Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: JavaGhost Uses Amazon IAM Permissions to Phish Organizations
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 16:44:28 +0000
════════════════════════
⌗ Tags: #Security #Amazon #AWS #Cyber Attack #Cybersecurity #JavaGhost #Phishing
Hackread - Latest Cybersecurity, Tech, AI, Crypto & Hacking News
JavaGhost Uses Amazon IAM Permissions to Phish Organizations
Follow us on Bluesky, Twitter (X) and Facebook at @Hackread
22 views
Daily Writeups
⤷ Title: Hunters Announces New AI Capabilities with Pathfinder AI for Smarter SOC Automation
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Tue, 04 Mar 2025 16:10:14 +0000
════════════════════════
⌗ Tags: #Press Release
Hackread
Hunters Announces New AI Capabilities with Pathfinder AI for Smarter SOC Automation
Boston and Tel Aviv, United States, 4th March 2025, CyberNewsWire
18 views
Daily Writeups
⤷ Title: Slack Jack: Bot Exploitation for Penetration Testers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:47:38 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #enumeration #ethical hacking #exploitation #Penetration Testing #permissions #security testing #Slack #Slack bot #Slack Jack #token hijacking
Penetration Testing Tools
Slack Jack: Bot Exploitation for Penetration Testers
Slack Jack is a penetration testing tool designed for ethical hacking and security testing purposes. It allows you to hijack a Slack bot
18 views
Daily Writeups
⤷ Title: ved-ebpf: Kernel Exploit and Rootkit Detection using eBPF
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:40:00 +0000
════════════════════════
⌗ Tags: #Malware Defense #Rootkit Detection
Penetration Testing Tools
ved-ebpf: Kernel Exploit and Rootkit Detection using eBPF
VED-eBPF is currently a proof-of-concept demonstrating the potential for eBPF-based kernel exploit and rootkit detection.
29 views
Daily Writeups
⤷ Title: hiphp: create a BackDoor to control PHP-based sites
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:36:01 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #php_backdoor
Penetration Testing Tools
hiphp: create a BackDoor to control PHP-based sites
The HIPHP BackDoor is an open-source tool that allows for remote control of websites utilizing the PHP programming language
25 views
Daily Writeups
⤷ Title: Opera Browser Operator: AI Handles Web Tasks, No Cloud Needed
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 04:33:23 +0000
════════════════════════
⌗ Tags: #Technology #Browser Operator #ChatGPT Pro #OpenAI #Opera #Opera Browser Operator
Cybersecurity News
Opera Browser Operator: AI Handles Web Tasks, No Cloud Needed
Explore the innovation of Browser Operator, an AI assistant from Opera designed for smart task management in your browser.
23 views
Daily Writeups
⤷ Title: Data Privacy Row: Apple Takes UK Government to Court
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 04:28:12 +0000
════════════════════════
⌗ Tags: #Technology #Advanced Data Protection #Apple #Apple Data Privacy #Data Privacy
Daily CyberSecurity
Data Privacy Row: Apple Takes UK Government to Court
Reports have surfaced alleging that the UK government secretly issued an order to Apple, demanding the creation of a backdoor within iCloud that would grant British law enforcement agencies access…
30 views
Daily Writeups
⤷ Title: AI Notepad: Rewrite Your Text, Windows 11 Gets Smarter
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 04:19:55 +0000
════════════════════════
⌗ Tags: #Windows #Notepad AI #Windows 11 #Windows 11 Notepad AI
Daily CyberSecurity
AI Notepad: Rewrite Your Text, Windows 11 Gets Smarter
Microsoft had previously been testing an AI-powered version of Notepad through the Windows Insider Preview program. Following successful trials, this feature is now being rolled out to the stable …
17 views
Daily Writeups
⤷ Title: Pixel Power-Ups: AI Avatars, Watch Alerts, & Android 15’s Big Leap
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 04:01:39 +0000
════════════════════════
⌗ Tags: #Android #Android 15 #Google Messages #Pixel #Pixel 9 #Pixel 9 series
Daily CyberSecurity
Pixel Power-Ups: AI Avatars, Watch Alerts, & Android 15’s Big Leap
Google has recently unveiled four major updates for Android 15, including AI-powered fraud detection in Google Messages, real-time location sharing for users via the Find My Device feature, gaming…
17 views
Daily Writeups
⤷ Title: HPE Insight RS Flaw: CVE-2024-53676 PoC Exploit Published, RCE Risk Looms
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:47:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_53676 #Insight Remote Support
Daily CyberSecurity
HPE Insight RS Flaw: CVE-2024-53676 PoC Exploit Published, RCE Risk Looms
Explore CVE-2024-53676 PoC and its implications for HPE Insight Remote Support security vulnerabilities and remote code execution risks.
