Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Engineering Security into Cloud Systems
════════════════════════
𐀪 Author: z3r0trust
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 00:24:36 GMT
════════════════════════
⌗ Tags: #cloud_security #cloud #cybersecurity #engineering #cloud_computing
Medium
Engineering Security into Cloud Systems
Note: This article was originally published by the author on November 26, 2018. Is is re-posted here by the author for archival purposes…
17 views
Daily Writeups
⤷ Title: RFC 9700 for OAuth 2.0 Explained
════════════════════════
𐀪 Author: Harpreet
════════════════════════
ⴵ Time: Mon, 03 Feb 2025 23:29:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_modeling #oauth2 #security_token
Medium
RFC 9700 for OAuth 2.0 Explained
This write up intends to explain RFC 9700 and brief about the threats
34 views
Daily Writeups
⤷ Title: Government & Cybersecurity
════════════════════════
𐀪 Author: Germaine
════════════════════════
ⴵ Time: Mon, 03 Feb 2025 22:58:03 GMT
════════════════════════
⌗ Tags: #nist #cybersecurity #fbi #cisa #government_and_politics
Medium
Government & Cybersecurity
Cybersecurity in the United States is at a turning point. As of now, the Federal Bureau of Investigation (FBI) is on the brink of massive…
23 views
Daily Writeups
⤷ Title: A Passive Reconnaissance Report of NASA.gov
════════════════════════
𐀪 Author: ma40ou
════════════════════════
ⴵ Time: Mon, 03 Feb 2025 23:54:59 GMT
════════════════════════
⌗ Tags: #ethical_hacking #reconnaissance #nasa #osint #osint_investigation
Medium
A Passive Reconnaissance Report of NASA.gov
This report details a passive reconnaissance engagement on NASA.gov, aimed at gathering publicly available information and identifying…
30 views
Daily Writeups
⤷ Title: BobTheSmuggler: Leverages HTML Smuggling Attack
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:17:36 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #HTML Smuggling Attack
Penetration Testing Tools
BobTheSmuggler: Leverages HTML Smuggling Attack
Bob the Smuggler is a tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives.
23 views
Daily Writeups
⤷ Title: Honeyscanner – A vulnerability analyzer for Honeypots
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:11:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #honeypots #Honeypots vulnerability #vulnerability
Penetration Testing Tools
Honeyscanner - A vulnerability analyzer for Honeypots
Honeyscanner is a vulnerability analyzer for honeypots designed to automatically attack a given honeypot, in order to determine
20 views
Daily Writeups
⤷ Title: Reaper: PoC designed to exploit BYOVD driver vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:08:27 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #BYOVD driver vulnerability
Penetration Testing Tools
Reaper: PoC designed to exploit BYOVD driver vulnerability
Reaper is a proof-of-concept designed to exploit BYOVD (Bring Your Own Vulnerable Driver) driver vulnerability.
15 views
Daily Writeups
⤷ Title: Privilege Escalation in Active Directory Domain Services: CVE-2025-21293 Exploit Revealed with PoC Code
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:40:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Directory Domain Services #CVE_2025_21293 #CVE_2025_21293 PoC
Daily CyberSecurity
Privilege Escalation in Active Directory Domain Services: CVE-2025-21293 Exploit Revealed with PoC Code
Discover the details of CVE-2025-21293, an elevation of privilege vulnerability in Active Directory that allows attackers to escalate privileges to SYSTEM.
17 views
Daily Writeups
⤷ Title: Tria Stealer: Android Malware Hijacks WhatsApp and Telegram Accounts
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:37:50 +0000
════════════════════════
⌗ Tags: #Malware #Tria Stealer
Cybersecurity News
Tria Stealer: Android Malware Hijacks WhatsApp and Telegram Accounts
Tria Stealer: a dangerous Android malware campaign that steals personal messages, hijacks WhatsApp and Telegram accounts, and facilitates financial fraud.
16 views
Daily Writeups
⤷ Title: CL-STA-0048: Chinese-Linked APT Targets Telecoms in South Asia
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:35:43 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #apache Tomcat #Chinese APT Groups #CL_STA_0048 #Cobalt Strike #Hex Staging #IIS servers #MSSQL server #SoftEther VPN #SQLcmd #Winos4.0 Downloader
Cybersecurity News
CL-STA-0048: Chinese-Linked APT Targets Telecoms in South Asia
Uncover the details of a newly identified cyberespionage campaign, CL-STA-0048, targeting high-value organizations in South Asia.
20 views
Daily Writeups
⤷ Title: Time Bandit: ChatGPT-4o Jailbreak Vulnerability
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:32:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #ChatGPT_4o Jailbreak #ChatGPT_4o Jailbreak Vulnerability #Time Bandit
Daily CyberSecurity
Time Bandit: ChatGPT-4o Jailbreak Vulnerability
Discover the newly disclosed vulnerability called 'Time Bandit' in ChatGPT-4o, allowing attackers to bypass safety restrictions and generate illicit content.
