Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Most AI Startups Are Just Thin Wrappers Around APIs
════════════════════════
𐀪 Author: Splicer Scorn: Lugubrious, Loquatious, Volatile...
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 23:02:13 GMT
════════════════════════
⌗ Tags: #programming #ai #api #hacking #cyber
Medium
Most AI Startups Are Just Thin Wrappers Around APIs
There is a quiet pattern you start to notice once you have been around enough demo days, launch threads, and breathless Medium posts…
32 views
Daily Writeups
⤷ Title: HackTheBox: Soulmate Writeup
════════════════════════
𐀪 Author: Rahaliashraf
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 22:33:03 GMT
════════════════════════
⌗ Tags: #ctf #ctf_writeup #hacking #cybersecurity #hackthebox
Medium
HackTheBox: Soulmate Writeup
This is a detailed writeup for the Soulmate machine from HackTheBox, covering the path from initial reconnaissance to obtaining the root…
24 views
Daily Writeups
⤷ Title: Advent of Cyber 2025 Day 22 | TryHackMe | C2 Detection - Command & Carol | WriteUp
════════════════════════
𐀪 Author: Axoloth
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 22:51:04 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme_writeup #tryhackme #cyber_security_awareness #cybersecurity
Medium
Advent of Cyber 2025 Day 22 | TryHackMe | C2 Detection - Command & Carol | WriteUp
Explore how to analyze a large PCAP and extract valuable information
33 views
Daily Writeups
⤷ Title: University CTF 2025: Tinsel Trouble experience (and writeups)
════════════════════════
𐀪 Author: Maksim Hayder
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 23:23:45 GMT
════════════════════════
⌗ Tags: #ctf_writeup #hackthebox #ctf #hackthebox_writeup #htb_writeup
Medium
University CTF 2025: Tinsel Trouble experience (and writeups)
The University CTF 2025: Tinsel Trouble, mainly for University students/teams event lasted from December 19th-21st 2025.
32 views
Daily Writeups
⤷ Title: Hack The Box University CTF 2025: Tinsel Trouble - Coding Challenges
════════════════════════
𐀪 Author: Juan Pablo Morales
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 20:19:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #coding #hackthebox_writeup #hackthebox #ctf_writeup
Medium
Hack The Box University CTF 2025: Tinsel Trouble
Hello everyone! 👋
41 views
Daily Writeups
⤷ Title: Building Your First Hacking Lab: A Step-by-Step Guide to VirtualBox and Kali Linux
════════════════════════
𐀪 Author: Tonia Taiwo
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 22:45:01 GMT
════════════════════════
⌗ Tags: #free_cyber_security #cybersecurity #ethical_hacking #cybersecurity_awareness #cybersecurity_training
Medium
Building Your First Hacking Lab: A Step-by-Step Guide to VirtualBox and Kali Linux
Your journey into cybersecurity starts with a safe place to break things.
45 views
Daily Writeups
⤷ Title: Anna’s Archive Claims 300TB Spotify Mirror, Forcing an Investigation Into a Massive Music Data Leak
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 01:53:52 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Training Data #Anna’s Archive #copyright #data leak #DRM Bypass #Music Piracy #Spotify #Streaming Platforms
Daily CyberSecurity
Anna’s Archive Claims 300TB Spotify Mirror, Forcing an Investigation Into a Massive Music Data Leak
The shadow library Anna’s Archive has claimed that it has carried out a large-scale “mirror” of Spotify’s music catalog and intends to distribute it via torrents totaling roughly 300 terabytes. Sp…
38 views
Daily Writeups
⤷ Title: Critical Unauthenticated MongoDB Flaw Leaks Sensitive Data via zlib Compression
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:50:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_14847 #database security #Heap Leak #Information Disclosure #Memory Leak #mongodb #NoSQL Security #Patch Alert #unauthenticated exploit #zlib
Daily CyberSecurity
Critical Unauthenticated MongoDB Flaw Leaks Sensitive Data via zlib Compression
A critical vulnerability was disclosed in MongoDB, one of the world’s most popular NoSQL database platforms. The security flaw, tracked as CVE-2025-14847, allows attackers to siphon sensitiv…
30 views
Daily Writeups
⤷ Title: The 3-Million Email Siege: Inside Scripted Sparrow’s Global Industrialized BEC Machine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:46:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Automated Cyberattacks #BEC #business email compromise #Email Security #Executive Impersonation #Finance Fraud #Fortra FIRE #phishing #Scripted Sparrow #social engineering
Daily CyberSecurity
The 3-Million Email Siege: Inside Scripted Sparrow’s Global Industrialized BEC Machine
A massive, globally distributed cybercriminal collective is aggressively targeting corporate finance departments with a highly automated Business Email Compromise (BEC) campaign. A new report by F…
22 views
Daily Writeups
⤷ Title: A Desperate Cartel: Inside the Unlikely Alliance of Qilin, DragonForce, and a Fading LockBit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:43:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #Cybercrime Cartel #data extortion #DragonForce #LockBit #Operation Cronos #Qilin #RaaS #ransomware #Yarix Intelligence
Daily CyberSecurity
A Desperate Cartel: Inside the Unlikely Alliance of Qilin, DragonForce, and a Fading LockBit
In a digital underworld increasingly fractured by law enforcement takedowns and eroding trust, three of the most notorious ransomware groups have allegedly joined forces. A new report by the Yarix…
19 views
Daily Writeups
⤷ Title: Iranian “Prince of Persia” APT Resurfaces with Telegram-Controlled Stealth Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:38:30 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #cyber_espionage #DGA #Foudre v34 #Infy #Iranian APT #Malware_as_a_Service #Prince of Persia #SafeBreach #Telegram C2 #Tonnerre v50
Daily CyberSecurity
Iranian “Prince of Persia” APT Resurfaces with Telegram-Controlled Stealth Malware
