Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: The Trusted Trap: How Hackers Weaponize Microsoft’s Own Login Flows to Bypass MFA
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:03:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover (ATO) #Conditional Access #Device Code Phishing #Graphish #Microsoft 365 #OAuth 2.0 #Proofpoint #SquarePhish2 #TA2723 #UNK_AcademicFlare
Information Security News
The Trusted Trap: How Hackers Weaponize Microsoft’s Own Login Flows to Bypass MFA
Proofpoint is warning of a surge in phishing attacks in which attackers hijack corporate Microsoft 365 accounts not through fake login pages, but via a perfectly legitimate OAuth mechanism—device …
25 views
Daily Writeups
⤷ Title: Thunder & Lightning Return: Iran’s Infy APT Resurfaces with Advanced Foudre Exploits
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:02:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #Cyber Espionage #DGA #Ehsan8999100 #Foudre #Infy #Iranian APT #Prince of Persia #RSA Signature #Rugissement #SafeBreach #Telegram C2 #Tonnerre
Information Security News
Thunder & Lightning Return: Iran’s Infy APT Resurfaces with Advanced Foudre Exploits
After nearly five years of apparent dormancy, the Iranian threat group Infy—also known as Prince of Persia—has resurfaced. Security researchers at SafeBreach have identified a new campaign by this…
23 views
Daily Writeups
⤷ Title: Level Up: RansomHouse Deploys the “Mario” Encryptor to Crush ESXi Hypervisors
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:01:14 +0000
════════════════════════
⌗ Tags: #Malware #.emario #Askul Hack #Cyber Security 2025 #Dual_Key Encryption #Jolly Scorpius #Mario Encryptor #MrAgent #RansomHouse #Sparse Encryption #Unit 42 #VMware ESXi
Information Security News
Level Up: RansomHouse Deploys the “Mario” Encryptor to Crush ESXi Hypervisors
The group behind one of the most notorious ransomware distribution services, RansomHouse, has significantly strengthened the technical sophistication of its attacks. According to analysts, the cyb…
19 views
Daily Writeups
⤷ Title: Locked by BitLocker: 1,000 Systems Crippled in Massive Cyberattack on Romanian Waters
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 02:58:33 +0000
════════════════════════
⌗ Tags: #Malware #Administrația Națională Apele Române #BitLocker #Critical Infrastructure #Cybersecurity 2025 #DNSC #IOMMU #Living_off_the_land #National Cyberint Center #ransomware #Romania
Information Security News
Locked by BitLocker: 1,000 Systems Crippled in Massive Cyberattack on Romanian Waters
Romania’s National Administration of Water Resources has fallen victim to a large-scale cyberattack that resulted in the encryption of roughly one thousand workstations and servers. The breach occ…
22 views
Daily Writeups
⤷ Title: Forbidden Fruit: The New pearOS Reinvents Arch Linux with a Stunning macOS 26 Aesthetic
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 02:57:28 +0000
════════════════════════
⌗ Tags: #Linux #Alexandru Balan #Arch Linux #Global Menu #KDE Plasma 6.5 #Linux Distros 2026 #macOS 26 Tahoe #NiceC0re #open source #Pear Intelligence #pearOS
Information Security News
Forbidden Fruit: The New pearOS Reinvents Arch Linux with a Stunning macOS 26 Aesthetic
If you ever found the idea of “almost macOS, but on Linux” appealing, it is alive again. The pearOS project has returned more than a decade after the disappearance of Pear Linux and now serves as …
16 views
Daily Writeups
⤷ Title: Tải Haunted Dorm Mod APK V1.8.3 (Vô Hạn Tiền, Menu, No Ads)
════════════════════════
𐀪 Author: GOCMOD
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:59:14 GMT
════════════════════════
