Daily Writeups
@Daily_Writeups
3.62K subscribers
4 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.62K subscribers
Daily Writeups
⤷ Title: HTB — Starting Point [TIER 0] — “Dancing”
════════════════════════
𐀪 Author: Faraam
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 21:35:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #beginner #hacking #hackthebox #capture_the_flag
Medium
HTB — Starting Point [TIER 0] — “Dancing”
We’re back with our third box, but this time focused on a Windows protocol: SMB.
16 views
Daily Writeups
⤷ Title: My Journey toward HTB’s CJCA
════════════════════════
𐀪 Author: Shane
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 20:22:11 GMT
════════════════════════
⌗ Tags: #hacking
Medium
My Journey toward HTB’s CJCA
Pentest in a Nutshell
18 views
Daily Writeups
⤷ Title: Hacking the iOS system keyboard
════════════════════════
𐀪 Author: Matej Kokošinek
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 20:21:53 GMT
════════════════════════
⌗ Tags: #ios #xcode #hacking #bugs
Medium
Hacking the iOS system keyboard
So. Being a respectable iOS citizen is just not enough for you is it?
29 views
Daily Writeups
⤷ Title: TryHackMe Writeup: All in One
════════════════════════
𐀪 Author: Berkay AĞGÜL
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 21:24:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_writeup #tryhackme #tryhackme_walkthrough #cybercrime
Medium
TryHackMe Writeup: All in One
Siber güvenlik dünyasında her başarılı sızma testi, sabırlı ve titiz bir keşif süreciyle başlar. Bugün, standart bir Apache karşılama…
17 views
Daily Writeups
⤷ Title: TryHackMe: Advent of Cyber 2025 — Day 21 Walkthrough
════════════════════════
𐀪 Author: Inyanji Lynnette
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 20:18:32 GMT
════════════════════════
⌗ Tags: #advent_of_cyber_2025 #cyberchef #advent_of_cyber25_day_21 #malware_analysis #tryhackme
Medium
TryHackMe: Advent of Cyber 2025 — Day 21 Walkthrough
Malware Analysis — Malhare.exe
8 views
Daily Writeups
⤷ Title: TryHackMe Advent of Cyber 2025 (Day 21) : Malware Analysis — Malhare.exe
════════════════════════
𐀪 Author: Hibullahi AbdulAzeez
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 19:56:37 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #malware_analysis #aoc2025 #advent_of_cyber_2025
Medium
TryHackMe Advent of Cyber 2025 (Day 21) : Malware Analysis — Malhare.exe
Static Analysis of HTA Malware: From Surveys to Security Failures
9 views
Daily Writeups
⤷ Title: Steganography 101: Hiding secret in plain sights using STEGHIDE
════════════════════════
𐀪 Author: Madhu Sudhan
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 21:43:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #image_steganography #kali_linux #steganography
Medium
Steganography 101: Hiding secret in plain sights using STEGHIDE
1. Introduction:
15 views
Daily Writeups
⤷ Title: Why Cybersecurity Beginners Fail (3 Common Mistakes)
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 21:15:10 GMT
════════════════════════
⌗ Tags: #carrer #common_mistakes #cybersecurity #ethical_hacking #tech_skills
Medium
Why Cybersecurity Beginners Fail (3 Common Mistakes)
The Brutal Truth I Wish Someone Had Told Me Years Ago
25 views
Daily Writeups
⤷ Title: Finishing the year 2025, My Cybersecurity Journey
════════════════════════
𐀪 Author: Aaronashley
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 20:27:51 GMT
════════════════════════
⌗ Tags: #tcm_security #comptia #ethical_hacking #cybersecurity
Medium
Finishing the year 2025, My Cybersecurity Journey
The start of The Husky Hacker.
28 views
Daily Writeups
⤷ Title: VibeHackAI: Human‑Led Multi-Agent AI Penetration Testing Team
════════════════════════
𐀪 Author: Kyo
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 23:58:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #ai #ai_agent #open_source
Medium
VibeHackAI: Human‑Led Multi-Agent AI Penetration Testing Team
Have you ever imagined being the leader of a team made up only of members with over IQ140?