18 views
Daily Writeups
⤷ Title: Tiny FUD: Fully Undetectable macOS Backdoor Discovered
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:30:02 +0000
════════════════════════
⌗ Tags: #Malware #Apple #DYLD injection #Tiny FUD #Tiny FUD backdoor
Cybersecurity News
Tiny FUD: Fully Undetectable macOS Backdoor Discovered
Uncover the threat of Tiny FUD, a fully undetectable macOS backdoor that poses a significant risk to Apple users.
15 views
Daily Writeups
⤷ Title: HTTP Client Tools Weaponized in Account Takeover Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:25:41 +0000
════════════════════════
⌗ Tags: #Cyber Security #Account Takeover Attacks #HTTP Client Tools
Cybersecurity News
HTTP Client Tools Weaponized in Account Takeover Attacks
Discover the concerning trend of cybercriminals using HTTP client tools to orchestrate account takeover attacks. Learn how to protect your Microsoft 365 environment.
13 views
Daily Writeups
⤷ Title: 10,000 WordPress Websites Compromised to Deliver macOS and Windows Malware
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:22:35 +0000
════════════════════════
⌗ Tags: #Malware #Atomic macOS Stealer #SocGholish #SocGholish Windows malware #Windows malware
Daily CyberSecurity
10,000 WordPress Websites Compromised to Deliver macOS and Windows Malware
Learn about a sophisticated attack campaign targeting WordPress websites and delivering SocGholish Windows malware to unsuspecting users.
12 views
Daily Writeups
⤷ Title: Lumma Stealer Uses GitHub as a Malware Delivery Platform
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:10:47 +0000
════════════════════════
⌗ Tags: #Malware #Cobeacon #github #Lumma Stealer #Malware Delivery Platform #SecTopRAT #Vidar
Cybersecurity News
Lumma Stealer Uses GitHub as a Malware Delivery Platform
Uncover a sophisticated malware campaign using GitHub's release infrastructure to distribute the dangerous Lumma Stealer Trojan. Learn more.
12 views
Daily Writeups
⤷ Title: Canadian Hacker Indicted for $65 Million DeFi Exploit
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 00:15:17 +0000
════════════════════════
⌗ Tags: #Cyber Security #Crypto Exchange #DeFi Exploit #Global Money Laundering Scheme
Cybersecurity News
Canadian Hacker Indicted for $65 Million DeFi Exploit
Explore the case of a Canadian man accused of exploiting vulnerabilities in DeFi protocols, defrauding investors of $65 million. Find out more about this sophisticated scheme!
9 views
Daily Writeups
⤷ Title: Understanding Active Directory Security: Key Features and Event Logging
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 01:42:07 GMT
════════════════════════
⌗ Tags: #information_technology #programming #hacking #active_directory #cybersecurity
Medium
Understanding Active Directory Security: Key Features and Event Logging
Active Directory (AD) is a crucial system that helps organizations manage users, devices, and security policies. However, attackers often…
9 views
Daily Writeups
⤷ Title: Cracking the Linux Code: Exploring Files, Permissions & SSH
════════════════════════
𐀪 Author: Adebowale Adetunji
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:37:33 GMT
════════════════════════
⌗ Tags: #file_management #ethical_hacking #linux #ssh #cybersecurity
Medium
Cracking the Linux Code: Exploring Files, Permissions & SSH
Day 2 of my cybersecurity bootcamp on TryHackMe was an adventure through the Linux filesystem, where I learned how to create, move, and…
8 views
Daily Writeups
⤷ Title: The Safest Way to Store Access Token in React Native
════════════════════════
𐀪 Author: Ms. Byte Dev
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:34:14 GMT
════════════════════════
⌗ Tags: #react_native_development #software_development #authentication #react_native #cybersecurity
Medium
The Safest Way to Store Access Token in React Native
In React Native applications, securely storing access tokens is critical for maintaining authentication integrity and protecting user data…
10 views
Daily Writeups
⤷ Title: How to Solve Event ID 208: Forced Authentication Detected
════════════════════════
𐀪 Author: Alfredo Zablah
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:01:28 GMT
════════════════════════
⌗ Tags: #soc #cybersecurity #lets_defend #threat_intelligence #incident_response
Medium
How to Solve Event ID 208: Forced Authentication Detected
Lets Defend Practice Event ID 208
11 views
Daily Writeups
⤷ Title: The Rise of AI-Powered Cybersecurity: How Organizations Can Stay Ahead
════════════════════════
𐀪 Author: Gursimran Singh | Cloud IT Professional
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 01:44:58 GMT
════════════════════════
⌗ Tags: #security #ai_agent #ai #cybersecurity #secops
Medium
The Rise of AI-Powered Cybersecurity: How Organizations Can Stay Ahead
Cybersecurity threats are evolving rapidly, and traditional security measures are no longer enough to keep up. With the increasing…
10 views