Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Wed, 02 Aug 2023 04:41:09 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Red Team Shenanigans: Stealing Logon Credentials Without Touching LSASS
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/1a73e1cfda3b
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #evasion #lsass #active_directory #red_team #penetration_testing
Medium
Red Team Shenanigans: Stealing Logon Credentials Without Touching LSASS
In this blog, we’ll familiarize ourselves with some interesting methods via which we can obtain credentials for logged-on users. It’s…
15 views
Daily Writeups
β€· Title: POSTDump: perform minidump of LSASS process using few technics to avoid detection
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 03 Feb 2025 01:45:51 +0000
════════════════════════
βŒ— Tags: #Ethical Hacking #LSASS process #MiniDump #POSTDump
Penetration Testing Tools
POSTDump: perform minidump of LSASS process using few technics to avoid detection
POSTDump is an another tool to perform minidump of LSASS process using few techniques to avoid detection.
19 views
Daily Writeups
β€· Title: Protecting Cached Credentials with Advanced Auditing
════════════════════════
π€ͺ Author: Horizon Secured
════════════════════════
β΄΅ Time: Wed, 19 Feb 2025 11:25:58 GMT
════════════════════════
βŒ— Tags: #windows_security #lsass #advanced_auditing #windows #cybersecurity
Medium
Protecting Cached Credentials with Advanced Auditing
Keep your cached credentials safe from attackers! In this guide, learn how to set up Windows Advanced Auditing to detect unauthorized…
31 views
Daily Writeups
β€· Title: Intrusion Detection With Splunk (Real-world Scenario)
════════════════════════
π€ͺ Author: M_ΨΉtt@
════════════════════════
β΄΅ Time: Mon, 21 Apr 2025 23:20:07 GMT
════════════════════════
βŒ— Tags: #lsass #dumping #splunk_enterprise #splunk #cybersecurity
Medium
Intrusion Detection With Splunk (Real-world Scenario)
Hello again πŸ˜€! In this article, We will answer a set of questions from a real scenario using SPL in Splunk. There are five questions in…
21 views
Daily Writeups
β€· Title: ComDotNetExploit: PoC for Windows PPL Bypass via COM-to-.NET
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sun, 25 May 2025 01:30:03 +0000
════════════════════════
βŒ— Tags: #Ethical Hacking #.NET #code injection #COM #cybersecurity #exploit #LSASS #PPL #reflection #Windows Security
Penetration Testing Tools
ComDotNetExploit: PoC for Windows PPL Bypass via COM-to-.NET
ComDotNetExploit is a C++ PoC demonstrating PPL bypass in Windows using COM-to-.NET redirection and reflection for code injection.
26 views
Daily Writeups
β€· Title: Mimikatz Cheatsheetβ€Šβ€”β€ŠPractical Credential Dumping Guide from Labs & Real-World Scenarios
════════════════════════
π€ͺ Author: Mohamed Ashraf
════════════════════════
β΄΅ Time: Fri, 04 Jul 2025 13:58:55 GMT
════════════════════════
βŒ— Tags: #penetration_testing #lsass #red_team #cybersecurity #mimikatz
Medium
Mimikatz Cheatsheet β€” Practical Credential Dumping Guide from Labs & Real-World Scenarios
@Mx0o14
28 views
Daily Writeups
β€· Title: NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 21 Jul 2025 00:29:01 +0000
════════════════════════
βŒ— Tags: #Open Source Tool #credential dumping #cybersecurity #Evasion #LSASS #Mimikatz #NativeDump #Offensive Security #pypykatz #Red Team #Windows Security
Penetration Testing Tools
NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs
NativeDump is a new tool for stealthy LSASS process dumping using only NTAPIs, bypassing EDRs to extract credentials for tools like Mimikatz or Pypykatz.
41 views
Daily Writeups
β€· Title: HTB_Academy: Extracting Passwords from Windows Systems Part 2:Attacking LSASS
════════════════════════
π€ͺ Author: Babatunde Ojo
════════════════════════
β΄΅ Time: Wed, 15 Oct 2025 18:09:04 GMT
════════════════════════
βŒ— Tags: #windows #htb #hacking #passwords #lsass
Medium
HTB_Academy: Extracting Passwords from Windows Systems Part 2:Attacking LSASS
LSASS is a core Windows process responsible for enforcing security policies, handling user authentication, and storing sensitive credential…
13 views
Daily Writeups
β€· Title: LSASS-Free Larceny: Extracting NTLMv1 Hashes with DumpGuard BOF
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 12 Jan 2026 04:51:09 +0000
════════════════════════
βŒ— Tags: #Open Source Tool #BOF #credential dumping #Cybersecurity 2026 #DumpGuard #Havoc C2 #LSASS #NTLMv1 #red teaming #Remote Credential Guard #Windows Security
Information Security News
LSASS-Free Larceny: Extracting NTLMv1 Hashes with DumpGuard BOF
DumpGuard BOF Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems. This repository contains a Beacon Object File (BOF) implementation of…
36 views
Daily Writeups
β€· Title: Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 14 Jan 2026 00:11:47 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Agere Soft Modem #CISA #CVE_2026_20805 #LSASS #Microsoft #Office Vulnerability #Patch Tuesday #Secure Boot #Windows Security #zero_day
Daily CyberSecurity
Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days
Microsoft Jan 2026 Patch Tuesday fixes 114 flaws, including 3 zero-days. CVE-2026-20805 is actively exploited. Update Windows & Office immediately.
26 views
Daily Writeups
β€· Title: Microsoft’s 2026 Kickoff: 110+ Patches Fix Active Zero-Days and Office Flaws
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 15 Jan 2026 08:24:36 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Windows #CVE_2026_20805 #cybersecurity #Infosec News #LSASS #Microsoft #Office 2026 #Patch Tuesday #RCE #Secure Boot #Windows 11 #zero_day
Penetration Testing Tools
Microsoft's 2026 Kickoff: 110+ Patches Fix Active Zero-Days and Office Flaws
Microsoft has inaugurated its first Patch Tuesday of 2026, disseminating a comprehensive suite of mandatory security remediations for
11 views
Daily Writeups
β€· Title: Screaming at the Kernel: How GhostKatz Uses β€œVulnerable Drivers” to Dump Credentials via Physical Memory
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 05 Feb 2026 04:00:10 +0000
════════════════════════
βŒ— Tags: #Open Source Tool #Aggressor Script #BYOVD #Cobalt Strike #credential exfiltration #Erik Esquivel #GhostKatz #Julian PeΓ±a #kernel exploitation #LSASS dump #MmMapIoSpace #red team tools #Tech News 2026
Information Security News
Screaming at the Kernel: How GhostKatz Uses β€œVulnerable Drivers” to Dump Credentials via Physical Memory
Security researcher Julian PeΓ±a has unveiled GhostKatz, a formidable new utility engineered to exfiltrate credentials from the LSASS process by directly accessing a computer’s physical memor…
19 views