Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: [Write-up] HackTheBox - Sequel
════════════════════════
𐀪 Author: Mattana Olarikded
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 06:02:18 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #hack_the_box_writeup #hackthebox_walkthrough #hack_the_box_walkthrough #hackthebox
Medium
[Write-up] HackTheBox - Sequel
สวัสดีค่ะ วันนี้เราจะมาแชร์วิธีการหา root flag ในกล่อง Sequel ซึ่งเป็นกล่องใน Starting Point - Tier 1 ของ HackTheBox ค่ะ ถ้าพร้อมแล้ว…
19 views
Daily Writeups
⤷ Title: Growth, Grit, and Everything In-Between
════════════════════════
𐀪 Author: Gift Afortu
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:54:26 GMT
════════════════════════
⌗ Tags: #ethical_hacking #internship_experience #cybersecurity
Medium
Growth, Grit, and Everything In-Between
I’ve been quiet on this blog for a while, not because nothing was happening, but because a lot was happening.
8 views
Daily Writeups
⤷ Title: Hack The Box Broke My Brain — And That’s Why It Works
════════════════════════
𐀪 Author: Kenneth Solomon
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:54:16 GMT
════════════════════════
⌗ Tags: #creativity #hackthebox #cybersecurity #self_improvement #ethical_hacking
Medium
Hack The Box Broke My Brain — And That’s Why It Works
Hack The Box Broke My Brain — And That’s Why It Works Hack The Box is probably the most frustrating learning platform I’ve ever touched. And I mean that in the most honest way possible. When I …
8 views
Daily Writeups
⤷ Title: What Is API Security and Why Should Everyday People Care?
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:02:43 GMT
════════════════════════
⌗ Tags: #api #web_application_security #api_security #mobileapplicationsecurity #application_security
Medium
What Is API Security and Why Should Everyday People Care?
Ever wondered how your mobile banking application, like Opay, works and how it's able to process your transactions in seconds? It is all…
9 views
Daily Writeups
⤷ Title: API Threat Intelligence in Banking: Detecting Attacks Before They Hit Production
════════════════════════
𐀪 Author: Mavidev Software And Consulting Co.
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:02:42 GMT
════════════════════════
⌗ Tags: #threat_intelligence #digital_banking #open_banking #cyber_risk_management #api_security
Medium
Seeing the Invisible🧠
Discover how API threat intelligence helps banks detect attacks early, protect data, and safeguard customer trust.
16 views
Daily Writeups
⤷ Title: The 7 Non-Negotiable Rules for Securing Modern APIs
════════════════════════
𐀪 Author: Riya Barman
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 06:38:32 GMT
════════════════════════
⌗ Tags: #api_security #backend_development #software_engineering #web_development #nodejs
Medium
The 7 Non-Negotiable Rules for Securing Modern APIs
APIs are the backbone of modern software. They power mobile apps, web platforms, internal services, and third-party integrations. Yet…
28 views
Daily Writeups
⤷ Title: How to Prevent XSS Attacks in React Rich Text Editor
════════════════════════
𐀪 Author: Phinter Atienoo
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 14:29:42 GMT
════════════════════════
⌗ Tags: #rich_text_editor #dompurify #react #secure_rendering #xs
Medium
How to Prevent XSS Attacks in React Rich Text Editor
Learn how to Prevent XSS attacks in React Rich Text Editor by using HTML sanitization and DOMPurify for secure, safe content rendering.
29 views
Daily Writeups
⤷ Title: Remote Code Execution (RCE) Vulnerability Report
════════════════════════
𐀪 Author: Ravi Pipalwa
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:41:50 GMT
════════════════════════
⌗ Tags: #file_upload #bug_hunting #cve #rce_vulnerability
Medium
Remote Code Execution (RCE) Vulnerability Report
System: CDMS — Client Database Management System
44 views
Daily Writeups
⤷ Title: Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 14:54:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: Critical React2Shell Vulnerability (CVE-2025-55182) Analysis: Surge in Attacks Targeting RSC-Enabled Services Worldwide
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 09:44:38 +0000
════════════════════════
⌗ Tags: #News #Press Release #CISA #Criminal IP #Cyber Attack #Cybersecurity #RCE #React2Shell #Vulnerability
Hackread
Critical React2Shell Vulnerability (CVE-2025-55182) Analysis: Surge in Attacks Targeting RSC-Enabled Services Worldwide
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
40 views
Daily Writeups
⤷ Title: Blocking EDRs traffic: C-Based Tools That Block EDR Network Traffic via Windows Firewall and WFP
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:07:20 +0000
════════════════════════
⌗ Tags: #Open Source Tool #EDR evasion #endpoint security #firewall rules #red team tools #WFP filters #Windows Defender Firewall #Windows Filtering Platform #Windows internals
Penetration Testing Tools
Blocking EDRs traffic: C-Based Tools That Block EDR Network Traffic via Windows Firewall and WFP
New C-based tools demonstrate how EDR network traffic can be blocked using Windows Defender Firewall and WFP without disabling security software.
