Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:42:22 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure #Credential Theft #DPAPI #EntraID #NGC tokens #post_exploitation #red teaming #SpecterBroker #Tech News 2026 #Token Broker #WAM #Windows Authentication Manager
Penetration Testing Tools
Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
SpecterBroker is a new post-exploitation powerhouse that extracts and decrypts Windows authentication tokens (WAM/TBRes) for full EntraID and Azure takeover.
23 views
Daily Writeups
⤷ Title: PNPT Privilege Escalation (PrivEsc) Cheat Sheet
════════════════════════
𐀪 Author: jaejun835
════════════════════════
ⴵ Time: Sat, 07 Mar 2026 02:26:49 GMT
════════════════════════
⌗ Tags: #linux_security #ethical_hacking #post_exploitation #privilege_escalation #windows_security
Medium
PNPT Privilege Escalation (PrivEsc) Cheat Sheet
This is a cheat sheet for privilege escalation techniques used in TCM Security’s PNPT (Practical Network Penetration Tester) certification…
30 views
Daily Writeups
⤷ Title: Beyond the Legacy: OpenSSL 4.0.0 Arrives with Encrypted Client Hello and Post-Quantum Prep
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:19:10 +0000
════════════════════════
⌗ Tags: #Technology #API Migration #cryptography #Cyber Security #Encrypted Client Hello #Infosec #open source software #OpenSSL 4.0.0 #Post_Quantum Cryptography #SSLv3 #TLS 1.3
Penetration Testing Tools
Beyond the Legacy: OpenSSL 4.0.0 Arrives with Encrypted Client Hello and Post-Quantum Prep
The OpenSSL Project has inaugurated a seminal update that profoundly reshapes both its internal architecture and its repertoire
14 views
Daily Writeups
⤷ Title: Cloudflare Mesh Challenges Tailscale with Post-Quantum Security for AI Agents
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 09:30:49 +0000
════════════════════════
⌗ Tags: #Technology #AI Agents #Cloudflare Mesh #Cloudflare One #network_security #Post_Quantum Cryptography #Private Networking #SaaS Security #Tailscale #WireGuard #Zero Trust
Daily CyberSecurity
Cloudflare Mesh Challenges Tailscale with Post-Quantum Security for AI Agents
Cloudflare Mesh is here. Discover how this post-quantum encrypted network secures AI agents and infrastructure, offering a 50-node free tier to rival Tailscale.
14 views
Daily Writeups
⤷ Title: Apple Said “Wiped.” WhatsApp Said “Backed Up.” I Learned How Little Those Words Really Mean.
════════════════════════
𐀪 Author: Vincenzo Ciancia
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 13:27:54 GMT
════════════════════════
⌗ Tags: #decentralization #post_cloud #decentralized_storage #digital_sovereignty #ethical_hacking
Medium
Apple Said “Wiped.” WhatsApp Said “Backed Up.” I Learned How Little Those Words Really Mean.
Both were useless when I actually needed them.
48 views
Daily Writeups
⤷ Title: The Intel “AppDomain” Hijack: Unmasking a Sophisticated Post-Exploitation Framework
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:26:54 +0000
════════════════════════
⌗ Tags: #Malware #AppDomain Manager Hijacking #Cobalt Strike #Cyfirma #DLL hijacking #Domain Fronting #Financial Sector Security #IAStorHelp.exe #infosec #intel #JIT Trampolining #Memory Forensics #post_exploitation framework
Daily CyberSecurity
The Intel "AppDomain" Hijack: Unmasking a Sophisticated Post-Exploitation Framework
CYFIRMA uncovers an elite stealth framework hijacking signed Intel utilities via AppDomain Manager. It targets EMEA finance with undetectable memory-only code.
14 views
Daily Writeups
⤷ Title: Someone Already Has Your Encrypted Data. They’re Just Waiting.
════════════════════════
𐀪 Author: Red Oxyde
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 20:36:05 GMT
════════════════════════
⌗ Tags: #quantum_computing #cybersecurity #post_quantum #infosec #cryptography
Medium
Someone Already Has Your Encrypted Data. They’re Just Waiting.
Not the dramatic kind. No zero-days, no ransomware war rooms, no breach notifications landing at 3am. The slow, structural kind, the…
25 views
Daily Writeups
⤷ Title: Artificial Intelligence and Post-Quantum Cryptography (PQC)
════════════════════════
𐀪 Author: Bervice
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 02:41:17 GMT
════════════════════════
⌗ Tags: #post_quantum_cryptography #pqc #infosec #bervice #artificial_intelligence
Medium
Artificial Intelligence and Post-Quantum Cryptography (PQC)
Securing the Future in the Age of Intelligent Systems
25 views
Daily Writeups
⤷ Title: X Growth Blueprint — 0 to 10K Followers & Income System
════════════════════════
𐀪 Author: Sahil Ansari
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 19:54:08 GMT
════════════════════════
⌗ Tags: #xs #post #social_media #growth #twitter
Medium
X Growth Blueprint — 0 to 10K Followers & Income System
This ebook gives you everything you need to build a strong personal brand, create viral content, and monetize your audience — without…
34 views
Daily Writeups
⤷ Title: Quantum-Ready and AI-Driven: How RHEL 10.2 and 9.8 are Redefining Enterprise Linux Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:40:11 +0000
════════════════════════
⌗ Tags: #Linux #AI Automation #Ansible #Confidential Computing #Cybersecurity 2026 #enterprise Linux #hybrid cloud #NIST #Post_Quantum Cryptography #red hat #RHEL 10.2 #RHEL 9.8 #SysAdmin
Daily CyberSecurity
Quantum-Ready and AI-Driven: How RHEL 10.2 and 9.8 are Redefining Enterprise Linux Security
Red Hat RHEL 10.2 & 9.8 arrive with NIST Post-Quantum Cryptography, AI-driven Ansible upgrades, and MCP servers for natural language system governance.
