Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: DumpGuard Tool Bypasses Credential Guard to Steal NTLMv1 Hashes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:18:32 +0000
════════════════════════
⌗ Tags: #Open Source Tool #credential dumping #Credential Guard #cybersecurity #DumpGuard #hacking tool #NTLMv1 #Remote Credential Guard #Windows Security
Penetration Testing Tools
DumpGuard Tool Bypasses Credential Guard to Steal NTLMv1 Hashes
DumpGuard, a new tool, exploits the Remote Credential Guard protocol to steal NTLMv1 hashes from modern Windows systems, even when Credential Guard is active.
31 views
Daily Writeups
⤷ Title: Student Sells Hacked Sites: Beima Web Shell Undetectable, Targets .Gov & .Edu
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:08:15 +0000
════════════════════════
⌗ Tags: #Malware #Bangladesh #Beima #Compromised Websites #cPanel #cybercrime #cybersecurity #Howler Cell #Telegram #Web Shell #WordPress
Penetration Testing Tools
Student Sells Hacked Sites: Beima Web Shell Undetectable, Targets .Gov & .Edu
Researchers from Howler Cell have detailed an underground marketplace for compromised websites operated by students and freelancers across
27 views
Daily Writeups
⤷ Title: APT-C-53 Hits Ukraine: New Attack Exploits WinRAR Flaw for Persistence
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:06:53 +0000
════════════════════════
⌗ Tags: #Cybercriminals #360 Threat Intelligence #APT_C_53 #CVE_2025_8088 #Cyber Espionage #Directory Traversal #HTA #malware #persistence #Ukraine #Winrar
Penetration Testing Tools
APT-C-53 Hits Ukraine: New Attack Exploits WinRAR Flaw for Persistence
APT-C-53 has once again intensified its distribution of malicious attachments targeting organizations in Ukraine. The latest wave of
11 views
Daily Writeups
⤷ Title: The Proxy Ghost: IPCola’s Network Feeds on User Devices Covertly
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:01:37 +0000
════════════════════════
⌗ Tags: #Malware #Bandwidth Sharing #Covert Monetization #cybercrime #Gaganode #IPCola #NuoChen Technology #Proxy Market #Synthient Research #TV Boxes
Penetration Testing Tools
The Proxy Ghost: IPCola's Network Feeds on User Devices Covertly
The launch of the IPCola service on underground forums in 2023 initially appeared to be yet another proxy
8 views
Daily Writeups
⤷ Title: Google & Warby Parker Partner on AI Smart Glasses to Launch in 2026
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:00:07 +0000
════════════════════════
⌗ Tags: #Google #2026 #AI #Android XR #Gemini #google #Smart Glasses #Spatial Computing #Tech Partnership #Warby Parker #Wearables
Penetration Testing Tools
Google & Warby Parker Partner on AI Smart Glasses to Launch in 2026
On Monday, Warby Parker and Google announced that they are preparing to release AI-powered smart glasses, with the
6 views
Daily Writeups
⤷ Title: Japan Cyber-Shock: Teen Hacked Kaikatsu Club, Used AI to Bypass Defenses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:57:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #Cyber Security #cybercrime #data breach #hacking #Japan #Kaikatsu Club #Osaka Police #Teenage Hacker
Penetration Testing Tools
Japan Cyber-Shock: Teen Hacked Kaikatsu Club, Used AI to Bypass Defenses
At the beginning of the year, Japan was shaken by a scandal surrounding a major data breach involving
7 views
Daily Writeups
⤷ Title: China’s “King of Vulnerabilities” Hacked: Knownsec Leak Exposes Zero-Day Flaws
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:56:14 +0000
════════════════════════
⌗ Tags: #Data Leak #Breach #China #Corporate Espionage #cybersecurity #data leak #Github #Knownsec #Offensive Cyber #SuperHei #zero_day
Penetration Testing Tools
China's "King of Vulnerabilities" Hacked: Knownsec Leak Exposes Zero-Day Flaws
A data leak at the Chinese company Knownsec—long heralded as one of the flagships of the nation’s cybersecurity
8 views
Daily Writeups
⤷ Title: ZeroBoot: New Flaw Bypasses Samsung Galaxy Encryption with Physical Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:47:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Android #cybersecurity #FBE #File Encryption #Physical Access #Race Condition #Samsung Galaxy A25 #vulnerability #ZeroBoot
Penetration Testing Tools
ZeroBoot: New Flaw Bypasses Samsung Galaxy Encryption with Physical Access
A researcher known under the pseudonym Vulndisclosure has reported a vulnerability, dubbed ZeroBoot, that enables an attacker to
8 views
Daily Writeups
⤷ Title: Critical Shutdown: Ransomware Cripples Puerto Rico Agencies Via Contractor Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:44:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASES #CFSE #CISA #cybersecurity #FBI #government services #PRITS #Puerto Rico #ransomware #supply chain attack
Penetration Testing Tools
Critical Shutdown: Ransomware Cripples Puerto Rico Agencies Via Contractor Breach
A ransomware attack has crippled the operations of several key Puerto Rican government agencies, yet officials have still
9 views
Daily Writeups
⤷ Title: The KVM with a Secret: NanoKVM Ships with Critical Flaws and a Covert Microphone
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:39:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #Covert Microphone #cybersecurity #Information Security #KVM #NanoKVM #Remote Management #RISC_V #Sipeed #Supply Chain
Penetration Testing Tools
The KVM with a Secret: NanoKVM Ships with Critical Flaws and a Covert Microphone
In February, a Slovenian information security researcher published an analysis of the Chinese remote-management device NanoKVM, revealing that
9 views
Daily Writeups
⤷ Title: $243M Genesis Heist: Suspect “Danny Meech” Detained in Dubai?
