Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
128K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Microsoft Kills DES: Windows Server 2025 and Beyond Ditch Legacy Cipher
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 07:58:30 +0000
════════════════════════
⌗ Tags: #Windows #Data Encryption Standard #Microsoft #Windows 11 24H2 #Windows Server 2025
Cybersecurity News
Microsoft Kills DES: Windows Server 2025 and Beyond Ditch Legacy Cipher
Understand the Windows Server Data Encryption Standard changes as Microsoft phases out DES for enhanced security.
19 views
Daily Writeups
⤷ Title: Android Alert: Critical Flaws CVE-2024-43093 & CVE-2024-50302 Exploited, Update Now!
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 02:09:49 +0000
════════════════════════
⌗ Tags: #Android #Vulnerability #Android Security Bulletin #CVE_2024_43093 #CVE_2024_50302
Daily CyberSecurity
Android Alert: Critical Flaws CVE-2024-43093 & CVE-2024-50302 Exploited, Update Now!
The bulletin confirms that CVE-2024-43093 and CVE-2024-50302 have been under limited, targeted exploitation.
21 views
Daily Writeups
⤷ Title: CVE-2025-0364 (CVSS 9.8): BigAnt Server Zero-Day, Public Exploit Confirmed
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 02:04:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #BigAnt Server #CVE_2024_54761
Daily CyberSecurity
CVE-2025-0364 (CVSS 9.8): BigAnt Server Zero-Day, Public Exploit Confirmed
CVE-2025-0364 is a critical RCE vulnerability in BigAntSoft Server. Learn how it allows unauthenticated privilege escalation.
19 views
Daily Writeups
⤷ Title: Doppelgänger Disinformation Operation Continues to Undermine Western Democracies
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 02:02:39 +0000
════════════════════════
⌗ Tags: #Cyber Security #Doppelgänger operation
Daily CyberSecurity
Doppelgänger Disinformation Operation Continues to Undermine Western Democracies
Explore the Doppelgänger operation's impact on Western countries through disinformation and manipulated social media content.
36 views
Daily Writeups
⤷ Title: CVE-2025-0159 (CVSS 9.1): Critical IBM Storage Flaw Allows Authentication Bypass
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:54:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #CVE_2025_0158 #CVE_2025_0159 #IBM #IBM Storage Virtualize products #Storage Virtualize products
Daily CyberSecurity
CVE-2025-0159 (CVSS 9.1): Critical IBM Storage Flaw Allows Authentication Bypass
Learn about CVE-2025-0159, a critical vulnerability in IBM Storage Virtualize products that allows authentication bypass.
29 views
Daily Writeups
⤷ Title: Critical Flaws Exploited: Cisco, Windows, Hitachi, WhatsUp Gold at Risk
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:48:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #cisco #CVE_2018_8639 #CVE_2022_43769 #CVE_2022_43939 #CVE_2023_20118 #CVE_2024_4885 #Hitachi #WhatsUp Gold #windows
Daily CyberSecurity
Critical Flaws Exploited: Cisco, Windows, Hitachi, WhatsUp Gold at Risk
CISA has issued an urgent warning for federal agencies to mitigate flaws being actively exploited in Cisco routers, Windows systems, and Hitachi and Progress WhatsUp Gold software
20 views
Daily Writeups
⤷ Title: JavaGhost’s Persistent Phishing Attacks: Exploiting Cloud Environments for Long-Term Access
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:44:00 +0000
════════════════════════
⌗ Tags: #Cyber Security #JavaGhost #JavaGhost group #Scattered Spider
Daily CyberSecurity
JavaGhost’s Persistent Phishing Attacks: Exploiting Cloud Environments for Long-Term Access
Uncover the tactics of JavaGhost, a threat actor group shifting to advanced phishing campaigns targeting AWS services.
17 views
Daily Writeups
⤷ Title: Massive GitHub Malware Campaign Targets Gamers and Software Pirates with Redox Stealer
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:39:36 +0000
════════════════════════
⌗ Tags: #Malware #GitHub Malware Campaign #Redox Stealer
Daily CyberSecurity
Massive GitHub Malware Campaign Targets Gamers and Software Pirates with Redox Stealer
Uncover the dangers of Redox Stealer, a malware spreading through fake GitHub repositories targeting gamers and software users.
18 views
Daily Writeups
⤷ Title: Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:35:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_23388 #CVE_2025_23389 #Rancher #SUSE
Daily CyberSecurity
Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks
These flaws, identified as CVE-2025-23388 and CVE-2025-23389, could allow attackers to launch denial-of-service (DoS) attacks and impersonate users
25 views
Daily Writeups
⤷ Title: Black Basta and Cactus Ransomware Groups Weaponize BackConnect Malware
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 01:31:16 +0000
════════════════════════
⌗ Tags: #Malware #BackConnect malware #Black Basta #Cactus Ransomware #ESXi #Microsoft Teams #Operation Duckhunt #QBACKCONNECT #SystemBC #WinSCP
Daily CyberSecurity
Black Basta and Cactus Ransomware Groups Weaponize BackConnect Malware
Learn about QBACKCONNECT and its role in the tactics of Black Basta and Cactus ransomware groups for cyber threats.
