Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: From a Commoner to a Cyber Pro — Join Me on My Journey
════════════════════════
𐀪 Author: RCErtina
════════════════════════
ⴵ Time: Tue, 15 Apr 2025 22:33:31 GMT
════════════════════════
⌗ Tags: #tryhackme #career_journey #computer_science #cybersecurity #soc
Medium
From a Commoner to a Cyber Pro — Join Me on My Journey
I don’t really know where to start.
 It’s kind of late, and I’m currently on shift at work (SOC analyst). Things are quiet for now, so I…
28 views
Daily Writeups
⤷ Title: Bridging RMF, DevOps, and Cloud Security: What It Really Takes to Secure Government Systems
════════════════════════
𐀪 Author: Erika Anderson
════════════════════════
ⴵ Time: Tue, 15 Apr 2025 22:23:15 GMT
════════════════════════
⌗ Tags: #nist #devsecops #grc #rmf #cybersecurity
Medium
Bridging RMF, DevOps, and Cloud Security: What It Really Takes to Secure Government Systems
When people hear “government cybersecurity,” they often picture outdated systems and paperwork-heavy processes. But the reality is that…
24 views
Daily Writeups
⤷ Title: Malicious PyPI Package Targeting MEXC: A Deep Dive into the Attack
════════════════════════
𐀪 Author: Ismail Tasdelen
════════════════════════
ⴵ Time: Tue, 15 Apr 2025 22:20:26 GMT
════════════════════════
⌗ Tags: #cryptocurrency #crypto #cybersecurity #python #cryptocurrency_news
Medium
Malicious PyPI Package Targeting MEXC: A Deep Dive into the Attack
On April 15, 2025, cybersecurity researchers uncovered a malicious Python Package Index (PyPI) package named ccxt-mexc-futures, designed to…
👍1
30 views
Daily Writeups
⤷ Title: Best Crypto Tax Software in 2025: A Comprehensive Guide
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Tue, 15 Apr 2025 20:00:00 +0000
════════════════════════
⌗ Tags: #Cryptocurrency
Hackread - Latest Cybersecurity, Hacking News, Tech, AI & Crypto
Best Crypto Tax Software in 2025: A Comprehensive Guide
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
24 views
Daily Writeups
⤷ Title: threagile: Agile Threat Modeling Toolkit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:38:22 +0000
════════════════════════
⌗ Tags: #Forensics #threagile
Penetration Testing Tools
threagile: Agile Threat Modeling Toolkit
threagile allows to model architecture with its assets in an agile fashion as a YAML file directly inside the IDE
22 views
Daily Writeups
⤷ Title: blutter: Flutter Mobile Application Reverse Engineering Tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:30:45 +0000
════════════════════════
⌗ Tags: #Reverse Engineering #blutter #Flutter Mobile Application Reverse Engineering
Penetration Testing Tools
blutter: Flutter Mobile Application Reverse Engineering Tool
Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime. Currently, the application supports only Android libapp.so.
15 views
Daily Writeups
⤷ Title: Supernova: shellcode encryption tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:13:17 +0000
════════════════════════
⌗ Tags: #Ethical Hacking
Penetration Testing Tools
Supernova: shellcode encryption tool
it offers automatic conversion of the encrypted shellcode into formats compatible with various programming language
12 views
Daily Writeups
⤷ Title: Top Cybersecurity Tools for 2025
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 01:00:17 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity #forensics #Hacking #Open Source Security #penetration testing #pentest tools #security #tools #vulnerability scanning
Daily CyberSecurity
Top Cybersecurity Tools for 2025
A curated list of the top cybersecurity tools for 2025, covering reconnaissance, wireless hacking, password cracking, forensics, and more.
16 views
Daily Writeups
⤷ Title: Critical Chrome Security Update: Patch CVE-2025-3619 & CVE-2025-3620 Now!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:49:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #browser #browser security #chrome #CVE #CVE_2025_3619 #CVE_2025_3620 #cybersecurity #google #Google Chrome Update #Heap Buffer Overflow #patch #security update #use after free
Daily CyberSecurity
Critical Chrome Security Update: Patch CVE-2025-3619 & CVE-2025-3620 Now!
Google Chrome 135 fixes critical CVE-2025-3619 and high CVE-2025-3620 flaws. Users urged to update now to avoid potential code execution threats.
11 views
Daily Writeups
⤷ Title: Critical CVE-2025-32445 Vulnerability in Argo Events Scores CVSS 10
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:46:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #Argo Events #CVE_2025_32445 #Kubernetes #Privileged Access #security vulnerability
Daily CyberSecurity
Critical CVE-2025-32445 Vulnerability in Argo Events Scores CVSS 10
A critical vulnerability (CVE-2025-32445) in Argo Events allows users to gain privileged access to Kubernetes clusters. Upgrade to v1.9.6 to patch.
9 views
Daily Writeups
⤷ Title: Waiting Thread Hijacking: A Stealthier Code Injection Technique
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:43:48 +0000
════════════════════════
⌗ Tags: #Malware #Open Source Tool #cybersecurity #EDR evasion #malware #Process injection #Thread Hijacking
Daily CyberSecurity
Waiting Thread Hijacking: A Stealthier Code Injection Technique
Discover Waiting Thread Hijacking, a novel process injection technique that bypasses EDR systems. Learn how it stealthily executes code in remote processes.