29 views
Daily Writeups
⤷ Title: Advent of Cyber 2025 Day 21 — Malware Analysis Bonus Challenge
════════════════════════
𐀪 Author: Matt Swann
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 23:39:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #reverse_engineering #malware_analysis #advent_of_cyber_2025 #tryhackme
Medium
Advent of Cyber 2025 Day 21 — Malware Analysis Bonus Challenge
This write up is for the bonus challenge at the end of Day 21 — “Malware Analysis — Malhare.exe” which, when completed, provides a key for…
24 views
Daily Writeups
⤷ Title: When You Post, You Become the Target
════════════════════════
𐀪 Author: Sam Galope
════════════════════════
ⴵ Time: Sun, 21 Dec 2025 23:04:48 GMT
════════════════════════
⌗ Tags: #osint #ethical_hacking #cybersecurity #information_security #osint_investigation
Medium
When You Post, You Become the Target
A real-world lesson in public OSINT from a Philippine scandal
27 views
Daily Writeups
⤷ Title: Vectored Overloading: New “Ghost Network” Hijacks YouTube to Deploy Stealthy GachiLoader
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:00:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Check Point Research #GachiLoader #Infostealer #Kidkadi #Malware_as_a_Service #Node.js Malware #PE Injection #Rhadamanthys #Vectored Overloading #YouTube Ghost Network
Penetration Testing Tools
Vectored Overloading: New "Ghost Network" Hijacks YouTube to Deploy Stealthy GachiLoader
Check Point researchers have uncovered a new campaign known as the so-called YouTube Ghost Network—a web of hijacked
25 views
Daily Writeups
⤷ Title: Router Risk: New FreeBSD Flaw Exploits IPv6 to Grant Remote Code Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 01:58:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_14558 #FreeBSD #IPv6 #network security #OS Command Injection #Patch Alert #RCE #resolvconf #Router Advertisement #rtsold
Penetration Testing Tools
Router Risk: New FreeBSD Flaw Exploits IPv6 to Grant Remote Code Execution
A newly discovered vulnerability in FreeBSD components responsible for IPv6 configuration allows an attacker on the same local
29 views
Daily Writeups
⤷ Title: The Two-Day Tax: How Much of Your Life Is Being Stolen by Online Ads?
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 01:56:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2025 Report #ad blocker #AdGuard #Cyber Security #data privacy #Data Savings #FBI Recommendations #Google Trackers #Page Load Speed #web performance
Penetration Testing Tools
The Two-Day Tax: How Much of Your Life Is Being Stolen by Online Ads?
Have you ever considered how much of your personal time is quietly consumed by those “universally beloved” online
20 views
Daily Writeups
⤷ Title: Ghost in the Machine: The $6B “Doublespeed” Leak Exposes the AI Warehouse Hijacking TikTok
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 01:55:49 +0000
════════════════════════
⌗ Tags: #Data Leak #a16z #AI Influencers #Algorithmic Manipulation #Andreessen Horowitz #Doublespeed #Generative AI #Kira Hacker #Smartphone Farm #Social Media Fraud #TikTok
Penetration Testing Tools
Ghost in the Machine: The $6B "Doublespeed" Leak Exposes the AI Warehouse Hijacking TikTok
In an industry where artificial intelligence increasingly sets the rules of the game, one startup has found itself
23 views
Daily Writeups
⤷ Title: n8n Under Fire: Critical CVSS 10.0 RCE Vulnerability Grants Total Server Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:55:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_68613 #Cyber Security #DevOps #Expression Injection #infosec #n8n #Patch Update #rce #Remote Code Execution #Workflow Automation
Daily CyberSecurity
n8n Under Fire: Critical CVSS 10.0 RCE Vulnerability Grants Total Server Access
n8n warns of a CVSS 10.0 RCE (CVE-2025-68613) in its expression system. Attackers can seize total server control. Upgrade to v1.122.0 immediately.
28 views
Daily Writeups
⤷ Title: Hackers Abuse “Device Codes” to Bypass Security and Seize Microsoft 365 Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:50:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #cybersecurity #Device Authorization #MFA Bypass #Microsoft 365 #OAuth 2.0 #phishing #Proofpoint #social engineering #Token Theft
Daily CyberSecurity
Hackers Abuse "Device Codes" to Bypass Security and Seize Microsoft 365 Accounts
Proofpoint warns of a surge in device code phishing where attackers abuse Microsoft 365 OAuth flows to hijack accounts and bypass MFA.
21 views
Daily Writeups
⤷ Title: The Silent Hijacker: New Cellik Android RAT Turns Legitimate Google Play Apps into Surveillance Tools
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:50:24 +0000
════════════════════════
⌗ Tags: #Malware #Android RAT #APK Builder #Cellik #Credential Theft #Google Play Store #iVerify #Malware_as_a_Service #mobile security #Remote Access Trojan #spyware #vnc
Daily CyberSecurity
The Silent Hijacker: New Cellik Android RAT Turns Legitimate Google Play Apps into Surveillance Tools
iVerify exposes Cellik, a $150/mo Android RAT that wraps malicious code inside Play Store apps to grant attackers total device control.
13 views
Daily Writeups
⤷ Title: Exim’s Poisoned Record: How a Failed Patch and SQL Injection Lead to Critical Heap Overflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:43:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_67896 #Exim #Heap Buffer Overflow #Mail Transfer Agent #memory corruption #NIST #Ratelimit ACL #SMTP Security #sql injection #SQLite
Daily CyberSecurity
Exim’s Poisoned Record: How a Failed Patch and SQL Injection Lead to Critical Heap Overflows
NIST warns of a critical Exim 4.99 flaw. A failed SQLi patch allows attackers to poison SQLite records and trigger a 1.5MB heap buffer overflow.
12 views
Daily Writeups
⤷ Title: “ClickFix” Trap: Fake Human Verification Leads to Qilin Ransomware Infection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:40:50 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Fortinet #Human Verification #info_stealer #NetSupport RAT #Qilin Ransomware #social engineering #Sophos CTU #StealC V2 #VPN Breach
Daily CyberSecurity
"ClickFix" Trap: Fake Human Verification Leads to Qilin Ransomware Infection
Sophos CTU reveals how the ClickFix tactic led to a Qilin ransomware attack via NetSupport RAT and StealC V2 using stolen VPN credentials.
11 views