Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: 1 million d’attaques en 7 jours : Ce que j’ai appris en exposant un serveur sur Internet
════════════════════════
𐀪 Author: Desire Goore
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 01:15:39 GMT
════════════════════════
⌗ Tags: #hacking #cyberattack #internet #cybersecurity #honeypot
Medium
1 million d’attaques en 7 jours : Ce que j’ai appris en exposant un serveur sur Internet
INTRODUCTION : Le Silence avant la Tempête
32 views
Daily Writeups
⤷ Title: TryHackMe: Advent of Cyber 2025 (Day 7)
════════════════════════
𐀪 Author: Dystopianllama
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 00:49:24 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #tryhackme #tryhackme_walkthrough
Medium
TryHackMe: Advent of Cyber 2025 (Day 7)
Scan-ta Clause — Day 7
37 views
Daily Writeups
⤷ Title: NVIDIA Critical AI Patch: Isaac Lab and NeMo Framework Flaws Risk Full Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 03:13:45 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #CVE_2025_32210 #Deserialization #Isaac Lab #Isaac Sim #NeMo #NeMo Framework #nvidia #privilege escalation #rce
Daily CyberSecurity
NVIDIA Critical AI Patch: Isaac Lab and NeMo Framework Flaws Risk Full Code Execution
NVIDIA issued a Critical (CVSS 9.0) patch for Isaac Lab and the NeMo Framework, fixing flaws that allow code execution and data tampering in AI models.
32 views
Daily Writeups
⤷ Title: Dropbear SSH Flaw Risks Root Access on Embedded Linux via Unix Stream Forwarding
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 02:56:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Dropbear #embedded systems #Forwarding #LPE #privilege escalation #root shell #ssh #Unix Socket
Daily CyberSecurity
Dropbear SSH Flaw Risks Root Access on Embedded Linux via Unix Stream Forwarding
A critical LPE (CVE-2025-14282) in Dropbear SSH allows users to gain root access via Unix socket forwarding. Impacting embedded Linux, it's fixed in v2025.89.
27 views
Daily Writeups
⤷ Title: Tải Snake 8 Ball Pool Apk V2.0.6 Miễn Phí Cho Android
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 03:47:20 GMT
════════════════════════
⌗ Tags: #apkpure #games #hacking
Medium
Tải Snake 8 Ball Pool Apk V2.0.6 Miễn Phí Cho Android
Snake 8 Ball Pool là một tựa game kết hợp giữa hai thể loại quen thuộc: Snake (rắn săn mồi) và 8 Ball Pool (bi-a 8 bóng). Trong game này…
25 views
Daily Writeups
⤷ Title: TryHackMe: Brute It (Portuguese)
════════════════════════
𐀪 Author: blindXSS
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 02:28:08 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #privilege_escalation #john_the_ripper #tryhackme #linux
Medium
TryHackMe: Brute It (Portuguese)
Introdução Como primeira story aqui no Medium, gostaria de compartilhar a minha experiência e minha triagem durante a realização da room…
29 views
Daily Writeups
⤷ Title: HackTheBox “Outbound” Writeup
════════════════════════
𐀪 Author: Alifia Rahmah
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 03:53:49 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup
Medium
HackTheBox “Outbound” Writeup
Name: Outbound
Difficulty: Easy 
OS: Linux
Link: Hack The Box :: Hack The Box
45 views
Daily Writeups
⤷ Title: Agentic AI Red Teaming Jobs in 2025–2026: How to Build a Career in the Hottest New Cyber Role
════════════════════════
𐀪 Author: Sajidur Rahman
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 03:06:44 GMT
════════════════════════
⌗ Tags: #jobs #cybersecurity #ai #red_team #ethical_hacking
Medium
Agentic AI Red Teaming Jobs in 2025–2026: How to Build a Career in the Hottest New Cyber Role
Agentic AI red teaming is rapidly becoming one of the most in-demand specialties in cybersecurity, blending offensive security with AI/ML…
47 views
Daily Writeups
⤷ Title: Silent Pivot: Exploiting SpeechRuntimeMove for Stealthy Lateral Movement via DCOM
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:57:03 +0000
════════════════════════
⌗ Tags: #Open Source Tool #COM Hijacking #DCOM #DLL Sideloading #Lateral Movement #post_exploitation #red teaming #Remote Registry #SpeechRuntime #Windows Security
Penetration Testing Tools
Silent Pivot: Exploiting SpeechRuntimeMove for Stealthy Lateral Movement via DCOM
SpeechRuntimeMove abuses DCOM and COM hijacking to execute code in an active user's session, bypassing the need for a full system takeover.
