasses Samsung Galaxy Encryption with Physical Access
A researcher known under the pseudonym Vulndisclosure has reported a vulnerability, dubbed ZeroBoot, that enables an attacker to
8 views
Daily Writeups
⤷ Title: Critical Shutdown: Ransomware Cripples Puerto Rico Agencies Via Contractor Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:44:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASES #CFSE #CISA #cybersecurity #FBI #government services #PRITS #Puerto Rico #ransomware #supply chain attack
Penetration Testing Tools
Critical Shutdown: Ransomware Cripples Puerto Rico Agencies Via Contractor Breach
A ransomware attack has crippled the operations of several key Puerto Rican government agencies, yet officials have still
9 views
Daily Writeups
⤷ Title: The KVM with a Secret: NanoKVM Ships with Critical Flaws and a Covert Microphone
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:39:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #Covert Microphone #cybersecurity #Information Security #KVM #NanoKVM #Remote Management #RISC_V #Sipeed #Supply Chain
Penetration Testing Tools
The KVM with a Secret: NanoKVM Ships with Critical Flaws and a Covert Microphone
In February, a Slovenian information security researcher published an analysis of the Chinese remote-management device NanoKVM, revealing that
9 views
Daily Writeups
⤷ Title: $243M Genesis Heist: Suspect “Danny Meech” Detained in Dubai?
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:32:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arrest #Bitcoin #Crypto Crime #crypto hack #Dubai #Ethereum #Genesis #Law Enforcement #Social Engineering #ZachXBT
Penetration Testing Tools
$243M Genesis Heist: Suspect "Danny Meech" Detained in Dubai?
Researcher ZachXBT has stated that a British national implicated in the major $243 million cryptocurrency breach involving lender
7 views