Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Cybersecurity — Incident Response & Compliance
════════════════════════
𐀪 Author: Mitesh Pant
════════════════════════
ⴵ Time: Sun, 16 Feb 2025 19:15:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #devsecops #seim #penetration_testing #cloud_security
Medium
Cybersecurity — Incident Response & Compliance
If you have not already please take a look at Fundamentals of Cybersecurity and Secure Software Development.
17 views
Daily Writeups
⤷ Title: Threat Modeling: The Cybersecurity Crystal Ball You Never Knew You Needed
════════════════════════
𐀪 Author: CyferNest Sec
════════════════════════
ⴵ Time: Sun, 16 Feb 2025 20:18:59 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #soc #threat_modeling #tryhackme #cybersecurity
Medium
Threat Modeling: The Cybersecurity Crystal Ball You Never Knew You Needed
What is Threat Modeling? (A.K.A. “How to Predict Cyber Chaos Before It Happens”)
28 views
Daily Writeups
⤷ Title: Hackerman? Nah, Just a College Kid Who Found an SQL Bug!
════════════════════════
𐀪 Author: Sisilika
════════════════════════
ⴵ Time: Sun, 16 Feb 2025 19:38:23 GMT
════════════════════════
⌗ Tags: #sql_injection
Medium
Hackerman? Nah, Just a College Kid Who Found an SQL Bug!
Picture this: a bored college student (yours truly) casually browsing the college website, expecting nothing but mundane tasks and loading…
25 views
Daily Writeups
⤷ Title: Exploring Length Extension Attacks: A TryHackMe Walkthrough
════════════════════════
𐀪 Author: Ali7
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 00:13:53 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #infosec #privacy #ethical_hacking
Medium
Exploring Length Extension Attacks: A TryHackMe Walkthrough
Task 1: Introduction to Hash Functions
19 views
Daily Writeups
⤷ Title: The Star Health Data Breach: A Defining Moment for India’s Cybersecurity Future
════════════════════════
𐀪 Author: Jyothika Vinoth
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 00:48:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #cybercrime
Medium
The Star Health Data Breach: A Defining Moment for India’s Cybersecurity Future
Introduction Picture this: You visit your doctor, share sensitive medical details, and assume your information is safe. Now, imagine waking…
20 views
Daily Writeups
⤷ Title: All me social app True Believer kickstarter reward
════════════════════════
𐀪 Author: Karl A L Smith
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 00:29:21 GMT
════════════════════════
⌗ Tags: #social_media #cybersecurity #privacy #data #democracy
Medium
All me social app True Believer kickstarter reward
All me social app background
👍1
16 views
Daily Writeups
⤷ Title: NFTs as Digital Weapons (Virus): Can a ‘Steganographic NFT Payload’ Take Down a Marketplace?
════════════════════════
𐀪 Author: Gabriel H. Narváez
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 00:28:31 GMT
════════════════════════
⌗ Tags: #nft #web3 #cryptocurrency #cybersecurity #technology
Medium
NFTs as Digital Weapons (Virus): Can a ‘Steganographic NFT Payload’ Take Down a Marketplace?
How NFTs Could Be Used as Attack Vectors in Web3 Security Breaches
15 views
Daily Writeups
⤷ Title: All me social app Champion kickstarter reward
════════════════════════
𐀪 Author: Karl A L Smith
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 00:28:16 GMT
════════════════════════
⌗ Tags: #crowdfunding #security #social_media #innovation #cybersecurity
Medium
All me social app Champion kickstarter reward
All me social app background
24 views
Daily Writeups
⤷ Title: OverTheWire: Bandit levels 7–12
════════════════════════
𐀪 Author: Malek Alhawi
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 00:08:55 GMT
════════════════════════
⌗ Tags: #kali #linux #cybersecurity #bandit_walkthrough #learning
Medium
OverTheWire: Bandit levels 7–12
Description
18 views
Daily Writeups
⤷ Title: CyberDefenders —IcedID Lab Walkthrough
════════════════════════
𐀪 Author: Drew Arpino
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 00:01:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyberdefender #cyber_threat_intelligence #blue_team #virustotal
Medium
CyberDefenders —IcedID Lab Walkthrough
A Cyber Threat Intelligence Challenge using VirusTotal, MITRE ATT&CK, and Recorded Future Triage.
