Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 24 Apr 2023 20:10:53 GMT
———————————————
✏️Title: Arbitrary file read via Symbolic Links
———————————————
📎Link: https://medium.com/p/f794e6fd2c2b
———————————————
Tags: #walkthrough #ctf #symbolic_link #cybersecurity #infosec

Medium

Arbitrary file read via Symbolic Links

Hey, I am W1C3, and today I will explain how you can read files via Symbolic Links. This challenge was developed for the Nullcon CTF 2023.

5 views22:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Tue, 25 Apr 2023 23:44:03 GMT
———————————————
✏️Title: Formal Verification & Symbolic Execution | The Security Silver Bullet?
———————————————
📎Link: https://medium.com/p/38e0ac9072eb
———————————————
Tags: #formal_verification #smart_contracts #cybersecurity #smart_contract_auditing #symbolic_execution

Medium

Formal Verification & Symbolic Execution | The Security Silver Bullet?

We look at formal verification & symbolic execution with two Trail of Bits Web3 security team members. Additionally, we review the value…

8 views00:00

Daily Writeups

⤷ Title: Fortinet Uncovers Threat Actor Persistence via Symbolic Link Exploit in FortiGate Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 04:42:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2022_42475 #CVE_2023_27997 #CVE_2024_21762 #cybersecurity #FortiGate #Fortinet #patch management #SSL_VPN vulnerability #symbolic link

Daily CyberSecurity

Fortinet Uncovers Threat Actor Persistence via Symbolic Link Exploit in FortiGate Devices

Fortinet warns of a novel persistence exploit using symbolic links in FortiGate SSL-VPNs. Upgrade to patched FortiOS versions to mitigate the threat.

24 views16:05

Daily Writeups

⤷ Title: CVE-2025-21204: SYSTEM-Level Privilege Escalation in Windows Update Stack Exposed, PoC Released
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 22 Apr 2025 00:50:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_21204 #directory junction #Elli Shlomo #Microsoft #PowerShell exploit #privilege escalation #symbolic links #SYSTEM access #Windows Update Stack

Daily CyberSecurity

CVE-2025-21204: SYSTEM-Level Privilege Escalation in Windows Update Stack Exposed, PoC Released

A critical flaw (CVE-2025-21204) in the Windows Update Stack allows local privilege escalation. Details and proof-of-concept exploit released.

18 views02:04

Daily Writeups

⤷ Title: Windows Update Flaw: SYSTEM Privilege Escalation Via Arbitrary Folder Deletion, PoC Available!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:50:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #LPE #Microsoft #NT AUTHORITY\SYSTEM #privilege escalation #proof_of_concept #symbolic link #Windows Update

Daily CyberSecurity

Windows Update Flaw: SYSTEM Privilege Escalation Via Arbitrary Folder Deletion, PoC Available!

A Windows Update flaw (CVE-2025-48799) allows SYSTEM privilege escalation via arbitrary folder deletion using symlinks on multi-drive systems. PoC available. Patch now!

30 views01:03

Daily Writeups

⤷ Title: CVE-2025-55188: 7-Zip Arbitrary File Write Flaw Could Lead to Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 Aug 2025 02:14:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #7_Zip #Arbitrary File Write #Archive Extraction #CVE_2025_55188 #cybersecurity #rce #symbolic links #Vulnerability

Daily CyberSecurity

CVE-2025-55188: 7-Zip Arbitrary File Write Flaw Could Lead to Code Execution

A critical vulnerability (CVE-2025-55188, CVSS 2.7) in 7-Zip allows remote attackers to perform arbitrary file writes via a crafted archive, potentially leading to code execution.

20 views04:04

Daily Writeups

⤷ Title: ABRIENDO TRES LADOS DEL HEXÁGONO:
════════════════════════
𐀪 Author: Mi Gpt y yo - Manuel Barrera Anglada.
════════════════════════
ⴵ Time: Wed, 01 Oct 2025 22:50:32 GMT
════════════════════════
⌗ Tags: #ethical_hacking #ai #philosophy #symbolic_ai #ethics

Medium

ABRIENDO TRES LADOS DEL HEXÁGONO:

Lado 1

15 views00:04

Daily Writeups

⤷ Title: 700+ Instances Hacked: Gogs Zero-Day CVE-2025-8110 Under Active Exploitation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 13 Dec 2025 10:32:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_8110 #cybersecurity #Git Service #Gogs #RCE #remote code execution #Supershell #Symbolic Link #Wiz #zero_day

Penetration Testing Tools

700+ Instances Hacked: Gogs Zero-Day CVE-2025-8110 Under Active Exploitation

Attackers are actively exploiting a newly discovered zero-day vulnerability in Gogs—a widely used self-hosted Git service—for which no

24 views12:04

Daily Writeups

⤷ Title: Ghidra 12.0 Released: Adds Concolic Execution and File System Mirroring for Reverse Engineering
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 03:38:40 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Concolic Execution #cybersecurity #Decompiler #Ghidra #NSA #PyGhidra #reverse engineering #RISC_V #Symbolic Links

Penetration Testing Tools

Ghidra 12.0 Released: Adds Concolic Execution and File System Mirroring for Reverse Engineering

Ghidra, the free reverse-engineering framework developed by the U.S. National Security Agency’s research arm, has reached version 12.0,

17 views04:04

About

Blog

Apps

Platform