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 03:32:57 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arrest #Bitcoin #Crypto Crime #crypto hack #Dubai #Ethereum #Genesis #Law Enforcement #Social Engineering #ZachXBT
Penetration Testing Tools
$243M Genesis Heist: Suspect "Danny Meech" Detained in Dubai?
Researcher ZachXBT has stated that a British national implicated in the major $243 million cryptocurrency breach involving lender
7 views
Daily Writeups
⤷ Title: Slack CEO Denise Dresser Joins OpenAI as CRO to Solve the Profitability Puzzle
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:23:54 +0000
════════════════════════
⌗ Tags: #Technology #ChatGPT #CRO #Denise Dresser #enterprise AI #Fidji Simo #monetization #OpenAI #Revenue Strategy #Silicon Valley #Slack
Daily CyberSecurity
Slack CEO Denise Dresser Joins OpenAI as CRO to Solve the Profitability Puzzle
OpenAI hires Slack CEO Denise Dresser as CRO to spearhead revenue strategy. Her mission: scale enterprise adoption and solve the company's urgent profitability puzzle.
16 views
Daily Writeups
⤷ Title: $2,500 Bounty: The Silent Cache Poisoning Attack Hidden in One Header
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:21:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #technology #cybersecurity #tech #penetration_testing
Medium
$2,500 Bounty: The Silent Cache Poisoning Attack Hidden in One Header
The Wild Cache Poisoning Trick That Turned Simple Headers into a Full Denial-of-Service Attack
14 views
Daily Writeups
⤷ Title: $1,000 Bounty: How Bypass Admin Approval in an inDriver
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:17:14 GMT
════════════════════════
⌗ Tags: #technology #programming #penetration_testing #cybersecurity #bug_bounty
Medium
$1,000 Bounty: How Bypass Admin Approval in an inDriver
A simple change in one request turned into a full moderation bypass — here’s how it worked.
9 views
Daily Writeups
⤷ Title: Hacking is 20% exploitation and 80% documentation.
════════════════════════
𐀪 Author: ZAYN
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 06:02:17 GMT
════════════════════════
⌗ Tags: #vapt #report_writing #hacking #penetration_testing #cybersecurity
Medium
Hacking is 20% exploitation and 80% documentation.
If a CISO can’t read your report, you didn’t hack anything — you just wasted their budget.
19 views
Daily Writeups
⤷ Title: HackSmarter Arasaka AD Lab Writeup
════════════════════════
𐀪 Author: Avyukt Security
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:45:44 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ctf_writeup #hacking #cybersecurity #active_directory
Medium
HackSmarter Arasaka AD Lab Writeup
By: Vedant Bhalgama (@ActiveXSploit)
16 views
Daily Writeups
⤷ Title: Tools To Investigate Phone Numbers-OSINT
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:21:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint_investigation #osint #hacking #teaching
Medium
Tools To Investigate Phone Numbers-OSINT
New and updated, More than 20+ tools will help in your investigation journey
19 views
Daily Writeups
⤷ Title: From NTLM Relay to Domain Compromise: A Practical Walkthrough of ADCS ESC8
════════════════════════
𐀪 Author: codesterzz
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:12:17 GMT
════════════════════════
⌗ Tags: #active_directory #linux #ethical_hacking #kali_linux #hacking
Medium
From NTLM Relay to Domain Compromise: A Practical Walkthrough of ADCS ESC8
Active Directory Certificate Services (ADCS) introduces several misconfigurations that attackers can abuse, and ESC8 is one of the most…
25 views
Daily Writeups
⤷ Title: Deep-Dive Domain Intelligence: A Practical WHOIS Recon Walkthrough
════════════════════════
𐀪 Author: Abhayal
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 04:54:04 GMT
════════════════════════
⌗ Tags: #reconnaissance #cybersecurity #infosec #threat_intelligence #osint
Medium
Deep-Dive Domain Intelligence: A Practical WHOIS Recon Walkthrough
Understanding who owns a domain, how it evolved, and where its infrastructure points is a foundational step in any cybersecurity…
27 views
Daily Writeups
⤷ Title: Passwords — A Cracking Christmas
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 05:24:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #tryhackme_walkthrough #aoc2025 #cyberattack
Medium
Passwords — A Cracking Christmas
Learn how to crack password-based encrypted files.
33 views
Daily Writeups
⤷ Title: Laravel Bastion: A Stripe-Inspired API Authentication Layer for Modern Laravel Apps
════════════════════════
𐀪 Author: MasteryOfLaravel
════════════════════════
ⴵ Time: Wed, 10 Dec 2025 05:54:15 GMT
════════════════════════
⌗ Tags: #bastion #laravelbastion #authentication #laravel #api_security
Medium
Laravel Bastion: A Stripe-Inspired API Authentication Layer for Modern Laravel Apps
API authentication in Laravel has come a long way — yet developers still struggle with token management, secret exposure, environment…
43 views