Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Beyond Macros: Paper Werewolf’s “EchoGather” Backdoor Exploits Excel XLLs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:28:34 +0000
════════════════════════
⌗ Tags: #Malware #APT #Cyber Espionage #EchoGather #Excel Exploits #GOFFEE #Malware 2025 #Paper Werewolf #phishing #Russia #Ukraine #WinRAR vulnerability #XLL
Penetration Testing Tools
Beyond Macros: Paper Werewolf’s "EchoGather" Backdoor Exploits Excel XLLs
The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks.
10 views
Daily Writeups
⤷ Title: Shadow Updates: Evasive Panda’s Two-Year Espionage Spree Revealed
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:26:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #Cyber Espionage #DNS Poisoning #Evasive Panda #Infosec #iQIYI #kaspersky #malware #MgBot #MitM Attack #SohuVA #supply chain attack
Penetration Testing Tools
Shadow Updates: Evasive Panda’s Two-Year Espionage Spree Revealed
The Chinese hacking group known as Evasive Panda (also tracked as Bronze Highland, Daggerfly, and StormBamboo) carried out
8 views
Daily Writeups
⤷ Title: The 2026 Deficit: AI-Driven Spies Meet a Retreating U.S. Cyber Defense
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:26:06 +0000
════════════════════════
⌗ Tags: #Information Security #2026 Cyber Risk #AI Espionage #China #CISA #FCC #Federal Budget #Grid Security #Infrastructure Security #One_Time Passwords #Salt Typhoon
Penetration Testing Tools
The 2026 Deficit: AI-Driven Spies Meet a Retreating U.S. Cyber Defense
By 2026, government agencies are finding it increasingly difficult to describe cyber risk with a single word or
10 views
Daily Writeups
⤷ Title: The Breach That Won’t Die: LastPass Vaults Fuel a $35M Crypto Heist 3 Years Later
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:22:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitcoin #Blockchain Analysis #CoinJoin #crypto hack #Data Breach 2025 #Infosec #LastPass #Password Security #Russian Cybercrime #TRM Labs #Wasabi wallet
Penetration Testing Tools
The Breach That Won't Die: LastPass Vaults Fuel a $35M Crypto Heist 3 Years Later
The LastPass breach that occurred back in 2022 continues to generate illicit profits years later. A recent on-chain
10 views
Daily Writeups
⤷ Title: The Editor’s Trap: EmEditor Hijacked to Deploy Stealthy “Google Drive” Infostealer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:17:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #browser extension #Cybersecurity 2025 #data breach #EmEditor #Infostealer #malware #PowerShell #QiAnXin #supply chain attack #WALSHAM INVESTMENTS
Penetration Testing Tools
The Editor’s Trap: EmEditor Hijacked to Deploy Stealthy "Google Drive" Infostealer
In late December, an unwelcome supply-chain surprise erupted around the popular text editor EmEditor. According to the developer,
10 views
Daily Writeups
⤷ Title: The End of Insecure Pulls: Docker Open Sources Its Hardened Images Catalog
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:16:19 +0000
════════════════════════
⌗ Tags: #Technology #AI Infrastructure #Apache 2.0 #Container Security #DevOps #DHI #Docker #Helm #Kubernetes #open source #SBOM #SLSA #Supply Chain
Penetration Testing Tools
The End of Insecure Pulls: Docker Open Sources Its Hardened Images Catalog
Docker has announced that its Docker Hardened Images (DHI) are now free and fully open: they can be
23 views
Daily Writeups
⤷ Title: The Christmas Drain: How a Backdoor in Trust Wallet v2.68 Stole $7M
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:10:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Binance #Blockchain Security #crypto hack #Infosec #PostHog #Recovery Phrase #SlowMist #supply chain attack #Trust Wallet #v2.68.0 #ZachXBT
Penetration Testing Tools
The Christmas Drain: How a Backdoor in Trust Wallet v2.68 Stole $7M
Blockchain investigator ZachXBT reported on December 25 that, over the preceding hours, numerous Trust Wallet users had experienced
11 views
Daily Writeups
⤷ Title: How a Capital Letter Bypasses Fortinet 2FA
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:09:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #2FA Bypass #Active Directory #CVE_2020_12812 #cyber attack #Cybersecurity 2025 #FortiGate #Fortinet #FortiOS #LDAP #MFA #SSL VPN
Penetration Testing Tools
How a Capital Letter Bypasses Fortinet 2FA
Fortinet has warned administrators that real-world attacks are once again exploiting the vulnerability FG-IR-19-283 (CVE-2020-12812), first disclosed in
25 views
Daily Writeups
⤷ Title: The Protector’s Fall: Georgia’s Security Chief Arrested in $35M Global Fraud Scandal
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:05:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Call Center Fraud #Corruption #Empire of Deception #Georgia #Georgian Dream #Grigol Liluashvili #International Crime #Money Laundering #OCCRP #Tbilisi
Penetration Testing Tools
The Protector’s Fall: Georgia’s Security Chief Arrested in $35M Global Fraud Scandal
The former head of Georgia’s State Security Service has become the central figure in a major corruption scandal
14 views
Daily Writeups
⤷ Title: IronJump: The Hardened, Bash-Only Bastion Framework for Zero-Trust Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:52:14 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Bash #Bastion Host #Cybersecurity 2026 #DevOps #Hardening #Hybrid Infrastructure #IronJump #Jump Server #OT Security #Reverse Tunnels #ssh
Penetration Testing Tools
IronJump: The Hardened, Bash-Only Bastion Framework for Zero-Trust Control
IronJump is a hardened, cloud-free SSH bastion framework in Bash. Securely manage IT/OT endpoints with strict access controls and automated hardening.