24 views
Daily Writeups
⤷ Title: Why Your SME’s Cyber Insurance Might Not Cover You (And What to Do About It)
════════════════════════
𐀪 Author: Cyber Secure Step Consulting
════════════════════════
ⴵ Time: Sun, 16 Feb 2025 23:48:01 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #sme #cyber_insurance #cybersecurity
Medium
Why Your SME’s Cyber Insurance Might Not Cover You (And What to Do About It)
Cyber threats aren’t just a big business problem anymore. Small and medium-sized enterprises (SMEs) are now prime targets for…
19 views
Daily Writeups
⤷ Title: Insecure Randomness and Padding Oracle, Web Exploitation - Decryptify : TryHackMe Walkthrough - 60…
════════════════════════
𐀪 Author: RosanaFSS
════════════════════════
ⴵ Time: Sun, 16 Feb 2025 23:20:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #web_development #tryhackme #technology
Medium
Insecure Randomness and Padding Oracle, Web Exploitation - Decryptify : TryHackMe Walkthrough - 60 points
Explore Broken Object Level Authorization, API1:2023. Use your skills to exploit Insecure Randomness vulnerability, and uncover encrypted…
37 views
Daily Writeups
⤷ Title: Hack The Box — Cicada Walkthrough
════════════════════════
𐀪 Author: Tech&Jazzgirl
════════════════════════
ⴵ Time: Sun, 16 Feb 2025 23:15:54 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #pentesting #windows #penetration_testing #hackthebox_walkthrough
Medium
Hack The Box — Cicada Walkthrough
1. Reconnaissance, Scanning and Enumeration
36 views
Daily Writeups
⤷ Title: SSH3: faster and rich secure shell using HTTP/3
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:40:22 +0000
════════════════════════
⌗ Tags: #Network Defense #HTTP/3 #SSH protocol #SSH3
Penetration Testing Tools
SSH3: faster and rich secure shell using HTTP/3
SSH3 is a complete revisit of the SSH protocol, mapping its semantics on top of the HTTP mechanisms. In a nutshell, SSH3 uses QUIC+TLS1.3
32 views
Daily Writeups
⤷ Title: PichichiH0ll0wer: Nim process hollowing loader
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:37:39 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #process hollowing loader
Penetration Testing Tools
PichichiH0ll0wer: Nim process hollowing loader
PichichiH0ll0wer is a Process hollowing loader written in Nim for PEs only. PichichiH0ll0wer has some features to protect your payload
24 views
Daily Writeups
⤷ Title: EDRSilencer: uses WFP to block EDR agents from reporting security events to the server
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:30:47 +0000
════════════════════════
⌗ Tags: #Ethical Hacking
Penetration Testing Tools
EDRSilencer: uses WFP to block EDR agents from reporting security events to the server
This tool was created to block the outbound traffic of running EDR processes using Windows Filtering Platform (WFP) APIs.
21 views
Daily Writeups
⤷ Title: CVE-2022-31631 (CVSS 9.1): Critical PHP Flaw Exposes Websites to SQL Injection Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:25:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2022_31631 #php #SQLite databases
Daily CyberSecurity
CVE-2022-31631 (CVSS 9.1): Critical PHP Flaw Exposes Websites to SQL Injection Attacks
Learn about CVE-2022-31631 and its risks related to SQL injection in PHP. Update your PHP to stay secure from vulnerabilities.
16 views
Daily Writeups
⤷ Title: Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:19:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT29 #CozyDuke #CozyLarch #DarkHalo #Device Code Authentication #Device Code Authentication phishing #Midnight Blizzard #phishing #UTA0304 #UTA0307
Daily CyberSecurity
Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts
Explore the risks of Device Code Authentication phishing targeted at Microsoft 365 users by Russian threat actors.
21 views
Daily Writeups
⤷ Title: Metasploit-Ready: CVE-2025-1094 SQLi in PostgreSQL Exposes Systems to Remote Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:14:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_1094 #PostgreSQL
Daily CyberSecurity
Metasploit-Ready: CVE-2025-1094 SQLi in PostgreSQL Exposes Systems to Remote Attacks
Explore CVE-2025-1094, a high-severity SQL injection vulnerability in PostgreSQL's psql tool that can execute arbitrary code.
30 views
Daily Writeups
⤷ Title: Astaroth Phishing Kit Bypasses 2FA, Steals Accounts
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:07:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #AOL #Astaroth #Astaroth Phishing Kit #gmail #Microsoft 365 #Phishing Kit #yahoo
Daily CyberSecurity
Astaroth Phishing Kit Bypasses 2FA, Steals Accounts
Uncover the dangers of the Astaroth Phishing Kit, which bypasses two-factor authentication to steal sensitive credentials.
19 views
Daily Writeups
⤷ Title: SPAWNCHIMERA: New Malware Exploits Ivanti Zero-Day Flaw (CVE-2025-0282)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:03:21 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #CVE_2025_0282 #SPAWNANT #SPAWNMOLE #SPAWNSNAIL
Daily CyberSecurity
SPAWNCHIMERA: New Malware Exploits Ivanti Zero-Day Flaw (CVE-2025-0282)
Uncover the dangers of SPAWNCHIMERA malware, an advanced cyber threat exploiting CVE-2025-0282 for stealthy attacks.
18 views