Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: Critical Flaw in Livewire Exposes Laravel Apps to Stealthy RCE, PoC Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 00:16:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #APP_KEY Leak #CVE_2025_54068 #Exploit PoC #Laravel #Livepyre #Livewire #PHP Hydration #Remote Code Execution #Synacktiv #Web Security
Daily CyberSecurity
Critical Flaw in Livewire Exposes Laravel Apps to Stealthy RCE, PoC Releases
Developers relying on Livewire, a cornerstone framework for building dynamic interfaces in Laravel, are facing a severe security reality check. A deep-dive analysis by security firm Synacktiv has …
41 views
Daily Writeups
⤷ Title: “Silver Fox” Unmasked: Chinese APT Group Impersonates Indian Tax Officials in Targeted Cyber Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 00:12:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Attribution Accuracy #China_linked #CloudSEK #cyber_espionage #DLL hijacking #Income Tax Phishing #India #Process Hollowing #Silver Fox APT #threat intelligence #Valley RAT
Daily CyberSecurity
“Silver Fox” Unmasked: Chinese APT Group Impersonates Indian Tax Officials in Targeted Cyber Campaign
As tax season approaches, a sophisticated cyber-espionage campaign is targeting Indian organizations with highly convincing phishing lures. While initially mistaken for a familiar adversary, a new…
21 views
Daily Writeups
⤷ Title: Microsoft Denies Plans to Rewrite Windows 11 in Rust Despite AI Ambitions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 00:07:41 +0000
════════════════════════
⌗ Tags: #Technology #Windows #AI Coding #C++ #Microsoft #Rust #Software Engineering #Windows 11
Daily CyberSecurity
Microsoft Denies Plans to Rewrite Windows 11 in Rust Despite AI Ambitions
A recruitment post published earlier on LinkedIn by Microsoft Distinguished Engineer Galen Hunt sparked intense discussion across the industry. In the post, Hunt spoke of an ambition to eliminate …
17 views
Daily Writeups
⤷ Title: The Brazil Breakout: Apple Forced to Unlock iOS for Third-Party App Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 00:04:24 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #App Store #Apple #Brazil #CADE #Core Technology Fee #Digital Markets Act #iOS 26.4 #iPhone security #MercadoLibre #Sideloading #Third_Party App Stores
Daily CyberSecurity
The Brazil Breakout: Apple Forced to Unlock iOS for Third-Party App Stores
After the European Union forced iOS to “open up” under the Digital Markets Act (DMA), Brazil has now notched a major win of its own. Brazil’s Administrative Council for Economic Defense (CADE) rec…
16 views
Daily Writeups
⤷ Title: The Inference Coup: NVIDIA’s $20B Groq Deal Swallows the TPU’s Creator
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 00:01:58 +0000
════════════════════════
⌗ Tags: #Technology #$20B Deal #Acquihire #AI Inference #Groq #Jensen Huang #Jonathan Ross #LPU #nvidia #semiconductor #Tech News 2025 #TPU
Daily CyberSecurity
The Inference Coup: NVIDIA’s $20B Groq Deal Swallows the TPU’s Creator
The AI startup Groq, best known for its ultra-fast inference chips known as LPUs, has announced that it has signed a “non-exclusive licensing agreement” with NVIDIA covering inference technologies…
17 views
Daily Writeups
⤷ Title: I Blocked Them, But They Could Still See Me: A Simple Privacy Logic Flaw
════════════════════════
𐀪 Author: default_0x
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 01:42:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #tips #pentesting #logic_flaw #infosecurity
Medium
I Blocked Them, But They Could Still See Me: A Simple Privacy Logic Flaw
