Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Tool Poisoning Attacks: Critical Vulnerability Discovered in Model Context Protocol (MCP)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Apr 2025 00:05:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Agents #AI security #AI vulnerability #artificial intelligence #cybersecurity #Invariant Labs #MCP (Model Context Protocol) #Tool Poisoning Attack
Daily CyberSecurity
Tool Poisoning Attacks: Critical Vulnerability Discovered in Model Context Protocol (MCP)
Invariant Labs reveals a critical vulnerability in the Model Context Protocol (MCP) enabling Tool Poisoning Attacks. Learn how this threat can lead to data exfiltration and AI hijacking
40 views
Daily Writeups
⤷ Title: How to install uro tools in Kali linux
════════════════════════
𐀪 Author: Mr Blogger
════════════════════════
ⴵ Time: Tue, 22 Apr 2025 12:13:24 GMT
════════════════════════
⌗ Tags: #tool_installer #books #cybersecurity #uro_tools_install_kali #bug_bounty_tips
Medium
How to install uro tools in Kali linux
sudo apt update && sudo apt upgrade -y
59 views
Daily Writeups
⤷ Title: Carseat: Python Implementation for Remote Seatbelt Security Checks
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:12:01 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Carseat #cybersecurity #Host Survey #python #Remote Execution #Seatbelt #security #Tool
Penetration Testing Tools
Carseat: Python Implementation for Remote Seatbelt Security Checks
Carseat is a Python-based tool that implements most of Seatbelt's security checks with remote execution capabilities for host analysis.
21 views
Daily Writeups
⤷ Title: CaptainCredz: modular and discreet password-spraying tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 17 May 2025 00:14:31 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #captaincredz #password spraying #password_spraying tool #Tool
Penetration Testing Tools
CaptainCredz: modular and discreet password-spraying tool
CaptainCredz is a modular and discreet password-spraying tool, with advanced features such as a cache mechanism and a fine-grained timing control.
27 views
Daily Writeups
⤷ Title: Damn Vulnerable MCP: Educational Project Exposes Critical Security Flaws in AI Protocol
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 00:05:24 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AI Agents #AI security #cybersecurity #Damn Vulnerable Model Context Protocol #DVMCP #Educational Project #MCP #Model Context Protocol #Prompt Injection #Tool Poisoning #vulnerability
Penetration Testing Tools
Damn Vulnerable MCP: Educational Project Exposes Critical Security Flaws in AI Protocol
The Damn Vulnerable Model Context Protocol (DVMCP) is an educational project exposing 10 critical security flaws in MCP implementations, aiding AI safety professionals and developers.
40 views
Daily Writeups
⤷ Title: DFIR Tool Hijacked: Ransomware Group Storm-2603 Abuses Velociraptor for Stealthy LockBit/Babuk Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 01:50:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Babuk #cybersecurity #DFIR #LockBit #ransomware #Storm_2603 #Tool Abuse #Velociraptor
Daily CyberSecurity
DFIR Tool Hijacked: Ransomware Group Storm-2603 Abuses Velociraptor for Stealthy LockBit/Babuk Attacks
Cisco Talos confirms Storm-2603 is abusing the DFIR tool Velociraptor for persistence and arbitrary code execution, deploying LockBit and Babuk ransomware against VMware and Windows servers.
15 views
Daily Writeups
⤷ Title: Ransomware Group Storm-2603 Abuses Velociraptor for Stealthy LockBit/Babuk Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Oct 2025 02:52:41 +0000
════════════════════════
⌗ Tags: #Malware #Babuk #cybersecurity #DFIR #LockBit #ransomware #Storm_2603 #Tool Abuse #Velociraptor
Penetration Testing Tools
Ransomware Group Storm-2603 Abuses Velociraptor for Stealthy LockBit/Babuk Attacks
Cisco Talos confirms Storm-2603 is abusing an outdated Velociraptor build (CVE-2025-6264) for persistence and arbitrary code execution, deploying LockBit and Babuk ransomware.
61 views
Daily Writeups
⤷ Title: The “USB-C of AI” is Here: Google Launches Managed Servers for MCP Protocol
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 04:09:37 +0000
════════════════════════
⌗ Tags: #Technology #AAIF #Agentic AI #Anthropic #BigQuery #Gemini 3 #google #google maps #Kubernetes #MCP Protocol #Tool Use
Daily CyberSecurity
The "USB-C of AI" is Here: Google Launches Managed Servers for MCP Protocol
Google rapidly adopts the MCP protocol, launching managed servers for AI agents. This enables seamless, autonomous tool use across Google Maps, BigQuery, and GKE infrastructure.
24 views
Daily Writeups
⤷ Title: The Cybersecurity Tool Sprawl Problem: How to Organize & Maintain Your Security Toolkit
════════════════════════
𐀪 Author: ATNO For Cybersecurity | Hacking
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 07:55:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #cyber_security_awareness #tool_sprawl
Medium
🧰 The Cybersecurity Tool Sprawl Problem: How to Organize & Maintain Your Security Toolkit
Tool sprawl is what happens when your toolkit grows faster than your ability to manage it.
38 views
Daily Writeups
⤷ Title: The Tool List Itself Is the Attack. (MCP Bugbounty Series - Part 2)
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 04:26:00 GMT
════════════════════════
⌗ Tags: #ai_security #mcp_server #tool_poisoning #prompt_injection_attack #bug_bounty
Medium
The Tool List Itself Is the Attack. (MCP Security - Part 2)
The MCP Bug Bounty Field Guide · Part 2 of 5 — how a malicious tool description hijacks a model, and how to write it up as a real bug.
35 views