Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: NoArgs: dynamically spoof and conceal process arguments while staying undetected
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:15:16 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #NoArgs
Penetration Testing Tools
NoArgs: dynamically spoof and conceal process arguments while staying undetected
The PEB of the newly created process is accessed and modified to achieve the goal of manipulating or hiding the process arguments
29 views
Daily Writeups
⤷ Title: PMAT-labs: Labs for Practical Malware Analysis & Triage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:00:41 +0000
════════════════════════
⌗ Tags: #Arsenal Lab #Malware Defense #labs for Practical Malware Analysis
Penetration Testing Tools
PMAT-labs: Labs for Practical Malware Analysis & Triage
PMAT-labs repository contains live malware samples for use in the Practical Malware Analysis & Triage course (PMAT)
24 views
Daily Writeups
⤷ Title: Synapse Servers at Risk: Zero-Day DoS in the Wild
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 01:59:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_30355 #Matrix #Synapse
Cybersecurity News
Synapse Servers at Risk: Zero-Day DoS in the Wild
Learn about CVE-2025-30355, a critical vulnerability in Synapse that can disrupt communication in the Matrix network.
22 views
Daily Writeups
⤷ Title: CVE-2025-30232: Use-After-Free Vulnerability in Exim Exposes Systems to Privilege Escalation
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 01:50:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE 2025_30232 #Exim
Cybersecurity News
CVE-2025-30232: Use-After-Free Vulnerability in Exim Exposes Systems to Privilege Escalation
Understand the critical security issues related to CVE 2025-30232 in Exim and how it can affect Unix systems.
23 views
Daily Writeups
⤷ Title: CISA Flags Active Exploits in Sitecore CMS: CVE-2019-9874 and CVE-2019-9875, PoC Publishes
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 01:40:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2019_9874 #CVE_2019_9875 #KEV #Sitecore CMS and Experience Platform
Daily CyberSecurity
CISA Flags Active Exploits in Sitecore CMS: CVE-2019-9874 and CVE-2019-9875, PoC Publishes
CVE-2019-9874 & CVE-2019-9875 have become an active threat. Understand its vulnerabilities and protect your Sitecore installations from attacks
22 views
Daily Writeups
⤷ Title: Researcher Drops PoC for 9.8 CVSS Ingress-NGINX CVE-2025-1974 Flaw in Kubernetes
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 01:10:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_1097 #CVE_2025_1098 #CVE_2025_1974 #CVE_2025_24513 #CVE_2025_24514 #Ingress NGINX Controller #IngressNightmare #Kubernetes
Cybersecurity News
Researcher Drops PoC for 9.8 CVSS Ingress-NGINX CVE-2025-1974 Flaw in Kubernetes
Learn about CVE-2025-1974 PoC and its impact on Kubernetes deployments. Protect yourself from the IngressNightmare vulnerabilities.
22 views
Daily Writeups
⤷ Title: Triple Threat in Frappe Framework: SQL Injection, RCE, and Info Disclosure Fixed in Recent Patches
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 01:05:52 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_30212 #CVE_2025_30213 #CVE_2025_30214 #Frappe Framework #Info Disclosure #rce #sql injection
Daily CyberSecurity
Triple Threat in Frappe Framework: SQL Injection, RCE, and Info Disclosure Fixed in Recent Patches
Discover critical Frappe Framework vulnerability details, including SQL injection risks and necessary version updates for security.
19 views
Daily Writeups
⤷ Title: WordPress Plugin CVE-2025-2563 Scores 9.8, Threatens Thousands of Membership Sites
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:50:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_2563 #User Registration & Membership #wordpress
Daily CyberSecurity
WordPress Plugin CVE-2025-2563 Scores 9.8, Threatens Thousands of Membership Sites
Explore CVE-2025-2563, a critical vulnerability in the User Registration & Membership plugin that can allow unauthorized access.
20 views
Daily Writeups
⤷ Title: CryptoLib Vulnerability: Heap Overflow Threatens Space Communications
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:45:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #CryptoLib #CVE_2025_30216
Daily CyberSecurity
CryptoLib Vulnerability: Heap Overflow Threatens Space Communications
Learn about CVE-2025-30216, a critical vulnerability in CryptoLib that poses risks to spacecraft communication security.
14 views
Daily Writeups
⤷ Title: ReaderUpdate Malware Evolves: macOS Loader Resurfaces with Go-Based Variants
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:40:38 +0000
════════════════════════
⌗ Tags: #Malware #Crystal #DOLITTLE adware #Genieo #Nim #ReaderUpdate #Rust
Daily CyberSecurity
ReaderUpdate Malware Evolves: macOS Loader Resurfaces with Go-Based Variants
Uncover the lurking threat of ReaderUpdate. Learn about its persistence and the cyber risks it poses to macOS users.
13 views
Daily Writeups
⤷ Title: BlackLock Ransomware Disrupted: Resecurity’s Infiltration Exposes Operations
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:35:23 +0000
════════════════════════
⌗ Tags: #Malware #BlackLock Ransomware #El Dorado #Eldorado
Cybersecurity News
BlackLock Ransomware Disrupted: Resecurity's Infiltration Exposes Operations
Uncover the rise of BlackLock Ransomware and how researchers disrupted its operations during the 2024 holiday season.
