Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: The Unshakable Foundation: How Anycast Keeps the Internet’s Root DNS Alive
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:46:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anycast #BGP Routing #DDoS Mitigation #DNSSEC #internet infrastructure #IP Anycast #NetScout #Network Redundancy #network security #Root DNS
Information Security News
The Unshakable Foundation: How Anycast Keeps the Internet’s Root DNS Alive
The stability and resilience of the internet rest largely on systems that remain invisible to most users. Among these foundational pillars is the root DNS server system—a critical mechanism respon…
26 views
Daily Writeups
⤷ Title: The Enemy Within: Why Hackers are Paying Your Employees $100K to Betray You
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:45:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Check Point #cybercrime #Dark Web #data breach #Employee Monitoring #FinTech Security #Infosec #Insider Threat #SIM Swapping #Social Engineering
Penetration Testing Tools
The Enemy Within: Why Hackers are Paying Your Employees $100K to Betray You
Within cybercriminal circles, interest in recruiting insiders from within companies is surging. Rather than mounting complex external intrusions,
18 views
Daily Writeups
⤷ Title: Operation Sentinel: Interpol Arrests 574 in Sweeping African Cybercrime Bust
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:38:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AFJOC #Africa #BEC #Benin #cybercrime #Digital Extortion #Ghana #Interpol #Nigeria #Operation Sentinel #ransomware #Senegal
Penetration Testing Tools
Operation Sentinel: Interpol Arrests 574 in Sweeping African Cybercrime Bust
A coordinated cybercrime crackdown across Africa has culminated in hundreds of arrests and the seizure of millions of
10 views
Daily Writeups
⤷ Title: NVIDIA’s Christmas Surprise: Open Sourcing CUDA Tile IR to Break the Moat
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:29:52 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Apache 2.0 #Blackwell #CUDA 13.1 #CUDA Tile IR #GPU Programming #MLIR #Nvidia #open source #Tensor Cores #ZLUDA
Penetration Testing Tools
NVIDIA’s Christmas Surprise: Open Sourcing CUDA Tile IR to Break the Moat
As a Christmas gift to the open-source community, NVIDIA has released the CUDA Tile IR intermediate representation as
6 views
Daily Writeups
⤷ Title: Beyond Macros: Paper Werewolf’s “EchoGather” Backdoor Exploits Excel XLLs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:28:34 +0000
════════════════════════
⌗ Tags: #Malware #APT #Cyber Espionage #EchoGather #Excel Exploits #GOFFEE #Malware 2025 #Paper Werewolf #phishing #Russia #Ukraine #WinRAR vulnerability #XLL
Penetration Testing Tools
Beyond Macros: Paper Werewolf’s "EchoGather" Backdoor Exploits Excel XLLs
The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks.
10 views
Daily Writeups
⤷ Title: Shadow Updates: Evasive Panda’s Two-Year Espionage Spree Revealed
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:26:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #Cyber Espionage #DNS Poisoning #Evasive Panda #Infosec #iQIYI #kaspersky #malware #MgBot #MitM Attack #SohuVA #supply chain attack
Penetration Testing Tools
Shadow Updates: Evasive Panda’s Two-Year Espionage Spree Revealed
The Chinese hacking group known as Evasive Panda (also tracked as Bronze Highland, Daggerfly, and StormBamboo) carried out
8 views
Daily Writeups
⤷ Title: The 2026 Deficit: AI-Driven Spies Meet a Retreating U.S. Cyber Defense
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:26:06 +0000
════════════════════════
⌗ Tags: #Information Security #2026 Cyber Risk #AI Espionage #China #CISA #FCC #Federal Budget #Grid Security #Infrastructure Security #One_Time Passwords #Salt Typhoon
Penetration Testing Tools
The 2026 Deficit: AI-Driven Spies Meet a Retreating U.S. Cyber Defense
By 2026, government agencies are finding it increasingly difficult to describe cyber risk with a single word or
10 views
Daily Writeups
⤷ Title: The Breach That Won’t Die: LastPass Vaults Fuel a $35M Crypto Heist 3 Years Later
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:22:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitcoin #Blockchain Analysis #CoinJoin #crypto hack #Data Breach 2025 #Infosec #LastPass #Password Security #Russian Cybercrime #TRM Labs #Wasabi wallet
Penetration Testing Tools
The Breach That Won't Die: LastPass Vaults Fuel a $35M Crypto Heist 3 Years Later
The LastPass breach that occurred back in 2022 continues to generate illicit profits years later. A recent on-chain
10 views
Daily Writeups
⤷ Title: The Editor’s Trap: EmEditor Hijacked to Deploy Stealthy “Google Drive” Infostealer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:17:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #browser extension #Cybersecurity 2025 #data breach #EmEditor #Infostealer #malware #PowerShell #QiAnXin #supply chain attack #WALSHAM INVESTMENTS
Penetration Testing Tools
The Editor’s Trap: EmEditor Hijacked to Deploy Stealthy "Google Drive" Infostealer
In late December, an unwelcome supply-chain surprise erupted around the popular text editor EmEditor. According to the developer,
10 views
Daily Writeups
⤷ Title: The End of Insecure Pulls: Docker Open Sources Its Hardened Images Catalog
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:16:19 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Apache 2.0 #Container Security #DevOps #DHI #Docker #Helm #Kubernetes #open source #SBOM #SLSA #Supply Chain
