Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: SessionProbe: assist in evaluating user privileges in web applications
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:40:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #Web AppSec #authorization #session token #sessionprobe
Penetration Testing Tools
SessionProbe: assist in evaluating user privileges in web applications
It takes a user's session token and checks for a list of URLs if access is possible, highlighting potential authorization issues.
24 views
Daily Writeups
⤷ Title: SharpADWS: Active Directory reconnaissance and exploitation for Red Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:30:06 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Active Directory #red teams #SharpADWS
Penetration Testing Tools
SharpADWS: Active Directory reconnaissance and exploitation for Red Teams
SharpADWS is an Active Directory reconnaissance and exploitation tool for Red Teams that collects and modifies Active Directory data
12 views
Daily Writeups
⤷ Title: freki: Malware analysis platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:24:52 +0000
════════════════════════
⌗ Tags: #Malware Defense #Malware analysis platform
Penetration Testing Tools
freki: Malware analysis platform
freki is a Malware analysis platform. It provides an easy-to-use REST API for different projects, Easy deployment (via Docker)
15 views
Daily Writeups
⤷ Title: PoC Released: Windows Explorer CVE-2025-24071 Vulnerability Exposes NTLM Hashes
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 02:00:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_24071 #CVE_2025_24071 PoC #EncryptHub Stealer #PoC #Windows File Explorer
Daily CyberSecurity
PoC Released: Windows Explorer CVE-2025-24071 Vulnerability Exposes NTLM Hashes
A proof-of-concept (PoC) for the CVE-2025-24071 vulnerability is available on GitHub, and a Metasploit module for this flaw is also available
14 views
Daily Writeups
⤷ Title: CVE-2025-23120 (CVSS 9.9): Critical RCE Vulnerability Discovered in Veeam Backup & Replication
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:58:18 +0000
════════════════════════
⌗ Tags: #Vulnerability #Backup & Replication #CVE_2025_23120 #Veeam #Veeam Backup & Replication
Daily CyberSecurity
CVE-2025-23120 (CVSS 9.9): Critical RCE Vulnerability Discovered in Veeam Backup & Replication
Learn about CVE-2025-23120, a critical vulnerability in Veeam Backup & Replication with severe implications for enterprises.
14 views
Daily Writeups
⤷ Title: ClearFake Malware Variant Exploits Web3 in New Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:55:30 +0000
════════════════════════
⌗ Tags: #Malware #Binance Smart Chain #ClearFake #ClearFake malware #ClickFix #Cloudflare Turnstile #Emmenhtal Loader #EtherHiding #Lumma Stealer #powershell #reCAPTCHA #Web3
Daily CyberSecurity
ClearFake Malware Variant Exploits Web3 in New Attacks
Uncover the latest variant of ClearFake malware, EtherHiding, exploiting Web3 features for advanced malicious tactics.
21 views
Daily Writeups
⤷ Title: CISA Warns of Three Actively Exploited Security Vulnerabilities in IoT, Backup, and Enterprise Systems
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:52:15 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2017_12637 #CVE_2024_48248 #CVE_2025_1316 #Edimax IP Camera #NAKIVO #SAP NetWeaver
Daily CyberSecurity
CISA Warns of Three Actively Exploited Security Vulnerabilities in IoT, Backup, and Enterprise Systems
Explore the details of CVE-2024-48248 in CISA's catalog of exploited vulnerabilities and protect your systems effectively.
10 views
Daily Writeups
⤷ Title: Microsoft Uncovers Sophisticated StilachiRAT Malware
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:47:28 +0000
════════════════════════
⌗ Tags: #Malware #google chrome #StilachiRAT #windows
Daily CyberSecurity
Microsoft Uncovers Sophisticated StilachiRAT Malware
Uncover the severe impact of StilachiRAT, a new remote access trojan targeting systems and cryptocurrency wallets.
6 views
Daily Writeups
⤷ Title: Multiple Vulnerabilities Patched in Dell SmartFabric OS10 Software
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:41:14 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_48013 #CVE_2024_48015 #CVE_2024_48017 #CVE_2024_48828 #CVE_2024_48830 #CVE_2024_49559 #CVE_2024_49561 #CVE_2025_22472 #CVE_2025_22473 #CVE_2025_22474 #dell #Dell SmartFabric #Dell SmartFabric OS10
Daily CyberSecurity
Multiple Vulnerabilities Patched in Dell SmartFabric OS10 Software
Learn about Dell SmartFabric OS10 vulnerabilities and the importance of the latest security update for version 10.5.6.x.
6 views
Daily Writeups
⤷ Title: JPHP Interpreter Used to Distribute Downloader Malware
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:36:10 +0000
════════════════════════
⌗ Tags: #Malware #DanaBot #JPHP Interpreter #STRRAT
Daily CyberSecurity
JPHP Interpreter Used to Distribute Downloader Malware
Uncover the risks associated with JPHP and how it exploits the JPHP interpreter for malicious activities.
10 views
Daily Writeups
⤷ Title: Steganographic Campaign Distributes Multiple Malware Variants, Including Remcos and AsyncRAT
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:27:53 +0000
════════════════════════
⌗ Tags: #Malware #Agent Tesla #AsyncRAT #DCRat #Remcos #Steganographic Campaign #VIPKeyLogger
Daily CyberSecurity
Steganographic Campaign Distributes Multiple Malware Variants, Including Remcos and AsyncRAT
Uncover the ongoing steganographic campaign that distributes malware like Remcos RAT. Learn how it operates.