In the world of bug hunting, we often go looking for complex “movie-style” hacks. But sometimes, the most impactful bugs are just simple…
22 views
Daily Writeups
⤷ Title: Exploiting WebSocket Information Disclosure to Achieve Account Deletion (IDOR)
════════════════════════
𐀪 Author: Waleed Osama
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 01:38:29 GMT
════════════════════════
⌗ Tags: #web_development #idor #hacking #bug_bounty #websocket
Medium
Exploiting WebSocket Information Disclosure to Achieve Account Deletion (IDOR)
🔍 Quick Overview
26 views
Daily Writeups
⤷ Title: Natal de 1994: IP Spoofing e o nascimento de um mito
════════════════════════
𐀪 Author: Giuliano Cardozo
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 01:47:10 GMT
════════════════════════
⌗ Tags: #history #kevin_mitnick #tsutomu_shimomura #hacking
Medium
Natal de 1994: IP Spoofing e o nascimento de um mito
O caso Shimomura vs. Mitnick
50 views
Daily Writeups
⤷ Title: The Ghost in the Machine: Master Stealth with the Orsted C2 Framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:44:26 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AMSI Evasion #Command and Control #cybersecurity #Go_lang #Ligolo_ng #Orsted C2 #Penetration Testing #post_exploitation #red teaming #Sandbox Deception
Penetration Testing Tools
The Ghost in the Machine: Master Stealth with the Orsted C2 Framework
Orsted C2 is a modular Go framework featuring sandbox deception, AMSI/ETW evasion, and native Ligolo-ng pivoting for advanced red team simulations.
36 views
Daily Writeups
⤷ Title: Christmas Eve Crash: Massive Steam Outage Derails Holiday Gaming and Sales
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:27:19 +0000
════════════════════════
⌗ Tags: #Technology #COUNTER STRIKE 2 #Dota 2 #Downdetector #E502 L3 Error #Outage #PC Gaming #Server Crash #Steam #Steam Winter Sale #SteamDB #Valve
Penetration Testing Tools
Christmas Eve Crash: Massive Steam Outage Derails Holiday Gaming and Sales
Recently, a notable disruption struck the Steam platform: a segment of users was unable to access the store,
31 views
Daily Writeups
⤷ Title: Ruby 4.0 Unwrapped: Meet ZJIT and the Game-Changing Ruby Box
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:26:41 +0000
════════════════════════
⌗ Tags: #Technology #Backend #JIT Compiler #Memory Safety #performance #Programming 2026 #Ractor #Ruby 4.0 #Ruby Box #Web Development #ZJIT
Penetration Testing Tools
Ruby 4.0 Unwrapped: Meet ZJIT and the Game-Changing Ruby Box
Ruby has almost settled into a festive tradition of its own: each Christmas, the developers unveil a new
18 views
Daily Writeups
⤷ Title: The Silence of the Scans: New NtKiller Utility Disables Antivirus at the Root
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:23:58 +0000
════════════════════════
⌗ Tags: #Malware #AlphaGhoul #Early Boot Persistence #EDR Bypass #endpoint security #HVCI #KrakenLabs #Malware 2025 #Microsoft Defender #NtKiller #rootkit #UAC bypass
Penetration Testing Tools
The Silence of the Scans: New NtKiller Utility Disables Antivirus at the Root
A new commodity has surfaced on underground forums for those seeking to operate more quietly—and for longer. An
19 views
Daily Writeups
⤷ Title: Beyond Scanning: QKS Group Names the 2025 Leaders in Exposure Management
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:20:49 +0000
════════════════════════
⌗ Tags: #Information Security #AI security #attack surface #CrowdStrike #Exposure Management #Pentera #QKS Group #Qualys #Security Vision #SPARK Matrix #Tenable #vulnerability management
Penetration Testing Tools
Beyond Scanning: QKS Group Names the 2025 Leaders in Exposure Management
The analytical firm QKS Group has published its Exposure Management market study for the fourth quarter of 2025.