9 views
Daily Writeups
⤷ Title: MITRE Warns of CVE Program Disruption as U.S. Contract Set to Expire
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:42:56 +0000
════════════════════════
⌗ Tags: #Technology #Vulnerability #CISA #CVE #cyber infrastructure #cybersecurity funding #DHS #federal contract #MITRE #vulnerability management
Daily CyberSecurity
MITRE Warns of CVE Program Disruption as U.S. Contract Set to Expire
MITRE warns the CVE program may halt after April 16 as U.S. funding expires, threatening global cybersecurity and vulnerability tracking.
10 views
Daily Writeups
⤷ Title: Windows 11 Privilege Escalation Flaws Uncovered: CVE-2025-24076 and CVE-2025-24994
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:34:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #COM Server #Compass Security #CVE_2025_24076 #CVE_2025_24994 #cybersecurity #DLL hijacking #Microsoft #Microsoft Patch Tuesday #Mobile devices #privilege escalation #security advisory #Windows 11
Daily CyberSecurity
Windows 11 Privilege Escalation Flaws Uncovered: CVE-2025-24076 and CVE-2025-24994
Discover how Windows 11 vulnerabilities CVE-2025-24076 and CVE-2025-24994 allow unprivileged users to gain system privileges via DLL hijacking.
12 views
Daily Writeups
⤷ Title: UNC5174: Chinese Threat Actor Deploys New VShell RAT in Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:33:57 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Chinese Threat Actor #cybersecurity #malware #threat actor #UNC5174 #VShell
Daily CyberSecurity
UNC5174: Chinese Threat Actor Deploys New VShell RAT in Campaign
A new campaign by Chinese threat actor UNC5174 uses the VShell RAT. Sysdig TRT reports on the group's shift to open-source tools and evasion tactics.
15 views
Daily Writeups
⤷ Title: PasivRobber: In-Depth Analysis of Sophisticated macOS Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:26:29 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Data Theft #Kandji #macOS #malware #PasivRobber
Daily CyberSecurity
PasivRobber: In-Depth Analysis of Sophisticated macOS Malware
Kandji's research uncovers PasivRobber, a sophisticated macOS malware suite targeting user data. Learn about its deceptive tactics and capabilities.
13 views
Daily Writeups
⤷ Title: Malicious npm Package Installs Reverse Shell via Payment Success
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:26:19 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Malicious Package #npm #reverse shell #supply chain attack
Daily CyberSecurity
Malicious npm Package Installs Reverse Shell via Payment Success
A malicious npm package, disguised as an Advcash integration, contains a reverse shell that triggers after successful payments, granting attackers server access.
10 views
Daily Writeups
⤷ Title: Beware Fake PDF Converters: A Social Engineering Threat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:22:33 +0000
════════════════════════
⌗ Tags: #Malware #CloudSEK #cybersecurity #information stealer #malware #PDF Converter #social engineering
Daily CyberSecurity
Beware Fake PDF Converters: A Social Engineering Threat
CloudSEK's report reveals how fake PDF converters use social engineering to spread malware. Learn how these malicious sites deceive users and steal data
11 views
Daily Writeups
⤷ Title: Critical RCE Vulnerability Affects HylaFAX and AvantFAX
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:16:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #AvantFAX #CVE_2025_1782 #HylaFAX #iFAX #Remote Code Execution #security advisory
Daily CyberSecurity
Critical RCE Vulnerability Affects HylaFAX and AvantFAX
iFAX Solutions discloses a critical remote code execution vulnerability (CVE-2025-1782) affecting HylaFAX and AvantFAX due to improper sanitization
20 views
Daily Writeups
⤷ Title: BPFDoor Backdoor Used in Asia, Middle East Cyberespionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:12:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #APT #backdoor #BPF #BPFDoor #Cyberespionage #Earth Bluecrow #malware #network_security #Red Menshen
Daily CyberSecurity
BPFDoor Backdoor Used in Asia, Middle East Cyberespionage
Trend Micro uncovers BPFDoor backdoor used in cyberespionage across Asia and the Middle East, attributing it to the Red Menshen APT group
15 views
Daily Writeups
⤷ Title: BRICKSTORM Backdoor Targets European Industries
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:09:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #backdoor #BRICKSTORM #china #cyber_espionage #cybersecurity #File Manager #malware #Network Tunneling #UNC5221
Daily CyberSecurity
BRICKSTORM Backdoor Targets European Industries
NVISO's report details BRICKSTORM, a China-linked backdoor targeting European industries, using sophisticated techniques to evade detection
10 views
Daily Writeups
⤷ Title: “Analyzing Browser Artifacts During an Incident” : Cache, history, and login data in Chrome, Edge…
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 00:51:05 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #incident_response #information_technology
Medium
“Analyzing Browser Artifacts During an Incident” : Cache, history, and login data in Chrome, Edge, Firefox
🔍 Scenario
19 views