46 views
Daily Writeups
⤷ Title: Cheap Bots for Sale: Cambridge Study Reveals SMS Verification Bypassed for Just 8 Cents
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:48:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bot Armies #Cambridge University #COTSI #cybersecurity #Disinformation #fake accounts #Gray Market #Identity Crisis #SIM Farms #SMS Verification
Penetration Testing Tools
Cheap Bots for Sale: Cambridge Study Reveals SMS Verification Bypassed for Just 8 Cents
One of the key defensive barriers against the creation of fake online accounts has proven alarmingly fragile—capable of
31 views
Daily Writeups
⤷ Title: Perimeter Under Siege: 60 Million Attacks Target Industrial Edge Routers in 90-Day Surge
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:40:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Botnets #Chaya_005 #Critical Infrastructure #Forescout #Industrial Routers #OT Security #reconnaissance #RondoDox #ShadowV2 #Sierra Wireless
Penetration Testing Tools
Perimeter Under Siege: 60 Million Attacks Target Industrial Edge Routers in 90-Day Surge
Over a three-month observation period, Forescout researchers recorded more than 60 million malicious requests targeting devices positioned at
21 views
Daily Writeups
⤷ Title: The Ghost in the Machine: Operation MoneyMount-ISO Uses Fake Payment Lures to Unleash Phantom Stealer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:38:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Data Exfiltration #Discord Webhooks #Financial Cybercrime #Info_stealer #ISO Malware #Operation MoneyMount_ISO #Phantom Stealer #phishing campaign #Seqrite Labs #Telegram Bot
Penetration Testing Tools
The Ghost in the Machine: Operation MoneyMount-ISO Uses Fake Payment Lures to Unleash Phantom Stealer
While monitoring digital threat activity, researchers at Seqrite Labs uncovered a new targeted campaign dubbed Operation MoneyMount-ISO. The
11 views
Daily Writeups
⤷ Title: Ransomware Groups Pivot: The Rise of Weyhro C2, a New Advanced Command-and-Control Platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:37:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AMSI Bypass #Command and Control #cybercrime #cybersecurity #evasion techniques #HVNC #Memory_Only Malware #ransomware #threat intelligence #Weyhro C2
Penetration Testing Tools
Ransomware Groups Pivot: The Rise of Weyhro C2, a New Advanced Command-and-Control Platform
Within cybercriminal circles, the emergence of a new command-and-control framework known as Weyhro C2 has been observed. Its
10 views
Daily Writeups
⤷ Title: MFA Under Siege: The Rise of BlackForce, the Sophisticated “Live” Phishing Kit Targeting 11+ Global Brands
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:36:36 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlackForce #Credential Theft #cybersecurity #Man_in_the_Browser #MFA Bypass #phishing kit #React #Telegram #Zero Trust #Zscaler
Penetration Testing Tools
MFA Under Siege: The Rise of BlackForce, the Sophisticated "Live" Phishing Kit Targeting 11+ Global Brands
Since early August 2025, Zscaler researchers have been tracking the spread of a new phishing kit known as
14 views
Daily Writeups
⤷ Title: Digital Diaries: Is Your Smart Sex Toy Collecting More Data Than You Realize?
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:33:58 +0000
════════════════════════
⌗ Tags: #Data Leak #App Permissions #cybersecurity #data brokers #Digital Privacy #IoT Security #Lelo #Satisfyer #Sex Toy Privacy #Smart Tech #We_Vibe
Penetration Testing Tools
Digital Diaries: Is Your Smart Sex Toy Collecting More Data Than You Realize?
Many of us have installed an app “just once”—simply to breeze through registration, dismiss pop-ups, and finally reach
22 views
Daily Writeups
⤷ Title: Privacy Paradox: Freedom Chat Exposed User Phone Numbers and Secret PINs in Major Security Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:31:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #Converso #data privacy #Eric Daigle #Freedom Chat #Messaging App #Phone Number Leak #PIN Exposure #security vulnerability #Tanner Haas
Penetration Testing Tools
Privacy Paradox: Freedom Chat Exposed User Phone Numbers and Secret PINs in Major Security Breach
Freedom Chat, an application marketed as a secure messaging platform, has been exposed to serious risk following the
17 views
Daily Writeups
⤷ Title: Intimacy for Ransom: ShinyHunters Extorts PornHub Over 200M Stolen Premium Search & Watch Records
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:29:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #data breach #Extortion #Mixpanel #PII #PornHub #Premium Users #Search History #ShinyHunters #ShinySpid3r
Penetration Testing Tools
Intimacy for Ransom: ShinyHunters Extorts PornHub Over 200M Stolen Premium Search & Watch Records
PornHub has stated that it has become the target of extortion by the ShinyHunters group, which claims to
19 views
Daily Writeups
⤷ Title: Oil Exports Paralyzed: PDVSA Administrative Collapse Traps 11M Barrels After Ransomware Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:27:51 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #Crude Oil #cyberattack #Energy Security #Jose Terminal #Oil Exports #PDVSA #ransomware #US_Venezuela Tensions #Venezuela
Penetration Testing Tools
Oil Exports Paralyzed: PDVSA Administrative Collapse Traps 11M Barrels After Ransomware Attack
Venezuela’s state-owned oil company PDVSA has reported a cyberattack on its systems, stressing that oil production and refining
16 views
Daily Writeups
⤷ Title: SoundCloud Data Breach Exposes Millions as Hackers Steal User Emails
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:27:01 +0000
════════════════════════
⌗ Tags: #Data Leak #cybersecurity incident #data breach #DDOS attack #ShinyHunters #SoundCloud #User Data Leak #VPN Issues
Penetration Testing Tools
SoundCloud Data Breach Exposes Millions as Hackers Steal User Emails
The streaming platform SoundCloud has confirmed that recent outages and problems accessing the service via VPN were the
17 views
Daily Writeups
⤷ Title: Final Scan: Google to Shut Down Dark Web Report in 2026, Pivoting to Actionable Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:23:30 +0000
════════════════════════
⌗ Tags: #Google #cybersecurity #Dark Web Report #data breach #google #Google Password Manager #Passkeys #privacy #Retirement #Security Checkup
Penetration Testing Tools
Final Scan: Google to Shut Down Dark Web Report in 2026, Pivoting to Actionable Security
Google is winding down its Dark Web Report tool, which alerted users when their email addresses or other
21 views
Daily Writeups
⤷ Title: The Next Log4Shell? Global Hackers Weaponize React2Shell for RCE and Cloud Takeovers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:22:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #China Espionage #cloud security #CVE_2025_55182 #cybersecurity #Google Threat Intelligence #Next.js #RCE #React Server Components #React2Shell
Penetration Testing Tools
The Next Log4Shell? Global Hackers Weaponize React2Shell for RCE and Cloud Takeovers
A critical vulnerability in the widely used JavaScript library React, dubbed React2Shell, is already being exploited at scale.
36 views