Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Stored XSS Flaw in TP-Link WR841N Routers Could Expose Admin Credentials (CVE-2025-25427)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:46:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_25427 #router security #security advisory #TP_Link #WR841N #XSS
Daily CyberSecurity
Stored XSS Flaw in TP-Link WR841N Routers Could Expose Admin Credentials (CVE-2025-25427)
TP-Link WR841N routers are vulnerable to a stored XSS attack. Update firmware and change your password to protect your device from potential admin password theft.
18 views
Daily Writeups
⤷ Title: Two Critical RCE Flaws Expose Yi IOT Smart Cameras to Full Device Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:40:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_29659 #CVE_2025_29660 #IoT security #Path Traversal #rce #root access exploit #smart camera vulnerability #Yi IOT
Daily CyberSecurity
Two Critical RCE Flaws Expose Yi IOT Smart Cameras to Full Device Takeover
Two critical CVEs in Yi IOT smart cameras allow unauthenticated RCE and root access via ports 6789 and 999, exposing users to full device compromise.
21 views
Daily Writeups
⤷ Title: Unveiling a Multi-Stage Malware Attack: Cloudflare Abuse and AsyncRAT Delivery
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:35:41 +0000
════════════════════════
⌗ Tags: #Malware #AsyncRAT #cloudflare #cybersecurity #malware #Malware Analysis #phishing #rat #Remote Access Trojan
Daily CyberSecurity
Unveiling a Multi-Stage Malware Attack: Cloudflare Abuse and AsyncRAT Delivery
A deep dive into a sophisticated multi-stage malware attack using Cloudflare to deliver AsyncRAT. Learn how attackers evade detection and compromise systems.
15 views
Daily Writeups
⤷ Title: Zyxel Patches High-Severity Security Flaws in USG FLEX H Firewalls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:25:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_1731 #CVE_2025_1732 #firewall #patch #security advisory #Zyxel
Daily CyberSecurity
Zyxel Patches High-Severity Security Flaws in USG FLEX H Firewalls
Zyxel releases patches for USG FLEX H firewalls to address critical vulnerabilities. Learn about the security flaws and how to protect your network.
15 views
Daily Writeups
⤷ Title: Malicious Packages Stealing Crypto Credentials: A Warning for Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:19:26 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #cryptocurrency #cybersecurity #malware #npm #Open Source Security #PyPI #Software Supply Chain
Daily CyberSecurity
Malicious Packages Stealing Crypto Credentials: A Warning for Developers
Malicious open-source packages are stealing crypto wallet credentials! Learn about the threat and how to protect your seed phrases and private keys.
16 views
Daily Writeups
⤷ Title: Lumma Stealer: Unpacking Its Evasive Tactics and Complex Infection Chains
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:10:33 +0000
════════════════════════
⌗ Tags: #Malware #anti_analysis #cybersecurity #Data Theft #DLL Sideloading #fake CAPTCHA #information stealer #Lumma Stealer #malware #Malware Distribution
Daily CyberSecurity
Lumma Stealer: Unpacking Its Evasive Tactics and Complex Infection Chains
A deep dive into Lumma Stealer's sophisticated techniques: from fake CAPTCHAs to complex infection chains designed to evade detection and steal sensitive data.
19 views
Daily Writeups
⤷ Title: “ConfusedComposer”: GCP Composer Vulnerability Allows Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:06:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cloud Build #Cloud Composer #Cloud Security #GCP #privilege escalation #Tenable
Daily CyberSecurity
"ConfusedComposer": GCP Composer Vulnerability Allows Privilege Escalation
Tenable Research discovered "ConfusedComposer," a GCP Composer vulnerability enabling privilege escalation. Learn how attackers could exploit Cloud Build permissions.
18 views
Daily Writeups
⤷ Title: Deepfakes and Deception: The Rise of Synthetic Identities in Remote Work
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:05:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Deepfakes #Fraud #Hiring #HR #identity verification #Remote Work #security #Synthetic Identity
Daily CyberSecurity
Deepfakes and Deception: The Rise of Synthetic Identities in Remote Work
Explore the rising threat of deepfakes and synthetic identities in remote work. Learn how to detect and prevent these deceptions in hiring and protect your organization.
15 views
Daily Writeups
⤷ Title: A list of search engines for OSINT investigators and ethical hackers(PART 1)
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:42:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #osint #search_engines
Medium
A list of search engines for OSINT investigators and ethical hackers(PART 1)
One of the must-read articles
20 views
Daily Writeups
⤷ Title: CVE-2023-40723: Agent2Shellv2
════════════════════════
𐀪 Author: Lance Yeaw
════════════════════════
ⴵ Time: Tue, 22 Apr 2025 18:22:15 GMT
════════════════════════
⌗ Tags: #bug_bounty #security_research #security #fortinet #hacking
Medium
CVE-2023-40723: Agent2Shellv2
CVE ID: CVE-2023–40723
CWE: CWE-200
CVSSv3.1 Score: 7.7 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X)
Severity: High
Date Published…
18 views
Daily Writeups
⤷ Title: Hack The Box — Machine — LinkVortex Walkthrough (EN)
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 01:55:31 GMT
════════════════════════
⌗ Tags: #linux #hacking #hackthebox #cybersecurity #ctf_writeup
Medium
Hack The Box — Machine — LinkVortex Walkthrough (EN)
Learn how to gain access to HTB’s LinkVortex machine with simple explanations.