After years of radio silence that led many to believe they had disbanded, one of Iran’s most persistent state-sponsored threat groups has resurfaced with a revamped arsenal. A new investigat…
20 views
Daily Writeups
⤷ Title: “Purchase Order” Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:32:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyble #Government Cyberattacks #Malware_as_a_Service #Manufacturing Security #PureLog Stealer #Remcos RAT #steganography #TaskScheduler #UAC bypass #Unified Commodity Loader
Daily CyberSecurity
“Purchase Order” Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia
A highly sophisticated cyber-espionage campaign is indiscriminately targeting the manufacturing and government sectors across Europe and the Middle East, using a “Swiss Army Knife” sty…
25 views
Daily Writeups
⤷ Title: Identity Theft in M-Files: High-Severity Flaw Lets Insiders Hijack User Accounts and Access Sensitive Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:26:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_13008 #CVE_2025_14267 #cybersecurity #Document Management #identity theft #Information Disclosure #M_Files #M_Files Server #Patch Update #Session Hijacking
Daily CyberSecurity
Identity Theft in M-Files: High-Severity Flaw Lets Insiders Hijack User Accounts and Access Sensitive Data
M-Files, the intelligent information management platform used by enterprises to organize their documents, has issued a security advisory addressing two distinct vulnerabilities. The most critical …
33 views
Daily Writeups
⤷ Title: “React2Shell” Exploited: New EtherRAT Malware Hunts for Crypto via Node.js
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:21:31 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #Blockchain C2 #Cryptocurrency Theft #CVE_2025_55182 #cyber_espionage #Ethereum #EtherRAT #Node.js #React2Shell #Remote Code Execution
Daily CyberSecurity
“React2Shell” Exploited: New EtherRAT Malware Hunts for Crypto via Node.js
A new, sophisticated malware campaign is sweeping across the internet, leveraging a recently disclosed vulnerability to install cryptocurrency-stealing software on unsuspecting servers. The AhnLab…
25 views
Daily Writeups
⤷ Title: AI-Generated Decoys & XLL Stealth: Inside the New “EchoGather” Cyber Espionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:18:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Phishing #backdoor #CVE_2025_8088 #cyber_espionage #EchoGather #GOFFEE #Intezer #Paper Werewolf #russia #WinRAR #XLL Malware
Daily CyberSecurity
AI-Generated Decoys & XLL Stealth: Inside the New “EchoGather” Cyber Espionage Campaign
A cyber-espionage group known for hunting Russian organizations has upgraded its arsenal, deploying malicious Excel add-ins to slip past defenses and install a new backdoor. A new report from Inte…
21 views
Daily Writeups
⤷ Title: Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:11:27 +0000
════════════════════════
⌗ Tags: #Malware #Android security #Banking Trojan #Cybercrime #Dropper Malware #Group_IB #mobile security #SMS Stealer #Telegram bot #Uzbekistan #Wonderland Malware
Daily CyberSecurity
Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts
A sophisticated wave of mobile malware is sweeping through Central Asia, marking a dangerous evolution in how cybercriminals target Android users. A new in-depth analysis by Group-IB reveals that …
23 views
Daily Writeups
⤷ Title: Zero-Day Alert: Linksys Auth Bypass Lets Hackers Hijack Routers Without Passwords
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:06:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CSIT #CVE_2025_52692 #IoT security #Linksys E9450_SG #Network Safety #router security #Singtel #Telnet #zero_day
Daily CyberSecurity
Zero-Day Alert: Linksys Auth Bypass Lets Hackers Hijack Routers Without Passwords
A popular Wi-Fi 6 router found in thousands of homes has been blown wide open by security researchers, revealing a critical flaw that allows attackers to bypass login screens and seize full contro…
27 views
Daily Writeups
⤷ Title: The Payroll Trap: New Quishing Campaign Uses Fake CAPTCHAs to Hijack Employee Paychecks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:01:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CAPTCHA Bypass #Credential Theft #Cyfirma #Employee Awareness #mobile security #Payroll Fraud #phishing #QR code phishing #Quishing #social engineering
Daily CyberSecurity
The Payroll Trap: New Quishing Campaign Uses Fake CAPTCHAs to Hijack Employee Paychecks
A sophisticated new phishing campaign is targeting employees where they are most vulnerable—their paychecks—by leveraging QR codes to bypass corporate security defenses. A new analysis by CYFIRMA …
26 views
Daily Writeups
⤷ Title: Breaking OAuth 2.0: Vulnerabilities & Exploitation Guide
════════════════════════
𐀪 Author: Fuzzyy Duck
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 01:45:36 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #penetration_testing #web_security
Medium
Breaking OAuth 2.0: Vulnerabilities & Exploitation Guide
OAuth 2.0 is the industry standard for authorization, allowing users to grant third-party websites and applications access to their…
29 views
Daily Writeups
⤷ Title: Time-Based SQL Injection: Complete Real-World Bug Bounty Guide
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 01:38:11 GMT
════════════════════════
⌗ Tags: #sql #penetration_testing #technology #bug_bounty #cybersecurity
Medium
Time-Based SQL Injection: Complete Real-World Bug Bounty Guide
How Silent Delays, Burp Repeater, and Patient Testing Turn “Nothing Happening” into a Real Vulnerability
36 views
Daily Writeups
⤷ Title: The Hidden Dangers of Free Wi-Fi – How Hackers Can Steal Your Data Without You Knowing
════════════════════════
𐀪 Author: Salaheddinta
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 01:52:29 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #technology #data_science
Medium
The Hidden Dangers of Free Wi-Fi – How Hackers Can Steal Your Data Without You Knowing
Photo by Dreamlike Street on Unsplash
26 views