20 views
Daily Writeups
⤷ Title: CVE-2025-0289: Paragon Partition Manager Flaw Exploited in BYOVD Ransomware Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 03 Mar 2025 23:47:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #BYOVD ransomware attacks #CVE_2025_0285 #CVE_2025_0286 #CVE_2025_0287 #CVE_2025_0288 #CVE_2025_0289 #Paragon Partition Manager #Windows Vulnerable Driver Blocklist
Daily CyberSecurity
CVE-2025-0289: Paragon Partition Manager Flaw Exploited in BYOVD Ransomware Attacks
Explore CVE-2025-0289 vulnerabilities in Paragon Partition Manager and their impact on ransomware attacks targeting privilege escalation.
22 views
Daily Writeups
⤷ Title: Blind SQL Injection in Oracle Database: Exfiltrating Data with Burp Collaborator  —  SQL Injection…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:26:32 GMT
════════════════════════
⌗ Tags: #sql_injection_oracle_db #sqli_data_exfiltration #bug_bounty #blind_sql_injection #bug_bounty_writeup
Medium
Blind SQL Injection in Oracle Database: Exfiltrating Data with Burp Collaborator — SQL Injection Labs
[Write-up] Blind SQL Injection with Out-of-Band Data Exfiltration.
28 views
Daily Writeups
⤷ Title: Day 22: Account Takeover Worth $1000
════════════════════════
𐀪 Author: dani3l
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 07:08:00 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #account_takeover #ethical_hacking
Medium
Day 22: Account Takeover Worth $1000
Today’s write-up by Faique showcases a critical authentication flaw that led to an account takeover due to misconfigured 2FA and OAuth.
24 views
Daily Writeups
⤷ Title: Why beginners should look for open redirect vulnerabilities: An easy win in ethical hacking
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:41:02 GMT
════════════════════════
⌗ Tags: #programming #hacking #cybersecurity #bugbounty_writeup #bug_bounty
Medium
Why beginners should look for open redirect vulnerabilities: An easy win in ethical hacking
If you’re new to ethical hacking or bug bounty hunting, finding your first vulnerability can feel overwhelming. Many security flaws require…
19 views
Daily Writeups
⤷ Title: Rate limit bypass lead to OTP bypass($600)
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:35:59 GMT
════════════════════════
⌗ Tags: #hackerone #bug_bounty #bugcrowd #cybersecurity
Medium
Rate limit bypass lead to OTP bypass($600)
Description:
18 views
Daily Writeups
⤷ Title: The Mindset of a Successful Bug Bounty Hunter: Think Like a Hacker, Act Like a Scientist
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:28:46 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #bug_bounty #ethical_hacking #programming #cybersecurity
Medium
The Mindset of a Successful Bug Bounty Hunter: Think Like a Hacker, Act Like a Scientist
Bug bounty hunting is not just about tools, exploits, or CVEs. It’s about mindset. You can have the best recon automation, the latest Burp…
16 views
Daily Writeups
⤷ Title: Advanced Bug Hunting Techniques: Unearthing Unique Bugs with AI and Exploits
════════════════════════
𐀪 Author: CodelineX Pvt Ltd
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:20:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #hacking #cybersecurity
Medium
Advanced Bug Hunting Techniques: Unearthing Unique Bugs with AI and Exploits
Introduction
14 views
Daily Writeups
⤷ Title: The Underground Art of Client-Side Bug Hunting: Uncovering Hidden Vulnerabilities in Web…
════════════════════════
𐀪 Author: CodelineX Pvt Ltd
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:11:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #internet #bug_bounty #hacking
Medium
The Underground Art of Client-Side Bug Hunting: Uncovering Hidden Vulnerabilities in Web Applications
Introduction
14 views
Daily Writeups
⤷ Title: I hack the online gambling via xss upload (part 2) (3500 USD)
════════════════════════
𐀪 Author: Bytesnull
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:05:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty_tips #xss_vulnerability #xss_attack #bug_bounty
Medium
I hack the online gambling via xss upload (part 2) (3500 USD)
So if you did not already read the part 1 here is the link
23 views
Daily Writeups
⤷ Title: The Art of WAF Bypass: Advanced Techniques and Strategies for Ethical Hackers
════════════════════════
𐀪 Author: CodelineX Pvt Ltd
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 06:02:47 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty_tips #cyber_security_awareness #bug_bounty
Medium
The Art of WAF Bypass: Advanced Techniques and Strategies for Ethical Hackers
Introduction
16 views
Daily Writeups
⤷ Title: ️‍♂️ When Google Became My Personal Vulnerability Scanner and helped me to find Exposed…
════════════════════════
𐀪 Author: Gokuleswaran B
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 05:47:54 GMT
════════════════════════
⌗ Tags: #dorks #bug_bounty_tips #bug_bounty_writeup #vulnerability #bug_bounty
Medium
🕵️‍♂️ When Google Became My Personal Vulnerability Scanner and helped me to find Exposed…
Ever heard of a free vulnerability scanner that requires zero installation? Spoiler alert: It’s called Google.
16 views