33 views
Daily Writeups
⤷ Title: Emergency Doxing: Scammers Impersonate Police to Steal Data from Apple, Charter, and Amazon
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:53:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amazon #Apple #Charter #cybercrime #data leak #Doxing #Emergency Data Request #Law Enforcement #Police Impersonation #Social Engineering
Penetration Testing Tools
Emergency Doxing: Scammers Impersonate Police to Steal Data from Apple, Charter, and Amazon
A scheme is gaining momentum worldwide in which doxers impersonate police officers and use so-called “emergency requests” to
28 views
Daily Writeups
⤷ Title: Kali Linux 2025.4 Final Release: GNOME is Now Wayland Exclusive, New Pentesting Tools Added
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:51:58 +0000
════════════════════════
⌗ Tags: #Linux #cybersecurity tools #ethical hacking #GNOME 49 #Kali 2025.4 #kali linux #KDE Plasma 6.5 #NetHunter #Pentesting #Wayland
Penetration Testing Tools
Kali Linux 2025.4 Final Release: GNOME is Now Wayland Exclusive, New Pentesting Tools Added
Kali Linux 2025.4 has been released—the final update of the year for the distribution relied upon by cybersecurity
17 views
Daily Writeups
⤷ Title: UK Sanctions 2 Chinese Firms: i-Soon & Integrity Tech Targeted for Cyberattacks on Allies
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:51:19 +0000
════════════════════════
⌗ Tags: #Cyber Security #China #Cyber Espionage #cyberattack #i_Soon #Integrity Tech #National Security #NCSC #State_Sponsored Hacking #UK Sanctions
Penetration Testing Tools
UK Sanctions 2 Chinese Firms: i-Soon & Integrity Tech Targeted for Cyberattacks on Allies
The United Kingdom has announced sanctions against two Chinese technology companies, accusing them of reckless and indiscriminate cyberattacks
18 views
Daily Writeups
⤷ Title: React2Shell Saga Continues: New DoS Flaw & Source Code Leak Discovered in React Server Components
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:47:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_55184 #Denial of Service #DoS #Next.js #React Server Components #React2Shell #Source Code Leak #Vercel #Web Vulnerability
Penetration Testing Tools
React2Shell Saga Continues: New DoS Flaw & Source Code Leak Discovered in React Server Components
The long-running React2Shell saga—which has continued to disrupt many web projects—has taken another turn: it has emerged that
15 views
Daily Writeups
⤷ Title: Windows RasMan Zero-Day: New DoS Flaw Crashes Service, Unofficial Fix Available
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:45:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #0patch #ACROS Security #CVE_2025_59230 #Denial of Service #DoS #Micropatch #privilege escalation #RasMan #windows #zero_day
Penetration Testing Tools
Windows RasMan Zero-Day: New DoS Flaw Crashes Service, Unofficial Fix Available
A newly discovered flaw in the Windows Remote Access Connection Manager (RasMan) service allows the operating system to
15 views
Daily Writeups
⤷ Title: NANOREMOTE Trojan Uses Google Drive as Covert C2 for Chinese Espionage Campaigns
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:44:18 +0000
════════════════════════
⌗ Tags: #Malware #C2 #Chinese Espionage #cloud security #FINALDRAFT #Google Drive API #NANOREMOTE #REF7707 #Windows Trojan #WMLOADER
Penetration Testing Tools
NANOREMOTE Trojan Uses Google Drive as Covert C2 for Chinese Espionage Campaigns
A new multifunctional Windows trojan dubbed NANOREMOTE leverages a cloud-based file storage service as a covert command-and-control hub,
19 views
Daily Writeups
⤷ Title: Total Takeover: Droidlock Android Malware Locks Phones, Records Screen, and Bypasses Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:42:21 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Services #Android malware #Device Admin #Droidlock #mobile security #phishing #ransomware #Screen Capture #Zimperium
Penetration Testing Tools
Total Takeover: Droidlock Android Malware Locks Phones, Records Screen, and Bypasses Security
A new Android malware known as Droidlock turns an infected smartphone into a device fully controlled by attackers.
19 views
Daily Writeups
⤷ Title: ConsentFix Attack: New Phishing Bypasses MFA to Hijack Microsoft Accounts via OAuth Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:34:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure CLI #ClickFix #cloud security #ConsentFix #MFA Bypass #Microsoft Account Takeover #OAuth 2.0 #phishing #Social Engineering
Penetration Testing Tools
ConsentFix Attack: New Phishing Bypasses MFA to Hijack Microsoft Accounts via OAuth Code
A new technique dubbed “ConsentFix” expands upon the already known ClickFix social engineering attack, enabling the hijacking of
20 views
Daily Writeups
⤷ Title: The End of d_genocide(): Linux Kernel Removes Controversial Function Name in 6.19 Refactor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:32:03 +0000
════════════════════════
⌗ Tags: #Linux #Al Viro #d_genocide #dcache #Inclusive Language #Linux 6.19 #Linux Kernel #open source #Terminology
Penetration Testing Tools
The End of d_genocide(): Linux Kernel Removes Controversial Function Name in 6.19 Refactor
In the source code of the forthcoming Linux 6.19 kernel, a function with a controversial name has been
15 views
Daily Writeups
⤷ Title: The HTTPS Lockdown: Chrome & CAs Retire 11 Legacy Domain Validation Methods by 2028
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:27:51 +0000
════════════════════════
⌗ Tags: #Technology #ACME #CA/Browser Forum #Certificate Authority #Chrome Root Program #DCV #Domain Validation #HTTPS #Security Standard #TLS
Penetration Testing Tools
The HTTPS Lockdown: Chrome & CAs Retire 11 Legacy Domain Validation Methods by 2028
The HTTPS certificate ecosystem is beginning a phased retreat from weaker methods of domain ownership verification. The Chrome
15 views