12 views
Daily Writeups
⤷ Title: Web3 Laundering Fears: OKX Suspends Platform Amidst Scrutiny
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:24:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #North Korean hackers #OKX
Daily CyberSecurity
Web3 Laundering Fears: OKX Suspends Platform Amidst Scrutiny
OKX suspends operations amid allegations of facilitating money laundering for North Korean hackers. Read more about this situation.
14 views
Daily Writeups
⤷ Title: Google Chrome Patches Critical ‘Use-After-Free’ Vulnerability in Lens (CVE-2025-2476)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 00:29:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #chrome #CVE_2025_2476 #google
Daily CyberSecurity
Google Chrome Patches Critical 'Use-After-Free' Vulnerability in Lens (CVE-2025-2476)
Understand the security update for CVE-2025-2476 in Google Chrome, addressing a critical vulnerability in the Lens feature.
10 views
Daily Writeups
⤷ Title: How I Made $5000 in 1 Hour Finding 5 SQLi Vulnerabilities Manually
════════════════════════
𐀪 Author: Ibtissam Hammadi
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:04:10 GMT
════════════════════════
⌗ Tags: #cybersecurity #sql #web_security #bug_bounty #ethical_hacking
Medium
How I Made $5000 in 1 Hour Finding 5 SQLi Vulnerabilities Manually
What if I told you that finding SQLi vulnerabilities manually could earn you $5000 in just 1 hour? No tools, no scripts — just you and…
19 views
Daily Writeups
⤷ Title: Mobile Number Verification Bypass CWE-840 Business Logic Error
════════════════════════
𐀪 Author: ramzey elsayed mohamed
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 00:17:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #pentesting #bug_bounty_writeup #bug_bounty_tips
Medium
Mobile Number Verification Bypass CWE-840 Business Logic Error
Hello everyone,
Today, I will talk about a vulnerability I discovered in a private program . In summary, it is an Mobile Number…
19 views
Daily Writeups
⤷ Title: Mobile Phone Hacking: The Truth vs. Everything Else
════════════════════════
𐀪 Author: Tony Capo - Engineer
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 00:24:55 GMT
════════════════════════
⌗ Tags: #iphone #truth #android #hacking #mobile_phone
Medium
Mobile Phone Hacking: The Truth vs. Everything Else
Have you ever met someone who says they know how to hack a phone? I bet you have. Here is the real truth.
13 views
Daily Writeups
⤷ Title: How I Went from Forensic Medicine to Web3 Forensics
════════════════════════
𐀪 Author: God’sown
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:31:04 GMT
════════════════════════
⌗ Tags: #personal_growth #cybersecurity #blockchain #web3_forensics #forensic_science
Medium
How I Went from Forensic Medicine to Web3 Forensics
People say you don’t really know if something is for you until you’re deep in it. I learned that the hard way.
26 views
Daily Writeups
⤷ Title: GitHub Action Compromised, Leaking Sensitive Secrets
════════════════════════
𐀪 Author: SafetyDetectives Research Team
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:04:50 GMT
════════════════════════
⌗ Tags: #security_breach #cybersecurity #github
Medium
GitHub Action Compromised, Leaking Sensitive Secrets
Cybersecurity researchers have uncovered a major security breach affecting the tj-actions/changed-files GitHub Action, used in over 23,000…
11 views
Daily Writeups
⤷ Title: เมื่อ AI กลายเป็นอาวุธหลอกลวงในโลกดิจิทัล
════════════════════════
𐀪 Author: "วันละเรื่องสองเรื่อง" (Two Stories a Day)
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:02:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #scammer #scam
Medium
เมื่อ AI กลายเป็นอาวุธหลอกลวงในโลกดิจิทัล
ในยุคที่เทคโนโลยีปัญญาประดิษฐ์ (AI) พัฒนาไปอย่างก้าวกระโดด สิ่งที่ควรเป็นเครื่องมือสร้างสรรค์กลับถูกบิดเบือนไปเป็นอาวุธในมือของมิจฉาชีพ…
14 views
Daily Writeups
⤷ Title: Google’s In-Car Gaming Raises Cybersecurity Concerns
════════════════════════
𐀪 Author: SafetyDetectives Research Team
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 01:00:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #gaming #google
Medium
Google’s In-Car Gaming Raises Cybersecurity Concerns
Google’s latest Pixel Feature Drop adds in-car gaming via Android Auto, allowing passengers to play while the vehicle is parked. However…
7 views
Daily Writeups
⤷ Title: Serie: Server-side vulnerabilities [PortSwigger] [ES]
════════════════════════
𐀪 Author: h0lm3s
════════════════════════
ⴵ Time: Thu, 20 Mar 2025 00:02:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #portswigger #ethical_hacking #portswigger_lab
Medium
Serie: Server-side vulnerabilities [PortSwigger] [ES]
Esta nueva serie tratara principalmente de la ruta de aprendizaje de Server-side vulnerabilities de la paltaforma PortSwigger. En donde se…
7 views