15 views
Daily Writeups
⤷ Title: ️ How I Earned $$$ by Exploiting an XML-RPC SSRF in a WordPress Site
════════════════════════
𐀪 Author: Algo Demo
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:52:05 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #wordpress #bug_bounty_writeup
Medium
🛡️ How I Earned $$$ by Exploiting an XML-RPC SSRF in a WordPress Site
While testing for common vulnerabilities in WordPress installations, I found an exposed XML-RPC interface that enabled me to perform method…
20 views
Daily Writeups
⤷ Title: One Liners Cheat sheet For Bug bounty Hunter
════════════════════════
𐀪 Author: Mainekhacker
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 01:56:49 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #cheatsheet #cybersecurity #hacking
Medium
One Liners Cheat sheet For Bug bounty Hunter
One-liners are compact commands that combine multiple steps into a single execution
26 views
Daily Writeups
⤷ Title: HTB Academy — File Upload Attacks: A Walkthrough of the Challenges (Part 1)
════════════════════════
𐀪 Author: BotsiCat
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 03:34:58 GMT
════════════════════════
⌗ Tags: #htb_academy #hacking #ethical_hacking #htb_walkthrough #portswigger_lab
Medium
HTB Academy — File Upload Attacks: A Walkthrough of the Challenges (Part 1)
This module helps learners understand how insecure file uploads can be abused in real-world scenarios.
31 views
Daily Writeups
⤷ Title: [Ethernaut] 8. Vault
════════════════════════
𐀪 Author: Jiseop Shin
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:43:27 GMT
════════════════════════
⌗ Tags: #solidity #ethernaut #visibility #hacking
Medium
[Ethernaut] 8. Vault
Solution for the Vault
21 views
Daily Writeups
⤷ Title: Proving Grounds - Access
════════════════════════
𐀪 Author: jniket
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:36:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #windows #provinggrounds #hacking
Medium
Proving Grounds - Access
Summary
21 views
Daily Writeups
⤷ Title: Anti-Forensic Techniques to Cover Your Tracks, Part 3
════════════════════════
𐀪 Author: z3r0trust
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:14:56 GMT
════════════════════════
⌗ Tags: #digital_forensics #digital_forensic_tools #anti_forensics #infosec #cybersecurity
Medium
Anti-Forensic Techniques to Cover Your Tracks, Part 3
A few more things THEY don’t want you to know, and we’re only beginning to scratch the surface…
30 views
Daily Writeups
⤷ Title: DarkMatter Writeup — TryHackMe CTF Solution
════════════════════════
𐀪 Author: Erkan Kavas
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 02:28:09 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #tryhackme_rootme #tryhackme_pre_security #tryhackme_writeup
Medium
DarkMatter Writeup — TryHackMe CTF Solution
🎩 Welcome to DarkMatter Practice! Today’s mission: exploit a weak RSA implementation, recover the private key, and decrypt some…
41 views
Daily Writeups
⤷ Title: Monitor Bug Bounty Targets in Real Time Using Certificate Transparency Logs
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 05:10:57 GMT
════════════════════════
⌗ Tags: #bug_bounty #programming #penetration_testing #cybersecurity #technology
Medium
Monitor Bug Bounty Targets in Real Time Using Certificate Transparency Logs
Discover New Bug Bounty Subdomains the Moment They Are Issued
46 views
Daily Writeups
⤷ Title: How I Paid from$99 college fees to $0.5| Price Tampering vulnerability
════════════════════════
𐀪 Author: Bhushan Patil
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 04:09:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #bug_bounty_tips
Medium
How I Paid from$99 college fees to $0.5🛒💸| Price Tampering vulnerability
while hunting on university site i got pay fees option
42 views
Daily Writeups
⤷ Title: Unlocking the Power of ARPscan: Advanced Recon Techniques for Professionals
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 04:54:57 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #hacking #port_scanning #security
Medium
Unlocking the Power of ARPscan: Advanced Recon Techniques for Professionals
From CTFs to real-world pentests — making ARPscan part of your attack chain
41 views
Daily Writeups
⤷ Title: Getting Started with ARPscan: The Fast Lane to Network Discovery
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 04:53:47 GMT
════════════════════════
⌗ Tags: #security #hacking #scanning #cybersecurity #information_security
Medium
Getting Started with ARPscan: The Fast Lane to Network Discovery
A beginner’s guide to scanning your local network in seconds
45 views