12 views
Daily Writeups
⤷ Title: Mass Reboots and Exploit Attempts Plague DrayTek Routers Across the Globe
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:25:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2020_8515 #CVE_2021_20123 #CVE_2021_20124 #DrayTek routers
Cybersecurity News
Mass Reboots and Exploit Attempts Plague DrayTek Routers Across the Globe
GreyNoise has observed in-the-wild activity against the following CVEs: CVE-2020-8515, CVE-2021-20123, and CVE-2021-20124
18 views
Daily Writeups
⤷ Title: CVE-2024-55963: Appsmith’s Default PostgreSQL Misconfiguration Leads to RCE, PoC Releases
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:20:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #Appsmith #CVE_2024_55963 #CVE_2024_55964 #CVE_2024_55965 #PostgreSQL
Daily CyberSecurity
CVE-2024-55963: Appsmith's Default PostgreSQL Misconfiguration Leads to RCE, PoC Releases
Learn about CVE-2024-55963, a critical vulnerability in Appsmith that allows remote code execution due to PostgreSQL misconfiguration.
17 views
Daily Writeups
⤷ Title: LockBit 4.0: A Deep Dive into the Evolving Ransomware
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:15:58 +0000
════════════════════════
⌗ Tags: #Malware #LockBit #LockBit 3.0 #LockBit 4.0 #Vectored Exception Handler
Daily CyberSecurity
LockBit 4.0: A Deep Dive into the Evolving Ransomware
Explore the features and threats of LockBit 4.0, the latest evolution in ransomware that impacts organizations globally.
20 views
Daily Writeups
⤷ Title: Raspberry Robin: From Copy Shop Worm to Russian GRU Cyber Tool
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:10:48 +0000
════════════════════════
⌗ Tags: #Cyber Security #Dridex #LockBit #Raspberry Robin #Roshtyak #Russian GRU Cyber Tool #SocGholish #Storm_0856
Daily CyberSecurity
Raspberry Robin: From Copy Shop Worm to Russian GRU Cyber Tool
Explore the evolution of Copy Shop Worm into a sophisticated threat linked to cybercriminals and state-sponsored actors.
15 views
Daily Writeups
⤷ Title: How AI is Changing the Bug Bounty Landscape (And Why Hackers Aren’t Mad About It)
════════════════════════
𐀪 Author: Ahmad Javed
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:57:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #ai #ethical_hacking #penetration_testing
Medium
How AI is Changing the Bug Bounty Landscape (And Why Hackers Aren’t Mad About It)
Why Hackers Are Adopting ChatGPT as Their Secret Weapon in the Cyber Gold Rush
17 views
Daily Writeups
⤷ Title: Information Disclosure leads To Unauthorized Access (easy github dork)
════════════════════════
𐀪 Author: O iluminado_x86
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:40:37 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_disclosure #hacking #penetration_testing
Medium
Information Disclosure leads To Unauthorized Access (easy github dork)
بسم الله والصلاة والسلام على رسول الله ﷺ❤️، اللهم علِّمنا ما ينفعنا، وانفعنا بما علَّمتنا، وزِدنا علمًا نافعًا
31 views
Daily Writeups
⤷ Title: From 0 to 100K: How Gamification is Turning Bug Hunting into a Crypto-Style Grind
════════════════════════
𐀪 Author: Ahmad Javed
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:26:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #penetration_testing #pentesting #bug_bounty
Medium
From 0 to 100K: How Gamification is Turning Bug Hunting into a Crypto-Style Grind
Leaderboards, NFT Rewards, and the Gamified Gold Rush Making Hackers Obsessed (and Rich)
25 views
Daily Writeups
⤷ Title: How I Made $1,000 in a Day Exposing a Critical Vulnerability
════════════════════════
𐀪 Author: Ibtissam Hammadi
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 00:20:38 GMT
════════════════════════
⌗ Tags: #passive_income #ethical_hacking #makemoney_online #bug_bounty #cybersecurity
Medium
How I Made $1,000 in a Day Exposing a Critical Vulnerability
From Zero to $1,000 in 24 Hours — A Real-Life Bug Bounty Success Story
23 views
Daily Writeups
⤷ Title: Build a Malware RAT (Remote Access Tool) with Cursor AI
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 01:38:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #malware #hacking #cyber #red_team
Medium
Build a Malware RAT (Remote Access Tool) with Cursor AI
In the world of software development, creating applications that can communicate over a network is a vital skill. But what if you could…
20 views
Daily Writeups
⤷ Title: Inside a Ransomware Gang’s Slack Channel: “We’re Not Hackers — We’re a Startup”
════════════════════════
𐀪 Author: Ahmad Javed
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 01:28:23 GMT
════════════════════════
⌗ Tags: #hacking #tech #ransomware #cybersecurity #cybercrime
Medium
Inside a Ransomware Gang’s Slack Channel: “We’re Not Hackers — We’re a Startup”
Leaked chats, internal drama, and why ransomware gangs act more like tech bros than movie villains.
21 views