16 views
Daily Writeups
⤷ Title: CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:39:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #ADSelfService Plus #CVE_2025_1723
Daily CyberSecurity
CVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus • Daily CyberSecurity
CVE-2025-1723 poses a significant risk for Zoho ADSelfService Plus users. Discover how to secure your data and avoid account takeover.
14 views
Daily Writeups
⤷ Title: Malicious Go Packages Target Developers with Hidden Loader Malware on Linux and macOS
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:33:11 +0000
════════════════════════
⌗ Tags: #Malware #Linux #macOS #Malicious Go Packages
Cybersecurity News
Malicious Go Packages Target Developers with Hidden Loader Malware on Linux and macOS
Uncover the threat of malicious Go packages targeting developers through typosquatting. Stay informed to protect your projects.
31 views
Daily Writeups
⤷ Title: Vim Users Warned: Crafted TAR Files Could Trigger Code Execution (CVE-2025-27423)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:20:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_27423 #vim #Vim vulnerability
Cybersecurity News
Vim Users Warned: Crafted TAR Files Could Trigger Code Execution (CVE-2025-27423)
Explore CVE-2025-27423, a Vim vulnerability that allows arbitrary code execution. Learn how to protect your systems.
16 views
Daily Writeups
⤷ Title: LummaStealer Expands Attack Surface with Fake Booking Sites and CAPTCHA Tricks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 02:14:50 +0000
════════════════════════
⌗ Tags: #Malware #LummaStealer #Malware_as_a_Service
Cybersecurity News
LummaStealer Expands Attack Surface with Fake Booking Sites and CAPTCHA Tricks
Uncover the LummaStealer Attack and its new malvertising tactics using fake booking websites to distribute info-stealer malware.
20 views
Daily Writeups
⤷ Title: CVE-2024-0114: NVIDIA Addresses High-Severity HMC Vulnerability
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:59:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_0114 #Hopper HGX #nvidia
Daily CyberSecurity
CVE-2024-0114: NVIDIA Addresses High-Severity HMC Vulnerability
Learn about CVE-2024-0114, a high-severity vulnerability in Nvidia's Hopper HGX, risking code execution and privilege escalation.
17 views
Daily Writeups
⤷ Title: Operation Sea Elephant Cyber-Espionage Campaign Targeting South Asia
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:56:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #CNC group #cyber_espionage #data exfiltration #Github API i #Government Organizations #malware #Operation Sea Elephant #Remote Command Execution #Research Institutions #South Asia #Universities
Daily CyberSecurity
Operation Sea Elephant Cyber-Espionage Campaign Targeting South Asia
Uncover the tactics of the CNC group in Operation Sea Elephant targeting academic and research institutions in South Asia.
19 views
Daily Writeups
⤷ Title: Chrome 134 Update Addresses High-Risk Vulnerability (CVE-2025-1914)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:47:30 +0000
════════════════════════
⌗ Tags: #Vulnerability #Chrome 134 #CVE_2025_1914 #CVE_2025_1915 #javascript #V8
Daily CyberSecurity
Chrome 134 Update Addresses High-Risk Vulnerability (CVE-2025-1914)
Discover how CVE-2025-1914 impacts Google Chrome and the urgent security patches included in the latest Chrome 134 update.
20 views
Daily Writeups
⤷ Title: CVE-2025-0912: Critical Flaw Exposes Over 100,000 WordPress Donation Sites to RCE
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 01:35:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_0912 #GiveWP #wordpress
Daily CyberSecurity
CVE-2025-0912: Critical Flaw Exposes Over 100,000 WordPress Donation Sites to RCE
Learn about CVE-2025-0912, a severe security vulnerability in GiveWP affecting over 100,000 WordPress sites.
25 views
Daily Writeups
⤷ Title: SharePoint Shadow: Havoc’s FUD Malware Conceals Cyber Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 00:25:32 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Campaign #FUD Malware #Havoc C2 #Microsoft Graph API #Sharepoint #SharePointC2Init #Undetectable
Daily CyberSecurity
SharePoint Shadow: Havoc's FUD Malware Conceals Cyber Attacks
Explore the latest insights on FUD Malware and how the Havoc framework enables undetectable cyber operations.
23 views
Daily Writeups
⤷ Title: Finding jwt tokens that lead to PII data leakage.
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:20:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #bug_bounty #bug_bounty_tips #ethical_hacking
Medium
Finding jwt tokens that lead to PII data leakage.
Check the JWT tokens carefully for those that contain sensitive information
18 views
Daily Writeups
⤷ Title: Able to create an account without a phone number. (unique bug)
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 03:16:31 GMT
════════════════════════
⌗ Tags: #tips #bug_bounty_tips #ethical_hacking #cybersecurity #bug_bounty
Medium
Able to create an account without a phone number. (unique bug)
Enter anything in the phone number field, and I’m still able to create an account
14 views