Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The Silence of the Scans: New NtKiller Utility Disables Antivirus at the Root
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:23:58 +0000
════════════════════════
⌗ Tags: #Malware #AlphaGhoul #Early Boot Persistence #EDR Bypass #endpoint security #HVCI #KrakenLabs #Malware 2025 #Microsoft Defender #NtKiller #rootkit #UAC bypass
Penetration Testing Tools
The Silence of the Scans: New NtKiller Utility Disables Antivirus at the Root
A new commodity has surfaced on underground forums for those seeking to operate more quietly—and for longer. An
19 views
Daily Writeups
⤷ Title: The Kernel Ghost: Mustang Panda’s New Rootkit Blinds Antivirus to Deploy ToneShell
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 04:24:21 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #HoneyMyte #kaspersky #Malware 2025 #Microsoft Defender #Mustang Panda #Myanmar #ProjectConfiguration.sys #rootkit #Thailand #Toneshell
Information Security News
The Kernel Ghost: Mustang Panda’s New Rootkit Blinds Antivirus to Deploy ToneShell
Cyber-espionage attributed to the Chinese group HoneyMyte—also known as Mustang Panda and Bronze President—has reached a new level. Researchers have observed the deployment of an advanced version …
16 views
Daily Writeups
⤷ Title: The Ghost in the Kernel: How HoneyMyte Weaponized a Rootkit to Hijack Asian Governments
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 Jan 2026 00:18:13 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT group #cyber_espionage #HoneyMyte #kaspersky #Kernel_Mode #Microsoft Defender Bypass #Mustang Panda #Myanmar #ProjectConfiguration.sys #rootkit #Southeast Asia #Thailand #ToneShell
Daily CyberSecurity
The Ghost in the Kernel: How HoneyMyte Weaponized a Rootkit to Hijack Asian Governments
The notorious cyber-espionage group HoneyMyte (also known as Mustang Panda or Bronze President) has dramatically upgraded its arsenal, deploying a sophisticated kernel-mode rootkit to entrench its…
21 views
Daily Writeups
⤷ Title: Digital Siege: How Singapore Thwarted UNC3886’s Surgical Strike on its Telecom Backbone
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 07:51:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #CSA #Cyber Espionage #IMDA #M1 #Operation Cyber Guardian #rootkit #Simba #Singapore #Singtel #StarHub #Tech News 2026 #UNC3886 #zero_day exploit
Penetration Testing Tools
Digital Siege: How Singapore Thwarted UNC3886’s Surgical Strike on its Telecom Backbone
Singapore’s preeminent telecommunications providers have fallen prey to a sophisticated cyber espionage campaign orchestrated by the formidable adversarial
13 views
Daily Writeups
⤷ Title: Nidhogg: multi-functional rootkit for red teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:08:06 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Nidhogg #red teams #rootkit
Penetration Testing Tools
Nidhogg: multi-functional rootkit for red teams
Nidhogg is a multi-functional rootkit for red teams. The goal of Nidhogg is to provide an all-in-one and easy-to-use rootkit
11 views
Daily Writeups
⤷ Title: The Katana Siege: How 30,000 Android TV Boxes Were Hijacked into a 150Gbps DDoS Army
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 06:36:40 +0000
════════════════════════
⌗ Tags: #Malware #ADB Exploit #Android TV #Cyber Security 2026 #DDOS attack #IoT Security #Katana Botnet #malware analysis #Mirai malware #Nokia Deepfield #rootkit
Penetration Testing Tools
The Katana Siege: How 30,000 Android TV Boxes Were Hijacked into a 150Gbps DDoS Army
The Katana botnet has usurped no fewer than thirty thousand Android-based television set-top boxes, transfiguring these economical apparatuses
17 views
Daily Writeups
⤷ Title: The Kernel’s Ghost Hunter: Unmasking Stealth Rootkits with klint
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 01 Apr 2026 08:52:29 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BPF Security #Cybersecurity 2026 #Infosec Tools #Kernel Integrity #klint #Linux Kernel #malware analysis #open source #Rootkit Detection #Syscall Hijacking #Threat Hunting
Penetration Testing Tools
The Kernel’s Ghost Hunter: Unmasking Stealth Rootkits with klint
Detect stealth rootkits with klint. This Linux kernel integrity scanner cross-references MSRs, IDT, and syscall tables to find hidden threats in 2026.
5 views
Daily Writeups
⤷ Title: Argus: Building a Linux Kernel Rootkit Detection Module
════════════════════════
𐀪 Author: Ananthanr Off
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 12:33:43 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #rootkit #systems_programming #linux_kernel
Medium
Argus: Building a Linux Kernel Rootkit Detection Module
Argus is a Linux kernel rootkit detector using cross-view analysis to uncover hidden system activity.
13 views
Daily Writeups
⤷ Title: Quasar Linux (QLNX) Emerges to Subvert the Global Software Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:50:51 +0000
════════════════════════
⌗ Tags: #Malware #AWS #Credential Harvester #DevSecOps #eBPF #GitHub Security #Kubernetes #Linux malware #malware analysis #QLNX #Quasar Linux #rootkit #supply chain attack #Trend Micro
Penetration Testing Tools
Quasar Linux (QLNX) Emerges to Subvert the Global Software Supply Chain
The novel Linux implant, Quasar Linux, poses a formidable threat not merely to individual workstations but to the
10 views
Daily Writeups
⤷ Title: PamDOORa Backdoor Targets Linux PAM Stack to Steal Passwords and Wipe Logs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 09:09:57 +0000
════════════════════════
⌗ Tags: #Malware #anti_forensics #Credential Harvesting #Cybercrime #Flare #infosec #Linux Security #Malware Analysis #PAM Stack #PamDOORa #rootkit #ssh backdoor #SysAdmin
Daily CyberSecurity
PamDOORa Backdoor Targets Linux PAM Stack to Steal Passwords and Wipe Logs
Flare unmasks PamDOORa: a $1,600 Linux backdoor that hijacks the PAM stack to harvest credentials and manipulate authentication logs to evade detection.
35 views
Daily Writeups
⤷ Title: HoneyMyte’s CoolClient Backdoor Adds Signed Kernel Rootkit Driver
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 12:06:52 +0000
════════════════════════
⌗ Tags: #Malware #CoolClient #DLL Sideloading #HoneyMyte #Kernel Driver #Mustang Panda #PlugX #rootkit
Information Security News
HoneyMyte’s CoolClient Backdoor Adds Signed Kernel Rootkit Driver
The threat group HoneyMyte, also tracked as Mustang Panda, has begun deploying an updated version of its CoolClient backdoor alongside a signed Windows kernel-level driver. Kaspersky’s Secur…
4 views