15 views
Daily Writeups
⤷ Title: Heap Encryption
════════════════════════
𐀪 Author: S12 - H4CK
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 01:01:54 GMT
════════════════════════
⌗ Tags: #hacking #programming #malware #cybersecurity #red_team
Medium
Heap Encryption
Welcome to all my favorite malware developers! Today, I’ll show you a basic yet effective technique: Heap Encryption. In this post, you’ll…
13 views
Daily Writeups
⤷ Title: The Digital Immune System: Why I Started Artefusion Technology LTD
════════════════════════
𐀪 Author: Artefusion Technology LTD
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:29:19 GMT
════════════════════════
⌗ Tags: #cyberattack #cybersecurity #cyber_security_awareness #hacking #cybercrime
Medium
The Digital Immune System: Why I Started Artefusion Technology LTD
In a world where threats evolve faster than defenses, cybersecurity shouldn’t be static. It should learn. It should adapt. It should…
21 views
Daily Writeups
⤷ Title: Ease Post Exploitation: Getting elevated reverse shell using DLL Hijacking and Mock Directories
════════════════════════
𐀪 Author: Cytomate
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 00:25:04 GMT
════════════════════════
⌗ Tags: #microsoft #hacking #windows #security #cybersecurity
Medium
Ease Post Exploitation: Getting elevated reverse shell using DLL Hijacking and Mock Directories
Author: Usman Sikander, Senior Offensive Security Researcher
17 views
Daily Writeups
⤷ Title: What Is Diffie-Hellman Key Exchange?
════════════════════════
𐀪 Author: Nandhini P
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 01:51:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #secrets #channel #keys #information_security
Medium
What Is Diffie-Hellman Key Exchange?
It’s a cryptographic algorithm used to securely share a secret key between two parties over a public/insecure channel (like the internet)…
18 views
Daily Writeups
⤷ Title: How I Passed eJPT and Used It to Kickstart My Cybersecurity Career
════════════════════════
𐀪 Author: CyberQuestor
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 01:47:06 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ejpt #thm #oscp
Medium
How I Passed eJPT and Used It to Kickstart My Cybersecurity Career
🛡️ My eJPT Journey: How I Passed and Why It Still Matters a Year Later
17 views
Daily Writeups
⤷ Title: Cracking the Code: Passwords, Hashing, Salts, and the Dark Power of Rainbow Tables
════════════════════════
𐀪 Author: Nandhini P
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 01:46:42 GMT
════════════════════════
⌗ Tags: #hash #passwords #salt #information_security #cybersecurity
Medium
Cracking the Code: Passwords, Hashing, Salts, and the Dark Power of Rainbow Tables
In the world of cybersecurity, passwords are the front doors to our digital lives — and unfortunately, hackers have gotten very good at…
14 views
Daily Writeups
⤷ Title: Server-side request forgery — PortSwigger
════════════════════════
𐀪 Author: J J
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 01:45:59 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
Server-side request forgery — PortSwigger
Salam dostlar, bu gün PortSwigger-də “Server-side request forgery” bölməsinin lab-larını həll edəcəyik.
12 views
Daily Writeups
⤷ Title: CCD-IS Navigating the Digital Frontier: The Evolving Landscape of Cybersecurity Politics and…
════════════════════════
𐀪 Author: CCD-IS
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 01:45:02 GMT
════════════════════════
⌗ Tags: #cyberpolitics #cyberdiplomacy #cybersecurity
Medium
CCD-IS Navigating the Digital Frontier: The Evolving Landscape of Cybersecurity Politics and…
Vladimir Tsakanyan
16 views
Daily Writeups
⤷ Title: Cyberattacked by a Scooter: A 2025 Horror Story for Small Businesses
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 01:37:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #lessons_learned #small_business #malware #cyber_security_awareness
Medium
Cyberattacked by a Scooter: A 2025 Horror Story for Small Businesses
In 2025, one small business found out the hard way that even scooters can become cyber threats.
16 views
Daily Writeups
⤷ Title: I Didn’t Just Block a Phishing Link — I Took Down the Whole Operation
════════════════════════
𐀪 Author: mikesploit
════════════════════════
ⴵ Time: Wed, 23 Apr 2025 01:17:44 GMT
════════════════════════
⌗ Tags: #phishing_awareness #red_teaming #cybersecurity
Medium
I Didn’t Just Block a Phishing Link — I Took Down the Whole Operation
It started with a guitar listing
21 views