Daily Writeups
@Daily_Writeups
3.97K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.97K subscribers
Daily Writeups
⤷ Title: PowerShell for Pentesters Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Sun, 03 May 2026 15:41:33 GMT
════════════════════════
⌗ Tags: #powershell #cybersecurity #tryhackme_walkthrough #tryhackme_writeup #tryhackme
Medium
PowerShell for Pentesters Walkthrough Notes | TryHackMe
Hands-on PowerShell practice for Windows checks and AD tasks.
10 views
Daily Writeups
⤷ Title: Living Off The Registry: Master AD CS Enumeration with the Native LOLBAS Toolkit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 08:38:36 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #AD CS #certreq.exe #certutil.exe #Credential Theft #LOLBAS #NET Framework #Pentesting #PowerShell #red teaming #RSAT #Windows Security
Penetration Testing Tools
Living Off The Registry: Master AD CS Enumeration with the Native LOLBAS Toolkit
Exploit Active Directory Certificate Services using only built-in Windows tools. No 3rd-party binaries—just certreq, certutil, and native PowerShell power.
15 views
Daily Writeups
⤷ Title: PowerShell Commands Every SOC Analyst Should Know
════════════════════════
𐀪 Author: Jagadishtripathy
════════════════════════
ⴵ Time: Wed, 06 May 2026 15:10:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #incident_response #windows_security #powershell #infosec
Medium
PowerShell Commands Every SOC Analyst Should Know
A practical guide for blue teamers who want to actually understand what they’re looking at
13 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough: Windows PowerShell
════════════════════════
𐀪 Author: Shubham Khirwadkar
════════════════════════
ⴵ Time: Sun, 10 May 2026 15:18:12 GMT
════════════════════════
⌗ Tags: #infosec #powershell #windows #tryhackme #cybersecurity
Medium
TryHackMe Walkthrough: Windows PowerShell
A hands-on walkthrough of the Windows PowerShell room on TryHackMe.
20 views
Daily Writeups
⤷ Title: Weaponized JPEG Payload Deploys Trojanized ScreenConnect for Covert Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 07:01:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AMSI Bypass #ConnectWise #Cyber Security #Cyfirma #infosec #JPEG Exploit #Operation SilentCanvas #PowerShell Malware #ScreenConnect #Trojan #UAC bypass
Daily CyberSecurity
Weaponized JPEG Payload Deploys Trojanized ScreenConnect for Covert Espionage
CYFIRMA warns of Operation SilentCanvas: A weaponized JPEG delivers trojanized ScreenConnect, bypassing AMSI and UAC for full-system surveillance. Stay alert!
11 views
Daily Writeups
⤷ Title: PowerShell for Penetration Testers
════════════════════════
𐀪 Author: Mohamed Eid
════════════════════════
ⴵ Time: Thu, 14 May 2026 19:36:16 GMT
════════════════════════
⌗ Tags: #powershell #cybersecurity #ethical_hacking #penetration_testing #red_team
Medium
PowerShell for Penetration Testers
PowerShell for Penetration Testers
20 views
Daily Writeups
⤷ Title: Microsoft Explains the New “SecureBoot” Folder in Windows 11 KB5089549 Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 05:43:42 +0000
════════════════════════
⌗ Tags: #Windows #C:\Windows\SecureBoot #Detect_SecureBootCertUpdateStatus #Device Security #Enterprise Fleet Management #KB5089549 #PowerShell Script #Secure Boot Expiration #Trust Chain Renovation #UEFI CA 2023 #Windows 11 May Update
Daily CyberSecurity
Microsoft Explains the New "SecureBoot" Folder in Windows 11 KB5089549 Update
Seeing a new SecureBoot folder under C:Windows? Microsoft confirms it is part of an essential KB5089549 update to replace expiring 2011 UEFI certificates.
12 views
Daily Writeups
⤷ Title: In-Memory Financial Theft: Inside Banana RAT’s Operator-Driven Attacks on Brazilian Banks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 06:47:33 +0000
════════════════════════
⌗ Tags: #Malware #Banana RAT #Banking Trojan #Cyber Security #Fileless Execution #In_Memory Exploit #infosec #Malware_as_a_Service #Pix_QR Interception #Powershell obfuscation #SHADOW_WATER_063 #TrendAI Counter Threat Unit
Daily CyberSecurity
In-Memory Financial Theft: Inside Banana RAT’s Operator-Driven Attacks on Brazilian Banks
TrendAI exposes Banana RAT, a fileless banking trojan by SHADOW-WATER-063 that uses in-memory execution and fake UI overlays to hijack Pix-QR transfers.