⌗ Tags: #games #gocmod #hacking
Medium
Tải Haunted Dorm Mod APK V1.8.3 (Vô Hạn Tiền, Menu, No Ads)
Haunted Dorm là một trò chơi nhập vai kết hợp yếu tố kinh dị và giải đố, trong đó người chơi sẽ vào vai một sinh viên sống trong một ký túc…
21 views
Daily Writeups
⤷ Title: Tải Stickman Party Mod Apk (Vô Hạn Tiền) v2.4.9.2
════════════════════════
𐀪 Author: genzvnmod
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:30:11 GMT
════════════════════════
⌗ Tags: #games #hacking #genzvnmod
Medium
Tải Stickman Party Mod Apk (Vô Hạn Tiền) v2.4.9.2
Stickman Party là một tựa game giải trí vui nhộn, nơi người chơi điều khiển các nhân vật stickman trong các mini-game đơn giản nhưng đầy…
31 views
Daily Writeups
⤷ Title: Tải Sausage Man Mod Apk (Menu, God Mode, Speed, Aimbot) v21.94
════════════════════════
𐀪 Author: Game4u
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:19:52 GMT
════════════════════════
⌗ Tags: #hacking #games #game4u
Medium
Tải Sausage Man Mod Apk (Menu, God Mode, Speed, Aimbot) v21.94
Sausage Man là một trò chơi bắn súng sinh tồn vui nhộn, nơi người chơi nhập vai những nhân vật hình xúc xích trong các trận chiến đầy hài…
33 views
Daily Writeups
⤷ Title: Tải Townscaper APK (MOD Bản Đầy Đủ) v1.20
════════════════════════
𐀪 Author: Bandisharecx
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:10:16 GMT
════════════════════════
⌗ Tags: #bandishare #hacking #games
Medium
Tải Townscaper APK (MOD Bản Đầy Đủ) v1.20
Townscaper là một trò chơi xây dựng thành phố sáng tạo, nơi người chơi có thể xây dựng những thành phố tuyệt đẹp bằng cách kết hợp các khối…
39 views
Daily Writeups
⤷ Title: Tải Demon Slayer Mobile Apk V1.0.8 Miễn Phí Cho Android
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 02:55:23 GMT
════════════════════════
⌗ Tags: #apkpure #games #hacking
Medium
Tải Demon Slayer Mobile Apk V1.0.8 Miễn Phí Cho Android
Demon Slayer (tên gốc: Kimetsu no Yaiba) là một tựa game hành động dựa trên bộ manga và anime nổi tiếng cùng tên. Câu chuyện xoay quanh…
42 views
Daily Writeups
⤷ Title: The Android Toll: Google to Charge $2.85 Per Install for External App Links
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 02:41:08 +0000
════════════════════════
⌗ Tags: #Technology #android #Antitrust #App Store Fees #Digital Markets Act #Epic Games #External Billing #Google Play Store #Judge James Donato #Mobile Gaming #Sideloading
Daily CyberSecurity
The Android Toll: Google to Charge $2.85 Per Install for External App Links
In the legal dispute between Epic and Google, U.S. judges have signaled a clear inclination to require Google to alter its existing Google Play Store bundled billing model. In essence, Google woul…
33 views
Daily Writeups
⤷ Title: The Grid is the Goal: Alphabet’s $4.75B Bet to Own the Power Plants Behind Gemini
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 02:37:20 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Alphabet #Battery Storage #clean energy #data centers #google #Intersect Power #Nvidia Blackwell #renewable energy #Solar Power #Sundar Pichai
Daily CyberSecurity
The Grid is the Goal: Alphabet’s $4.75B Bet to Own the Power Plants Behind Gemini
In the end, the decisive factor in the AI compute arms race is not algorithms or chips, but electricity. Alphabet, Google’s parent company, has announced a definitive agreement to acquire Intersec…
29 views
Daily Writeups
⤷ Title: “Tax Compliance” Trap: Hackers Mimic Indian Income Tax Department to Deploy China-Linked Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 02:31:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #China_linked #cyber_espionage #financial fraud #Income Tax Department #India #malware #phishing #rat #Seqrite Labs #social engineering