20 views
Daily Writeups
⤷ Title: Off the Rails: How Researchers Hijacked the Eurostar AI Chatbot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:18:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Guardrails #API Vulnerabilities #Eurostar #LLM Security #Pen Test Partners #Prompt Injection #Responsible Disclosure #Web Security 2025 #XSS
Penetration Testing Tools
Off the Rails: How Researchers Hijacked the Eurostar AI Chatbot
Security researchers uncovered several vulnerabilities in Eurostar’s public chatbot, demonstrating that a “modern” LLM interface can fail for
29 views
Daily Writeups
⤷ Title: Design Meets Security: elementary OS 8.1 Unleashes Wayland and ARM64 Power
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:17:19 +0000
════════════════════════
⌗ Tags: #Linux #AppCenter #Apple Silicon #ARM64 #Elementary OS #elementary OS 8.1 #Linux 6.14 #Open Source 2025 #Raspberry Pi #Secure Session #Ubuntu 24.04 #Wayland
Penetration Testing Tools
Design Meets Security: elementary OS 8.1 Unleashes Wayland and ARM64 Power
The new release of elementary OS 8.1 arrives a year after its predecessor, bringing notable advances in security,
21 views
Daily Writeups
⤷ Title: The Trusted Thief: New Signed MacSync Malware Bypasses Apple’s Gatekeeper
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:14:47 +0000
════════════════════════
⌗ Tags: #Malware #Apple Notarization #Crypto Theft #Cybersecurity 2025 #Gatekeeper #Infostealer #Jamf #macos #MacSync #malware #Mentalpositive #Swift
Penetration Testing Tools
The Trusted Thief: New Signed MacSync Malware Bypasses Apple’s Gatekeeper
The latest iteration of the macOS stealer known as MacSync has learned to infiltrate victims’ machines almost “like
21 views
Daily Writeups
⤷ Title: Google Dorks: Hacking Google Like a Pro (The Safe Way!)
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 03:29:54 GMT
════════════════════════
⌗ Tags: #security #reconnaissance #hacking #information_security #cybersecurity
Medium
Google Dorks: Hacking Google Like a Pro (The Safe Way!)
Uncover hidden info with just a search bar
29 views
Daily Writeups
⤷ Title: Unlocking the Power of Shodan: Advanced Recon Techniques for Professionals
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 03:28:24 GMT
════════════════════════
⌗ Tags: #information_security #security #hacking #cybersecurity #reconnaissance
Medium
Unlocking the Power of Shodan: Advanced Recon Techniques for Professionals
Go beyond the basics and turn Shodan into your ultimate recon weapon.
22 views
Daily Writeups
⤷ Title: The Complete Guide to Penetration Testing Careers: Your Roadmap From Zero to Security Expert in…
════════════════════════
𐀪 Author: Sajidur Rahman
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 03:40:35 GMT
════════════════════════
⌗ Tags: #career_advice #penetration_testing #job_hunting #india #cybersecurity
Medium
The Complete Guide to Penetration Testing Careers: Your Roadmap From Zero to Security Expert in 2026
You’re about to discover how to build a lucrative career that pays anywhere from ₹25 lakhs to ₹75+ lakhs annually — and it’s in one of the…
27 views
Daily Writeups
⤷ Title: Cicada — Active Directory Lab Write-Up!
════════════════════════
𐀪 Author: Dogukan İSPİRLİ
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:04:55 GMT
════════════════════════
⌗ Tags: #active_directory_pentest #hackthebox_writeup #penetration_testing #ad_pentesting #active_directory
Medium
Cicada — Active Directory Lab Write-Up!
Selamlar, bugün çok güzel ve kolay bir makine çözümü ile birlikteyim. Sizlere Cicada Lab’in çözümünü göstereceğim. Eğer ki sizlerde bu lab…
31 views
Daily Writeups
⤷ Title: Routers, IP Addresses, and Enumeration: A Beginner-Friendly Guide to Ethical Hacking
════════════════════════
𐀪 Author: blackey07
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:35:56 GMT
════════════════════════
⌗ Tags: #enumeration #ethical_hacking #router #hacker #learning
Medium
Routers, IP Addresses, and Enumeration: A Beginner-Friendly Guide to Ethical Hacking
When I started learning ethical hacking, I jumped straight into tools and scans. It felt powerful for about five minutes, until nothing…
31 views