27 views
Daily Writeups
⤷ Title: Critical FortiClient EMS Exploitation Campaign Spreads New EKZ Infostealer Payload
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:25:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arctic Wolf #credential stealer #CVE_2026_35616 #EKZ Infostealer #endpoint security #FortiClient EMS #PowerShell Malware
Daily CyberSecurity
Critical FortiClient EMS Exploitation Campaign Spreads New EKZ Infostealer Payload
A dangerous new cyber assault is currently targeting corporate infrastructure networks. Specifically, security researchers have uncovered a sophisticated FortiClient EMS exploitation campaign. Ana…
28 views
Daily Writeups
⤷ Title: The Day I Accidentally Destroyed My Own Evidence
════════════════════════
𐀪 Author: Teachnolen
════════════════════════
ⴵ Time: Wed, 24 Jun 2026 00:36:25 GMT
════════════════════════
⌗ Tags: #powershell #ethical_hacking #digital_forensics #cybersecurity #blue_team
Medium
The Day I Accidentally Destroyed My Own Evidence
By Patrick Nolen
25 views
Daily Writeups
⤷ Title: Windows PowerShell — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:20:29 GMT
════════════════════════
⌗ Tags: #windows #tryhackme #tryhackme_walkthrough #powershell #tryhackme_writeup
Medium
Windows PowerShell — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
23 views
Daily Writeups
⤷ Title: Veil#Drop Malware Uses Blogspot to Deliver PureLog Stealer
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 06:14:09 +0000
════════════════════════
⌗ Tags: #Malware #Fileless Malware #information stealer #PowerShell Loader #PureLog Stealer #Securonix #Veil#Drop
Daily CyberSecurity
Veil#Drop Malware Uses Blogspot to Deliver PureLog Stealer
Malware family PureLog Stealer (delivered by the Veil#Drop framework) Threat actor Not attributed by Securonix Targets Windows users; victim count not disclosed Delivery vector Malicious JavaScrip…
18 views
Daily Writeups
⤷ Title: Windows PowerShell: Advanced Object Filtering and Enterprise Automation
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 09:56:58 GMT
════════════════════════
⌗ Tags: #infosec #windows #tryhackme #powershell #cybersecurity
Medium
Windows PowerShell: Advanced Object Filtering and Enterprise Automation
Introduction
26 views
Daily Writeups
⤷ Title: ACR Stealer Spreads Through ClickFix Lures in Two Attack Chains
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 06:40:20 +0000
════════════════════════
⌗ Tags: #Malware #ACR Stealer #ClickFix #Credential Theft #EtherHiding #Infostealer #Malware_as_a_Service #Microsoft Defender #powershell
Daily CyberSecurity
ACR Stealer Spreads Through ClickFix Lures in Two Attack Chains
At a glance Malware family ACR Stealer (infostealer; linked to a rebrand of Amatera Stealer) Threat actor No named actor; sold via malware-as-a-service (MaaS) Target / victims Enterprise Windows e…
16 views
Daily Writeups
⤷ Title: The Best 10 PowerShell Obfuscators
════════════════════════
𐀪 Author: Bartosz Wójcik
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 20:08:57 GMT
════════════════════════
⌗ Tags: #obfuscation #powershell_script #windows_powershell #powershell #hacking
28 views
Daily Writeups
⤷ Title: Microsoft Needs To Proactively Prevent Typosquatting (how I almost got owned)
════════════════════════
𐀪 Author: Ethan Word
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 02:39:53 GMT
════════════════════════
⌗ Tags: #microsoft #powershell #infosec #cybersecurity
Medium
Microsoft Needs To Proactively Prevent Typosquatting (how I almost got owned)
Today, as embarrassing as it is to admit, I fell for a typosquatting attack. I got lucky, the PowerShell Module I installed from PowerShell…
35 views
Daily Writeups
⤷ Title: Replace slmgr.vbs: Windows Activation via PowerShell
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 10:11:54 +0000
════════════════════════
⌗ Tags: #Windows #powershell #slmgr.vbs #Windows Activation
Daily CyberSecurity
Replace slmgr.vbs: Windows Activation via PowerShell
Microsoft recently advised enterprise IT administrators to fundamentally reassess their activation automation workflows relying on slmgr.vbs. The corporation strongly recommends transitioning to m…
41 views
Daily Writeups
⤷ Title: Windows Powershell — TryHackMe
════════════════════════
𐀪 Author: Kamatchibalu
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:23:32 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #powershell_tryhackme #tryhackme_pre_security
Medium
Windows Powershell — TryHackMe
Powershell Task2:
21 views
Daily Writeups
⤷ Title: New TASK#STOMP Windows Backdoor Enables Continuous Document Theft
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 11:17:04 +0000
════════════════════════
⌗ Tags: #Security #Malware #backdoor #Cybersecurity #PowerShell #Securonix #TASK#STOMP #Windows
Hackread
New TASK#STOMP Windows Backdoor Enables Continuous Document Theft
TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain remote access.
21 views
Daily Writeups
⤷ Title: New TASK#STOMP PowerShell Backdoor Targets Windows
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 07:11:23 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #new TASK#STOMP PowerShell backdoor #PowerShell Backdoor #Securonix #TASK#STOMP PowerShell backdoor
Daily CyberSecurity
New TASK#STOMP PowerShell Backdoor Targets Windows
At a Glance Attribute Details Malware Family TASK#STOMP Threat Actor Unknown (Unconfirmed attribution) Target Victims Enterprise networks and corporate document repositories Delivery Vector Decept…
17 views