Daily CyberSecurity
“Tax Compliance” Trap: Hackers Mimic Indian Income Tax Department to Deploy China-Linked Malware
As tax filing season discussions linger, a new and sophisticated phishing campaign is targeting Indian businesses by weaponizing the fear of non-compliance. A new analysis by SEQRITE Labs’ APT Tea…
21 views
Daily Writeups
⤷ Title: Windows DWM Flaw Lets Local Users Paint Their Way to SYSTEM Privileges, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 02:07:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #Desktop Window Manager #DWM #Elevation of Privilege #Exploit PoC #Kernel Security #Microsoft #Patch Tuesday #Windows Security
Daily CyberSecurity
Windows DWM Flaw Lets Local Users Paint Their Way to SYSTEM Privileges, PoC Publishes
A newly discovered vulnerability in the heart of the Windows visual experience has been patched by Microsoft, closing a critical security gap that could allow a low-level user to seize complete co…
33 views
Daily Writeups
⤷ Title: How I Found a Critical 2FA Misconfiguration and Earned a $2000 Bug Bounty
════════════════════════
𐀪 Author: Ravindra
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 04:59:59 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_zero #bugs #bug_bounty
Medium
How I Found a Critical 2FA Misconfiguration and Earned a $2000 Bug Bounty
Let’s jump straight to the point.
25 views
Daily Writeups
⤷ Title: From recon to AWS and DB credentials leaked
════════════════════════
𐀪 Author: pr1vacy
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 04:02:50 GMT
════════════════════════
⌗ Tags: #credentials #bug_bounty #ssrf
Medium
From recon to AWS and DB credentials leaked
Hi everyone, it’s me pr1vacy from Abyssal Hunter.
Today, I’m sharing a write-up on how I turned my recon phase into an AWS and DB…
25 views
Daily Writeups
⤷ Title: Unlocking the Power of Sherlock: Advanced OSINT Tactics for Professionals
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 05:11:43 GMT
════════════════════════
⌗ Tags: #information_security #hacker #security #hacking #cybersecurity
Medium
Unlocking the Power of Sherlock: Advanced OSINT Tactics for Professionals
Take username reconnaissance beyond basics into real-world pentesting.
27 views
Daily Writeups
⤷ Title: TryHackMe: AoC2025 Day 19 Answers Only
════════════════════════
𐀪 Author: Pavneet_Singh_
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 05:16:42 GMT
════════════════════════
⌗ Tags: #aoc2025 #day_19 #tryhackme_walkthrough #thm #tryhackme
Medium
TryHackMe: AoC2025 Day 19 Answers Only
ICS/Modbus — Claus for Concern
31 views
Daily Writeups
⤷ Title: TryHackMe: AoC2025 Day 20 Answers Only
════════════════════════
𐀪 Author: Pavneet_Singh_
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 05:10:59 GMT
════════════════════════
⌗ Tags: #thm #20_days #tryhackme #aoc2025 #tryhackme_walkthrough
Medium
TryHackMe: AoC2025 Day 20 Answers Only
Race Conditions — Toy to The World
38 views
Daily Writeups
⤷ Title: UNION-Based SQL Injection: Finding a column containing text
════════════════════════
𐀪 Author: PriOFF
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 05:20:20 GMT
════════════════════════
⌗ Tags: #solutions #web_security #owasp #sql_injection #union_based_sql_injection
Medium
UNION-Based SQL Injection: Finding a column containing text
In UNION-Based SQL Injection, After finding number of columns, we have to find datatype of the column, So we can craft our successful…
44 views
Daily Writeups
⤷ Title: FCC Bans Foreign-Made Drones and Key Parts Over U.S. National Security Risks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 12:28:00 +0530
════════════════════════
⌗ Tags: No_Tags
35 views