10 views
Daily Writeups
⤷ Title: BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:49:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure AD #BAADTokenBroker #cloud security #Device_Bound Keys #Kerberos #Microsoft Entra ID #NT Hash #post_exploitation #PRT Cookie #red teaming #TGT
Penetration Testing Tools
BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
Master Microsoft Entra ID post-exploitation with BAADTokenBroker. Learn how to request PRT cookies and abuse Entra Kerberos to acquire TGTs and NT hashes.
29 views
Daily Writeups
⤷ Title: The SNEK Initiative Drops “Eris”: New Post-Exploit Framework Abuses Windows Fax Service for SYSTEM Root
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:29:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Session Takeover #Eris Exploit #local privilege escalation #MinGW_w64 Compilation #Post_Exploitation Tool #Registry Hijack #Silent Cleanup Task #The SNEK Initiative #User Account Control Bypass #Windows Fax Service
Penetration Testing Tools
The SNEK Initiative Drops "Eris": New Post-Exploit Framework Abuses Windows Fax Service for SYSTEM Root
A novel exploitation framework designed to escalate execution privileges within the Windows environment, designated as Eris, has emerged
13 views
Daily Writeups
⤷ Title: The Silent Blackout: Unpatched Huawei Router Zero-Day Crushed Luxembourg’s Telecom Grid
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:54:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #Carrier Grade Networking #Core Switching Fabric #Denial of Service Exploit #European CERT IoCs #Firmware Reboot Loop #Huawei Enterprise Routing Hardware #POST Luxembourg Telecom Collapse #Recorded Future News Threat Intel #Restricted Advisory Portal #zero_day vulnerability
Penetration Testing Tools
The Silent Blackout: Unpatched Huawei Router Zero-Day Crushed Luxembourg’s Telecom Grid
During the previous summer season, the sovereign nation of Luxembourg suffered a catastrophic, near-total collapse of its domestic
11 views
Daily Writeups
⤷ Title: Metasploit: Post-Exploitation | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 08:59:53 GMT
════════════════════════
⌗ Tags: #post_exploitation #cybersecurity #tryhackme #pentesting #metasploit
Medium
Metasploit: Post-Exploitation | TryHackMe
Use Meterpreter to harvest credentials, escalate privileges, and explore compromised systems.
19 views
Daily Writeups
⤷ Title: The Quantum Bastion: Let’s Encrypt Embraces Merkle Tree Certificates against Post-Quantum Threats
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 17:13:58 +0000
════════════════════════
⌗ Tags: #Technology #Certificate Transparency automation #Google Cloudflare MTC #Let's Encrypt roadmap #Merkle Tree Certificates #post_quantum cryptography TLS #signature size bloat mitigation
Daily CyberSecurity
The Quantum Bastion: Let’s Encrypt Embraces Merkle Tree Certificates against Post-Quantum Threats
Discover how Merkle Tree Certificates resolve post-quantum signature bloat. Learn about the new TLS standards from Google and Cloudflare.
16 views
Daily Writeups
⤷ Title: Task 3.1 -> Exploitation & Post-Exploitation (postexploit)
════════════════════════
𐀪 Author: Gunay Safarzadeh
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 18:19:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #post_exploitation
Medium
Task 3.1 -> Exploitation & Post-Exploitation (postexploit)
Giriş
16 views
Daily Writeups
⤷ Title: Task 3.1 -> Exploitation & Post-Exploitation (rppsempire)
════════════════════════
𐀪 Author: Gunay Safarzadeh
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 19:40:07 GMT
════════════════════════
⌗ Tags: #post_exploitation #cybersecurity #tryhackme
Medium
Task 3.1 -> Exploitation & Post-Exploitation (rppsempire)
Giriş
36 views
Daily Writeups
⤷ Title: The Complete Pentest Methodology: A Step by Step Practical Guide (Part 1)
════════════════════════
𐀪 Author: Abdelrhman mohamed
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 17:32:15 GMT
════════════════════════
⌗ Tags: #post_exploitation #exploit #cybersecurity #information_security #penetration_testing
Medium
The Complete Pentest Methodology: A Step by Step Practical Guide (Part 1)
2 in the cage, 1 is free.
11 views
Daily Writeups
⤷ Title: Metasploit: Meterpreter — In-Memory Execution, Command Vectors, and Post-Exploitation
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 10:22:06 GMT
════════════════════════
⌗ Tags: #tryhackme #post_exploitation #cybersecurity #meterpreter #metasploit
Medium
Metasploit: Meterpreter — In-Memory Execution, Command Vectors, and Post-Exploitation
Introduction
15 views