Penetration Testing Tools
The End of Insecure Pulls: Docker Open Sources Its Hardened Images Catalog
Docker has announced that its Docker Hardened Images (DHI) are now free and fully open: they can be
23 views
Daily Writeups
⤷ Title: The Christmas Drain: How a Backdoor in Trust Wallet v2.68 Stole $7M
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:10:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Binance #Blockchain Security #crypto hack #Infosec #PostHog #Recovery Phrase #SlowMist #supply chain attack #Trust Wallet #v2.68.0 #ZachXBT
Penetration Testing Tools
The Christmas Drain: How a Backdoor in Trust Wallet v2.68 Stole $7M
Blockchain investigator ZachXBT reported on December 25 that, over the preceding hours, numerous Trust Wallet users had experienced
11 views
Daily Writeups
⤷ Title: How a Capital Letter Bypasses Fortinet 2FA
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:09:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #2FA Bypass #Active Directory #CVE_2020_12812 #cyber attack #Cybersecurity 2025 #FortiGate #Fortinet #FortiOS #LDAP #MFA #SSL VPN
Penetration Testing Tools
How a Capital Letter Bypasses Fortinet 2FA
Fortinet has warned administrators that real-world attacks are once again exploiting the vulnerability FG-IR-19-283 (CVE-2020-12812), first disclosed in
25 views
Daily Writeups
⤷ Title: The Protector’s Fall: Georgia’s Security Chief Arrested in $35M Global Fraud Scandal
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:05:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Call Center Fraud #Corruption #Empire of Deception #Georgia #Georgian Dream #Grigol Liluashvili #International Crime #Money Laundering #OCCRP #Tbilisi
Penetration Testing Tools
The Protector’s Fall: Georgia’s Security Chief Arrested in $35M Global Fraud Scandal
The former head of Georgia’s State Security Service has become the central figure in a major corruption scandal
14 views
Daily Writeups
⤷ Title: IronJump: The Hardened, Bash-Only Bastion Framework for Zero-Trust Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:52:14 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Bash #Bastion Host #Cybersecurity 2026 #DevOps #Hardening #Hybrid Infrastructure #IronJump #Jump Server #OT Security #Reverse Tunnels #ssh
Penetration Testing Tools
IronJump: The Hardened, Bash-Only Bastion Framework for Zero-Trust Control
IronJump is a hardened, cloud-free SSH bastion framework in Bash. Securely manage IT/OT endpoints with strict access controls and automated hardening.
15 views
Daily Writeups
⤷ Title: ️ How I Earned $$$ by Exploiting an XML-RPC SSRF in a WordPress Site
════════════════════════
𐀪 Author: Algo Demo
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:52:05 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #wordpress #bug_bounty_writeup
Medium
🛡️ How I Earned $$$ by Exploiting an XML-RPC SSRF in a WordPress Site
While testing for common vulnerabilities in WordPress installations, I found an exposed XML-RPC interface that enabled me to perform method…
20 views
Daily Writeups
⤷ Title: One Liners Cheat sheet For Bug bounty Hunter
════════════════════════
𐀪 Author: Mainekhacker
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 01:56:49 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cheatsheet #cybersecurity #hacking
Medium
One Liners Cheat sheet For Bug bounty Hunter
One-liners are compact commands that combine multiple steps into a single execution
26 views
Daily Writeups
⤷ Title: HTB Academy — File Upload Attacks: A Walkthrough of the Challenges (Part 1)
════════════════════════
𐀪 Author: BotsiCat
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:34:58 GMT
════════════════════════
⌗ Tags: #htb_academy #hacking #ethical_hacking #htb_walkthrough #portswigger_lab
Medium
HTB Academy — File Upload Attacks: A Walkthrough of the Challenges (Part 1)
This module helps learners understand how insecure file uploads can be abused in real-world scenarios.
31 views
Daily Writeups
⤷ Title: [Ethernaut] 8. Vault
════════════════════════
𐀪 Author: Jiseop Shin
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:43:27 GMT
════════════════════════
⌗ Tags: #solidity #ethernaut #visibility #hacking
Medium
[Ethernaut] 8. Vault
Solution for the Vault
21 views
Daily Writeups
⤷ Title: Proving Grounds - Access
════════════════════════
𐀪 Author: jniket
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:36:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #windows #provinggrounds #hacking
Medium
Proving Grounds - Access
Summary
21 views
Daily Writeups
⤷ Title: Anti-Forensic Techniques to Cover Your Tracks, Part 3
════════════════════════
𐀪 Author: z3r0trust
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:14:56 GMT
════════════════════════
⌗ Tags: #digital_forensics #digital_forensic_tools #anti_forensics #infosec #cybersecurity
Medium
Anti-Forensic Techniques to Cover Your Tracks, Part 3
A few more things THEY don’t want you to know, and we’re only beginning to scratch the surface…
30 views
Daily Writeups
⤷ Title: DarkMatter Writeup — TryHackMe CTF Solution
════════════════════════
𐀪 Author: Erkan Kavas
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:28:09 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #tryhackme_rootme #tryhackme_pre_security #tryhackme_writeup
Medium
DarkMatter Writeup — TryHackMe CTF Solution
🎩 Welcome to DarkMatter Practice! Today’s mission: exploit a weak RSA implementation, recover the private key, and decrypt some…
41 views