Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Bolthole: New ClickOnce Payload Offers Red Teams Stealthy Initial Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 17 Jul 2025 00:19:45 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Bolthole #ClickOnce #cybersecurity #Initial Access #Offensive Security #Penetration Testing #Red Team #Reverse SSH #SOCKS Proxy
Penetration Testing Tools
Bolthole: New ClickOnce Payload Offers Red Teams Stealthy Initial Access
Bolthole is a new proof-of-concept ClickOnce payload for Red Teams, providing stealthy initial access with reverse SSH, CMD shell, and SOCKS proxy capabilities.
41 views
Daily Writeups
⤷ Title: SideWinder APT Shifts to PDF/ClickOnce Chain to Target South Asian Diplomacy with StealerBot
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 01:56:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #ClickOnce #DLL Sideloading #Espionage #PDF Lure #SideWinder #South Asia #StealerBot
Daily CyberSecurity
SideWinder APT Shifts to PDF/ClickOnce Chain to Target South Asian Diplomacy with StealerBot
Trellix exposed SideWinder APT's campaign against South Asian diplomacy. It uses PDF/ClickOnce lures with a signed MagTek binary to deploy StealerBot for deep intelligence collection.
26 views
Daily Writeups
⤷ Title: Stealth APT: SideWinder Uses PDF Exploit to Target South Asian Diplomats
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 09:09:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #ClickOnce #Cyberespionage #Diplomatic #SideWinder #South Asia
Penetration Testing Tools
Stealth APT: SideWinder Uses PDF Exploit to Target South Asian Diplomats
The SideWinder APT targeted embassies in South Asia, using malicious PDFs and legitimate-signed ClickOnce apps to deploy StealerBot malware.
41 views
Daily Writeups
⤷ Title: Under the Radar: How the SloppyLemming Syndicate Infiltrated South Asia’s Nuclear and Energy Sectors
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 07:40:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arctic Wolf #Bangladesh #BurrowShell #ClickOnce #Cyberespionage #DLL Sideloading #Pakistan #Rust RAT #SloppyLemming #South Asia #Tech News 2026 #threat intelligence
Penetration Testing Tools
Under the Radar: How the SloppyLemming Syndicate Infiltrated South Asia’s Nuclear and Energy Sectors
Over the past year, South Asia has witnessed a marked proliferation of cyberespionage offensives targeting state apparatuses and
11 views
Daily Writeups
⤷ Title: Click, Install, Compromise: Abusing ClickOnce in Modern Enterprises
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 06:55:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #red_teaming #enterprise_security #clickonce #penetration_testing
Medium
Click, Install, Compromise: Abusing ClickOnce in Modern Enterprises
Modern enterprises deploy a wide range of security tools to detect malicious attachments, macro-enabled documents, and suspicious…
13 views
Daily Writeups
⤷ Title: Clever Phishing Campaign Exploits Corporate Trust in Pakistan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 09:28:22 +0000
════════════════════════
⌗ Tags: #Malware #ClickOnce #Discord Webhooks #Phishing Campaign #Remote Tunnels #spear_phishing #threat intelligence #VS Code
Daily CyberSecurity
Clever Phishing Campaign Exploits Corporate Trust in Pakistan
Learn how a sophisticated phishing campaign leverages VS Code Remote Tunnels abuse to bypass security and control enterprise networks.
24 views