Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Is Microsoft Entra Suite Right For Your Organization?
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Tue, 18 Feb 2025 08:01:42 GMT
════════════════════════
⌗ Tags: #azure_ad #access_management #identity_management #cybersecurity #microsoft_entra_suite
Medium
Is Microsoft Entra Suite Right For Your Organization?
Microsoft Entra Suite is a comprehensive Identity and Access Management (IAM) platform designed to provide secure, seamless, and scalable…
17 views
Daily Writeups
⤷ Title: EntraFalcon: PowerShell Tool for Microsoft Entra ID Security Audits
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 17:33:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #audit #Azure AD #Entra ID #Microsoft Entra #Pentesting #PowerShell #security assessment
Penetration Testing Tools
EntraFalcon: PowerShell Tool for Microsoft Entra ID Security Audits
Evaluate your Microsoft Entra ID security with EntraFalcon, a powerful PowerShell-based assessment tool for pentesters and security analysts.
31 views
Daily Writeups
⤷ Title: Microsoft Entra Design Lets Guest Users Gain Azure Control, Researchers Say
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 28 May 2025 20:27:55 +0000
════════════════════════
⌗ Tags: #Security #Microsoft #Azure #Cybersecurity #Microsoft Entra #Vulnerability
Hackread
Microsoft Entra Design Lets Guest Users Gain Azure Control, Researchers Say
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
28 views
Daily Writeups
⤷ Title: TeamFiltration Weaponized: UNK_SneakyStrike Campaign Targets 80,000+ Microsoft Entra ID Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:30:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #ATO #AWS #cyberattack #cybersecurity #Microsoft 365 #Microsoft Entra ID #OAuth #Password Spraying #Proofpoint #TeamFiltration
Daily CyberSecurity
TeamFiltration Weaponized: UNK_SneakyStrike Campaign Targets 80,000+ Microsoft Entra ID Accounts
TeamFiltration is being actively exploited in UNK_SneakyStrike, targeting over 80,000 Microsoft Entra ID accounts with password spraying and data exfiltration.
13 views
Daily Writeups
⤷ Title: Linkable Token ID in Microsoft Entra: Investigating Cross-Workload Attacks with SessionId
════════════════════════
𐀪 Author: Abhishek Kumar Sharma
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 01:28:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_detection #microsoft_entra #identity_security #zero_trust
Medium
Linkable Token ID in Microsoft Entra: Investigating Cross-Workload Attacks with SessionId
Microsoft Entra now supports linkable token identifiers to significantly improve security investigation capabilities around token-based…
32 views
Daily Writeups
⤷ Title: TryHackMe: Defending Azure — My Review
════════════════════════
𐀪 Author: Jonathan Garcia
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 11:20:58 GMT
════════════════════════
⌗ Tags: #microsoft_defender_xdr #microsoft_sentinel #tryhackme #microsoft_entra_id #kql
Medium
TryHackMe: Defending Azure — My Review
TryHackMe: Defending Azure — My Review TL;DR: Recently completed TryHackMe’s Defending Azure path. I stood up detections in Sentinel, hunted with KQL, triaged alerts in Defender XDR, reviewed …
28 views
Daily Writeups
⤷ Title: CVE-2025-55241: Microsoft Entra ID Flaw with CVSS 10.0 Could Have Compromised Every Tenant Worldwide
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Sep 2025 00:35:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Actor tokens #Azure AD #CVE_2025_55241 #CVSS 10.0 #cybersecurity #Dirk_jan Mollema #Microsoft Entra ID #Vulnerability
Daily CyberSecurity
CVE-2025-55241: Microsoft Entra ID Flaw with CVSS 10.0 Could Have Compromised Every Tenant Worldwide
A critical flaw (CVE-2025-55241) in Microsoft Entra ID could have allowed a compromise of every tenant worldwide by bypassing security with "Actor tokens."
7 views
Daily Writeups
⤷ Title: The Microsoft Entra Vulnerability That Could Have Changed Everything
════════════════════════
𐀪 Author: Brittney Ginther
════════════════════════
ⴵ Time: Thu, 25 Sep 2025 11:22:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_research #vulnerability_management #cloud_security #microsoft_entra
Medium
The Microsoft Entra Vulnerability That Could Have Changed Everything
Imagine discovering a vulnerability that could allow you to compromise any Entra ID tenant worldwide without leaving any evidence of an…
8 views
Daily Writeups
⤷ Title: Microsoft Entra ID to Block All Third-Party Scripts on Login Page via Strict CSP
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:07:00 +0000
════════════════════════
⌗ Tags: #Microsoft #Authentication #Azure AD #Content Security Policy #CSP #Microsoft Entra ID #Secure Future Initiative #security update #XSS Attack
Penetration Testing Tools
Microsoft Entra ID to Block All Third-Party Scripts on Login Page via Strict CSP
Microsoft is tightening the security of Microsoft Entra ID sign-ins, planning to block all third-party script execution on
9 views
Daily Writeups
⤷ Title: EntraGoat: Deliberately Vulnerable Microsoft Entra ID Lab for Privilege Escalation Training
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 04:04:05 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure AD #Black Box #Cybersecurity Training #EntraGoat #Lab Environment #Microsoft Entra ID #privilege escalation #Red Team #Vulnerable Infrastructure
Penetration Testing Tools
EntraGoat: Deliberately Vulnerable Microsoft Entra ID Lab for Privilege Escalation Training
EntraGoat is a deliberately vulnerable Microsoft Entra ID lab environment for security pros to practice black-box attacks, privilege escalation, and defense methodologies.
24 views