Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: ShellcodeGenZ: Shellcode Generator to execute commands with winExec API
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:31:14 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Shellcode Generator
Penetration Testing Tools
ShellcodeGenZ: Shellcode Generator to execute commands with winExec API
ShellcodeGenZ, the dopest shellcode generator for commands, crafted by Zeyad Azima. This tool's straight-up slayin' the game by whippin' up clean shellcode
15 views
Daily Writeups
⤷ Title: Digital Forensics Lab: Free hands-on digital forensics labs for students and faculty
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:14:27 +0000
════════════════════════
⌗ Tags: #Data Forensics
Penetration Testing Tools
Digital Forensics Lab: Free hands-on digital forensics labs for students and faculty
Hands-on Digital Forensics Labs: designed for Students and Faculty. Linux-based lab: All labs are purely based on Kali Linux
16 views
Daily Writeups
⤷ Title: CVE-2024-10442 (CVSS 10): Zero-Click RCE in Synology DiskStation, PoC Publishes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:55:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_10442 #DiskStation #DSM Security #Jack Dates #libsynobtrfsreplicacore #NAS Vulnerability #Pwn2Own #Remote Code Execution #RET2 Systems #Synology
Daily CyberSecurity
CVE-2024-10442 (CVSS 10): Zero-Click RCE in Synology DiskStation, PoC Publishes
CVE-2024-10442 allows unauthenticated RCE on Synology DS1823xs+ via Replication Service flaw. Patch now to avoid exploit risk.
10 views
Daily Writeups
⤷ Title: CVE-2025-29906: Finit’s Bundled Getty Flaw Allows Authentication Bypass on Linux Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:50:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #CVE_2025_29906 #Embedded Linux #Finit #Getty Vulnerability #Init System #Linux Security #security patch
Daily CyberSecurity
CVE-2025-29906: Finit’s Bundled Getty Flaw Allows Authentication Bypass on Linux Systems
Finit's internal getty flaw lets users bypass /bin/login and access Linux systems without authentication. Patch to version 4.11 or use external getty.
11 views
Daily Writeups
⤷ Title: APT28 Cyber Espionage Campaign Targets French Institutions Since 2021
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:40:50 +0000
════════════════════════
⌗ Tags: #Cyber Security #ANSSI #APT28 #cyber_espionage #Fancy Bear #France #Nation_State Attack #russia #threat actor
Daily CyberSecurity
APT28 Cyber Espionage Campaign Targets French Institutions Since 2021
ANSSI reveals sustained cyber espionage by APT28 (Fancy Bear) targeting French institutions since 2021. Learn about their tactics and targets.
13 views
Daily Writeups
⤷ Title: CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:35:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Infrastructure #CVE_2025_32444 #LLM Security #Mooncake Integration #Open Source Security #Python Pickle #Remote Code Execution #vLLM #ZeroMQ
Daily CyberSecurity
CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure
CVE-2025-32444 exposes vLLM’s Mooncake integration to RCE via insecure pickle deserialization over ZeroMQ. Patch to v0.8.5 now.
18 views
Daily Writeups
⤷ Title: CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:30:20 +0000
════════════════════════
⌗ Tags: #Malware #fake CAPTCHA #JavaScript malware #KongTuke #NodeJS Backdoor #RAT Malware #Remote Access Trojan #Trustwave SpiderLabs #TryCloudflare Abuse
Daily CyberSecurity
CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign
Trustwave uncovers a fake CAPTCHA campaign delivering NodeJS backdoors via PowerShell and TryCloudflare, with SOCKS5 tunneling and RAT capabilities.
16 views
Daily Writeups
⤷ Title: Gremlin Stealer Malware Targets Browsers, Crypto Wallets, and VPNs in Telegram-Based Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:23:09 +0000
════════════════════════
⌗ Tags: #Malware #C# malware #Chrome cookie bypass #Cryptocurrency Theft #Gremlin Stealer #Info_Stealer Malware #Telegram malware #Unit 42 #VPN credential theft
Daily CyberSecurity
Gremlin Stealer Malware Targets Browsers, Crypto Wallets, and VPNs in Telegram-Based Campaign
Researchers at Palo Alto Networks’ Unit 42 have unveiled a new, actively developed malware strain dubbed Gremlin Stealer, a powerful C#-based infostealer that has rapidly gained traction since its…
16 views
Daily Writeups
⤷ Title: Outlaw Botnet Exploits Weak SSH to Hijack Linux Systems for Crypto Mining
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:15:17 +0000
════════════════════════
⌗ Tags: #Malware #crypto mining #Cybersecurity Threats #IRC botnet #kaspersky #Linux Malware #Outlaw botnet #Perl malware #SSH vulnerability #ssh_hardening #XMRig
Daily CyberSecurity
Outlaw Botnet Exploits Weak SSH to Hijack Linux Systems for Crypto Mining
Outlaw botnet targets Linux servers via weak SSH, using Perl scripts and XMRig miners for crypto mining and backdoor access, Kaspersky warns.
