Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Behind Closed Doors: Safeguarding Secrets in DevSecOps Workflow
════════════════════════
𐀪 Author: Revel Aldwin
════════════════════════
ⴵ Time: Mon, 28 Apr 2025 10:05:25 GMT
════════════════════════
⌗ Tags: #devsecops #secret_management_tools #application_security #sdlc #secrets
Medium
Behind Closed Doors: Safeguarding Secrets in DevSecOps Workflow
by Revel Aldwin (DevSecOps Consultant at ITSEC Asia)
19 views
Daily Writeups
⤷ Title: The Persistence Problem: Why Exposed Credentials Linger Like Uninvited Guests ️‍♂️
════════════════════════
𐀪 Author: Ismail Tasdelen
════════════════════════
ⴵ Time: Mon, 12 May 2025 15:59:39 GMT
════════════════════════
⌗ Tags: #application_security #code_security #devsecops #cybersecurity #secret_management_tools
Medium
The Persistence Problem: Why Exposed Credentials Linger Like Uninvited Guests 🕵️‍♂️
Imagine this: you accidentally leave your house keys under the doormat, and a nosy neighbor spots them. You’re told about it, but instead…
19 views
Daily Writeups
⤷ Title: Emojis: Your Digital Smile Isn’t Always Friendly
════════════════════════
𐀪 Author: Aastha Thakker
════════════════════════
ⴵ Time: Thu, 22 May 2025 17:54:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #emerging_threats #secret_codes #emojisaredangerous #emoji
Medium
Emojis: Your Digital Smile Isn’t Always Friendly
We speak in emojis. Now, so do the threats.
15 views
Daily Writeups
⤷ Title: Varunastra: Securing the Depths of Docker
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:27:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #Asset Extraction #Container Security #cybersecurity #DevOps #Docker #secret scanning #security #Varunastra #vulnerability scanning
Penetration Testing Tools
Varunastra: Securing the Depths of Docker
Discover Varunastra, the powerful new tool for robust Docker security. Detect vulnerabilities, scan for secrets, and extract assets for enhanced protection.
19 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough — Secret Recipe
════════════════════════
𐀪 Author: Nicholas Abundis
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 23:39:59 GMT
════════════════════════
⌗ Tags: #secret_recipe #tryhackme_writeup #tryhackme #tryhackme_walkthrough #soc
Medium
TryHackMe Walkthrough — Secret Recipe
Perform Registry Forensics to Investigate a case.
25 views
Daily Writeups
⤷ Title: BFScan: Uncover Hidden URLs, Paths, & Secrets in JAR/WAR/APK Files
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 00:39:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #apk #application security #BFScan #cybersecurity #HTTP Request Generation #JAR #OpenAPI #Secret Detection #security tool #URL Discovery #WAR
Penetration Testing Tools
BFScan: Uncover Hidden URLs, Paths, & Secrets in JAR/WAR/APK Files
BFScan is a powerful tool to extract URLs, paths, and secrets from JAR, WAR, and APK files, generating raw HTTP requests and OpenAPI specs for security analysis.
25 views
Daily Writeups
⤷ Title: A Secret Store Is NOT A Substitute For Actually Protecting Your API Keys
════════════════════════
𐀪 Author: Andrew Zuo
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 21:58:44 GMT
════════════════════════
⌗ Tags: #api_key #secret_store #api_security #secret_management_tools #cybersecurity
Medium
A Secret Store Is NOT A Substitute For Actually Protecting Your API Keys
I was in Cloudflare the other day and I saw this:
21 views
Daily Writeups
⤷ Title: Leaking Secrets : Building an LLM-Powered Secret Scanner for Codebases
════════════════════════
𐀪 Author: Aishwarya Athreya
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 22:44:33 GMT
════════════════════════
⌗ Tags: #secret_scanner #application_security #security_tool #llm_security
Medium
Leaking Secrets : Building an LLM-Powered Secret Scanner for Codebases
Scan for secrets using regex+entropy with LLM
19 views
Daily Writeups
⤷ Title: Russian State Hackers Spy on Moscow Embassies via ISP-Level AiTM Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 02:53:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #adversary_in_the_middle #AiTM #ApolloShadow #Cyberespionage #Embassies #Moscow #russia #Secret Blizzard #SORM #turla
Daily CyberSecurity
Russian State Hackers Spy on Moscow Embassies via ISP-Level AiTM Attacks
Microsoft reveals Russian state actor Secret Blizzard is targeting foreign embassies in Moscow with ISP-level AiTM attacks, deploying ApolloShadow malware to spy on diplomats.
27 views
Daily Writeups
⤷ Title: Preventing and Fixing Secret Leaks in Git Repos — A CloudOps Guide
════════════════════════
𐀪 Author: CloudweldOps
════════════════════════
ⴵ Time: Mon, 11 Aug 2025 05:29:54 GMT
════════════════════════
⌗ Tags: #devops #cybersecurity #cloud_security #secret_management_tools #gitleaks
Medium
Preventing and Fixing Secret Leaks in Git Repos — A CloudOps Guide
In the age of cloud-native development, a single leaked API key can cost thousands — or worse, lead to a breach.
From AWS access keys to…
11 views