Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Fri, 24 Mar 2023 07:08:27 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: What is external infrastructure penetration testing?
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/c13a7ab3f537
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #external_penetration #cybersecurity #ethical_hacking
Medium
What is external infrastructure penetration testing?
With cybercrime on the rise, companies need to ensure the security of their infrastructure against potential attacks. One effective method to do so is external infrastructure penetration testing. In…
5 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Mon, 17 Jul 2023 13:35:46 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Enabled Sign Up on Jenkins leading to Groovy Script Remote Code Execution Vulnerability
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/6d345f5dba0d
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #groovy_script #external_pentesting #jenkins #rce
Medium
Enabled Sign Up on Jenkins leading to Groovy Script Remote Code Execution Vulnerability
Summary : Found a Jenkins instance with Signup enabled , bypass the restrictions by signing up with corporate email account as there was…
6 views
Daily Writeups
β€· Title: Gone Phishing: Installing GoPhish and Creating a Campaign
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Thu, 13 Feb 2025 16:50:07 +0000
════════════════════════
βŒ— Tags: #External/Internal #How_To #Informational #Nick Caswell #Phishing #Red Team #Red Team Tools #Social Engineering #GoPhish #Mail Security #Phishing Campaign
Black Hills Information Security, Inc.
Gone Phishing: Installing GoPhish and Creating a Campaign - Black Hills Information Security, Inc.
GoPhish provides a nice platform for creating and running phishing campaigns. This blog will guide you through installing GoPhish and creating a campaign. 
38 views
Daily Writeups
β€· Title: Why Your Org Needs a Penetration Test Program
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Mon, 10 Mar 2025 15:30:05 +0000
════════════════════════
βŒ— Tags: #Corey Ham #External/Internal #GRC #Red Team #Webcast Wrap_Up #Kelli Tarala #penetration testing #pentest
Black Hills Information Security, Inc.
Why Your Org Needs a Penetration Test Program - Black Hills Information Security, Inc.
This webcast originally aired on February 27, 2025. Join us for a very special free one-hour Black Hills Information Security webcast with Corey Ham & Kelli Tarala on why your […]
34 views
Daily Writeups
β€· Title: Introducing Orbit 
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Thu, 13 Mar 2025 14:00:22 +0000
════════════════════════
βŒ— Tags: #External/Internal #Informational #Ralph May #Recon #Red Team #Red Team Tools #CPT #External Attack Surface #Nuclei #Orbit #Scanning
Black Hills Information Security
Introducing Orbit  - Black Hills Information Security
When I set out to build Orbit, I knew that the interface had to be intuitive and accessible, but more importantly, the application had to solve a real problem. And here’s the challenge we faced...
35 views
Daily Writeups
β€· Title: Configuring Azure AD as a Key Manager in WSO2 API Manager
════════════════════════
π€ͺ Author: Dilan Lasantha
════════════════════════
β΄΅ Time: Mon, 17 Mar 2025 15:05:00 GMT
════════════════════════
βŒ— Tags: #external_key_manager #api_security #azure_active_directory #wso2 #wso2_api_manager
Medium
Configuring Azure AD as a Key Manager in WSO2 API Manager
Integrating Azure Active Directory (Azure AD) as a Key Manager in WSO2 API Manager (WSO2 APIM) allows organizations to utilize Microsoft’s…
44 views
Daily Writeups
β€· Title: The Hidden Cyber Threats Lurking in Your Digital Footprintβ€Šβ€”β€ŠHow External Attack Surface…
════════════════════════
π€ͺ Author: Cytrusst
════════════════════════
β΄΅ Time: Thu, 27 Mar 2025 09:37:52 GMT
════════════════════════
βŒ— Tags: #external_attack_surface #attack_surface_management #cyber_security_solutions #asm #cybersecurity
Medium
The Hidden Cyber Threats Lurking in Your Digital Footprint β€” How External Attack Surface Management Can Save Your Business
A cybersecurity insider’s guide to protecting your digital ecosystem with Cytrusst the Breach You Never Saw Coming
24 views
Daily Writeups
β€· Title: Go-Spoof: A Tool for Cyber Deception
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Thu, 27 Mar 2025 14:00:00 +0000
════════════════════════
βŒ— Tags: #Ben Bowman #Blue Team #Blue Team Tools #External/Internal #Web App #Cyber Deception #Deceptive Tooling #Go_Spoof
Black Hills Information Security, Inc.
Go-Spoof: A Tool for Cyber Deception - Black Hills Information Security, Inc.
Go-Spoof brings an old tool to a new language. The Golang rewrite [of Portspoof] provides similar efficiency and all the same features of the previous tool but with easier setup and useability.
❀1
34 views
Daily Writeups
β€· Title: What is External Penetration Testing?
════════════════════════
π€ͺ Author: Craw Cyber Security
════════════════════════
β΄΅ Time: Thu, 24 Apr 2025 10:35:31 GMT
════════════════════════
βŒ— Tags: #what_external_penetration #penetration_testing #penetration_testing_firm #external_penetration_test #penetration_testing_guide
Medium
What is External Penetration Testing?
In today’s interconnected world, your organization’s digital presence extends far beyond the walls of your physical office. Websites, cloud…
54 views
Daily Writeups
β€· Title: Apple Overhauls EU App Store Policy: New Fees & Open External Purchases After €500M Fine
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 27 Jun 2025 08:06:23 +0000
════════════════════════
βŒ— Tags: #Technology #App Store #Apple #Core Technology Fee #CTC #ctf #Developer Policy #Digital Markets Act #DMA #EU #European Union #External Purchases #Fees
Daily CyberSecurity
Apple Overhauls EU App Store Policy: New Fees & Open External Purchases After €500M Fine
Apple revised EU App Store policies, allowing external purchases and new fees (initial acquisition, service, CTC) after a €500M fine. Developers can now direct users to outside payment channels.
19 views
Daily Writeups
β€· Title: Getting Started with NetExec: Streamlining Network Discovery and Access
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Wed, 09 Jul 2025 14:00:00 +0000
════════════════════════
βŒ— Tags: #Dale Hobbs #External/Internal #How_To #Informational #Password Spray #Red Team #Red Team Tools #Active Directory Enumeration #Authentication Testing #Blue Team Defense #CrackMapExec Alternative #Credential Spraying #Lateral Movement #Netexec #Network Discovery #NTLM Authentication #Pass_the_Hash (PTH) #Pass_the_Ticket (PTT) #SMB Enumeration
Black Hills Information Security, Inc.
Getting Started with NetExec: Streamlining Network Discovery and Access - Black Hills Information Security, Inc.
One tool that I can't live without when performing a penetration test in an Active Directory environment is called NetExec. Being able to efficiently authenticate against multiple systems in the network is crucial, and NetExec is an incredibly powerful tool…
57 views
Daily Writeups
β€· Title: Abusing Active Directory Certificate Services (Part 2)
════════════════════════
π€ͺ Author: Kassie Kimball
════════════════════════
β΄΅ Time: Thu, 12 Oct 2023 15:44:18 +0000
════════════════════════
βŒ— Tags: #Alyssa Snow #Blue Team #External/Internal #How_To #Informational #Red Team #Red Team Tools #Active Directory #exploit
Black Hills Information Security, Inc.
Abusing Active Directory Certificate Services (Part 2) - Black Hills Information Security, Inc.
Misconfigurations in Active Directory Certificate Services (ADCS) can introduce critical vulnerabilities into an Enterprise Active Directory environment, such as paths of escalation from low privileged accounts to domain administrator.
15 views