19 views
Daily Writeups
⤷ Title: Sophisticated Attacks Employ Cobalt Strike, DLL Sideloading, and Evolving Tactics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:10:10 +0000
════════════════════════
⌗ Tags: #Malware #Cobalt Strike #cyberattack #cybersecurity #DLL Sideloading #infosec #malware #Minhook #Threat Actors
Daily CyberSecurity
Sophisticated Attacks Employ Cobalt Strike, DLL Sideloading, and Evolving Tactics
Sophos researchers detail a complex campaign using Cobalt Strike, DLL sideloading, and clever techniques like expired certificates
14 views
Daily Writeups
⤷ Title: Earth Kasha Refines Spear-Phishing Tactics in Espionage Campaign Targeting Taiwan and Japan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:03:42 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #ANEL #APT10 #cyber_espionage #DNS_over_HTTPS #Earth Kasha #Japan #NOOPDOOR #SharpHide #spear_phishing #Taiwan #Trend Micro
Daily CyberSecurity
Earth Kasha Refines Spear-Phishing Tactics in Espionage Campaign Targeting Taiwan and Japan
Earth Kasha targets Taiwan and Japan in a March 2025 spear-phishing campaign using ANEL and NOOPDOOR backdoors for stealthy cyber espionage.
12 views
Daily Writeups
⤷ Title: Important tool for Pentesters & Bug hunters
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:37:11 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #ethical_hacking #penetration_testing #cybersecurity
Medium
Important tool for Pentesters & Bug hunters
Find secrets, parameters, and endpoints, hidden things of the APK
16 views
Daily Writeups
⤷ Title: $1000 Bounty: XSS in Phabricator’s Editor
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:19:40 GMT
════════════════════════
⌗ Tags: #hacking #technology #bug_bounty #report #penetration_testing
Medium
$1000 Bounty: XSS in Phabricator Editor
How a Meme Tag Became a $1000 XSS Vector in Phabricator
28 views
Daily Writeups
⤷ Title: Introduction to Splunk: Collect, Search, and Detect
════════════════════════
𐀪 Author: Daniel J. L'Episcopo
════════════════════════
ⴵ Time: Thu, 01 May 2025 01:31:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #walkthrough #hacking #security_analysts #splunk
Medium
Introduction to Splunk: Collect, Search, and Detect
One major responsibility in cybersecurity is detecting when a threat actor attempts to compromise your system. But even more broadly, it’s…
9 views
Daily Writeups
⤷ Title: Hack The Box Academy — Network Foundations— Introduction to Networks
════════════════════════
𐀪 Author: bl77rd
════════════════════════
ⴵ Time: Thu, 01 May 2025 01:10:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #networking #hacking #information_security #hackthebox
Medium
Hack The Box Academy — Network Foundations— Introduction to Networks
Hello all!
9 views
Daily Writeups
⤷ Title: Understanding SQL Injection : A Simple Explanation
════════════════════════
𐀪 Author: Alpondith
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:36:09 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #sql_injection #hacking #penetration_testing
Medium
Understanding SQL Injection : A Simple Explanation
Learn How Malicious Code Can Hijack Your Database
9 views
Daily Writeups
⤷ Title: How To Stay Safe Online: Smarter Cybersecurity Habits Anyone Can Use
════════════════════════
𐀪 Author: Techscribe Central
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:19:32 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #habits #techscribe_central #online_security
Medium
How To Stay Safe Online: Smarter Cybersecurity Habits Anyone Can Use
Practical Security for the Digital Age — Without the Complexity
16 views
Daily Writeups
⤷ Title: Why Geopolitical Conflicts Now Begin With Cyberattacks
════════════════════════
𐀪 Author: Techscribe Central
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:19:27 GMT
════════════════════════
⌗ Tags: #techscribe_central #cybersecurity #technology #geopolitics #hacking
Medium
Why Geopolitical Conflicts Now Begin With Cyberattacks
How cyberattacks became the first strike in modern conflicts
12 views
Daily Writeups
⤷ Title: Hack The Box — Challenge — SpookyPass Walkthrough (EN)
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:02:41 GMT
════════════════════════
⌗ Tags: #hackthebox #hacking #cybersecurity #challenge #ctf_writeup
Medium
Hack The Box — Challenge — SpookyPass Walkthrough (EN)
Learn how to solve HTB’s “SpookyPass” challenge with simple explanations
15 views
Daily Writeups
⤷ Title: Brooklyn Nine Nine— TryHackme Walkthrough
════════════════════════
𐀪 Author: Alts
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:04:24 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #cybersecurity #tryhackme #infosec
Medium
Brooklyn Nine Nine— TryHackme Walkthrough
https://tryhackme.com/room/brooklynninenine
18 views
Daily Writeups
⤷ Title: ️‍♂️ Malware Analysis — OCSP Abuse & Registry Tampering in a .NET Sample
════════════════════════
𐀪 Author: Arsene
════════════════════════
ⴵ Time: Thu, 01 May 2025 01:46:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #malware #cyber_threat #malware_analysis #cyber_security_awareness
Medium
🕵️‍♂️ Malware Analysis — OCSP Abuse & Registry Tampering in a .NET Sample
Author: Arsene  Date: May 30,2025
20 views