Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: An Introduction to SOC with Elastic: Building a Smarter, Scalable Security Operations Center
════════════════════════
𐀪 Author: Hamdan Ansari
════════════════════════
ⴵ Time: Sat, 01 Mar 2025 07:36:05 GMT
════════════════════════
⌗ Tags: #cyberattack #elastic_security #security #cybersecurity #blue_team
Medium
An Introduction to SOC with Elastic: Building a Smarter, Scalable Security Operations Center
Introduction: Building a Smarter SOC with Elastic
24 views
Daily Writeups
⤷ Title: Elastic Uncovers Stealthy Campaign Using GHOSTPULSE and ARECHCLIENT2 Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:22:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arechclient2 #ClickFix #cybersecurity #Elastic Security Labs #GHOSTPULSE #Infostealer #malware #phishing #rat #Remote Access Trojan #SecTopRAT #social engineering
Daily CyberSecurity
Elastic Uncovers Stealthy Campaign Using GHOSTPULSE and ARECHCLIENT2 Malware
Elastic uncovers a sophisticated ClickFix campaign deploying the GHOSTPULSE loader to deliver ARECHCLIENT2 malware, leveraging social engineering for credential theft and remote access.
15 views
Daily Writeups
⤷ Title: SHELLTER Evasion Framework Abused: Elite v11.0 Packages LUMMA, RHADAMANTHYS, ARECHCLIENT2 Infostealers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:07:26 +0000
════════════════════════
⌗ Tags: #Malware #Arechclient2 #cybersecurity #Elastic Security Labs #Evasion Framework #Infostealer #Lumma #malware #polymorphic #Red Team tool #Rhadamanthys #shellter
Daily CyberSecurity
SHELLTER Evasion Framework Abused: Elite v11.0 Packages LUMMA, RHADAMANTHYS, ARECHCLIENT2 Infostealers
Elastic Security Labs reveals SHELLTER Elite v11.0 is being abused to deploy LUMMA, RHADAMANTHYS, and ARECHCLIENT2 infostealers, leveraging advanced evasion techniques to bypass AV/EDR
32 views
Daily Writeups
⤷ Title: Shellter Tool Abused by Hackers: Developers Slam Elastic for “Negligent” Disclosure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 02:55:57 +0000
════════════════════════
⌗ Tags: #Malware #cybercrime #cybersecurity #Elastic Security Labs #Evasion Framework #Infostealer #malware #Red Team Tool #Responsible Disclosure #Shellter
Penetration Testing Tools
Shellter Tool Abused by Hackers: Developers Slam Elastic for "Negligent" Disclosure
Shellter developers confirm their AV/EDR evasion tool is being used by malicious actors, criticizing Elastic for "negligent" disclosure that risked further misuse.
24 views
Daily Writeups
⤷ Title: Elastic Cloud S.I.E.M Lab | Deployment and Configuration Guide
════════════════════════
𐀪 Author: Antonio Tanco
════════════════════════
ⴵ Time: Sat, 06 Sep 2025 19:28:55 GMT
════════════════════════
⌗ Tags: #elasticsearch #system_administration #cybersecurity #elk_stack #elastic_security
Medium
Elastic Cloud S.I.E.M Lab | Deployment and Configuration Guide
Platform: Elastic Cloud Skills Demonstrated: Configuration Management, System Administration Tools: Powershell
10 views
Daily Writeups
⤷ Title: WARMCOOKIE Resurfaces After Takedown: New Variant Adds Stealth Handlers, Uses Expired C2 Certificates
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Oct 2025 00:05:16 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #C2 #cybersecurity #Elastic Security Labs #MaaS #malware #Operation Endgame #persistence #WarmCookie
Daily CyberSecurity
WARMCOOKIE Resurfaces After Takedown: New Variant Adds Stealth Handlers, Uses Expired C2 Certificates
WARMCOOKIE has resurfaced post-Operation Endgame with new execution handlers, a MaaS model, and evasive techniques like disguised scheduled tasks using company names.
25 views
Daily Writeups
⤷ Title: Lunar Spider Campaign: FakeCAPTCHA Used to Exploit CORS Flaws and Deliver Latrodectus Loader
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 02:08:40 +0000
════════════════════════
⌗ Tags: #Malware #CORS #DLL Sideloading #Elastic Security #FakeCaptcha #Latrodectus #Lunar Spider #Ransomware Loader
Penetration Testing Tools
Lunar Spider Campaign: FakeCAPTCHA Used to Exploit CORS Flaws and Deliver Latrodectus Loader
The Lunar Spider group is exploiting CORS flaws on European websites, injecting a FakeCAPTCHA to deliver the Latrodectus loader for pre-ransomware reconnaissance and data theft.
11 views
Daily Writeups
⤷ Title: Basics & Advanced Elasticsearch Security Solution Tips. Part 1
════════════════════════
𐀪 Author: Yousef Helmy
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 23:36:02 GMT
════════════════════════
⌗ Tags: #elasticsearch #siem #cybersecurity #elastic_security #kibana
Medium
Basics & Advanced Elasticsearch Security Solution Tips. Part 1
Elasticsearch features a security solution that allows you to create detection rules, view alerts, manage cases, and more. In this…
10 views
Daily Writeups
⤷ Title: The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:46:39 +0000
════════════════════════
⌗ Tags: #Malware #BadIIS #Cybercrime #Elastic Security Labs #Gambling Scam #IIS Server #malware #SEO Poisoning #Traffic Redirection #UAT_8099 #Windows Security
Daily CyberSecurity
The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites
Elastic Security Labs uncovers BADIIS malware compromising 1,800+ IIS servers. Attackers use SEO poisoning to redirect users to illicit gambling sites.
16 views
Daily Writeups
⤷ Title: The ‘Human Verification’ Trap: ClickFix Campaign Hijacks Trusted Sites to Deploy MIMICRAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 00:00:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #ClickFix Campaign #Cyber Security #Elastic Security Labs #Fileless Malware #infosec #MIMICRAT #powershell #Remote Access Trojan #social engineering #threat intelligence
Daily CyberSecurity
The 'Human Verification' Trap: ClickFix Campaign Hijacks Trusted Sites to Deploy MIMICRAT
Elastic Security Labs uncovers a ClickFix campaign turning human helpfulness into a weapon. Fake verifications deploy the fileless MIMICRAT via PowerShell.
11 views