Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Helicopter Administrators — 247CTF solution writeup
════════════════════════
𐀪 Author: Adithya M S
════════════════════════
ⴵ Time: Thu, 01 May 2025 15:21:07 GMT
════════════════════════
⌗ Tags: #web_security #cross_site_scripting #capture_the_flag #recon #sql_injection
Medium
Helicopter Administrators — 247CTF solution writeup
A detailed and insightful solution writeup on the challenge Helicopter Administrators on 247CTF
135 views
Daily Writeups
⤷ Title: TikTok Slammed With €530 Million GDPR Fine for Sending E.U. Data to China
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 02 May 2025 17:55:00 +0530
════════════════════════
⌗ Tags: No_Tags
97 views
Daily Writeups
⤷ Title: How to Automate CVE and Vulnerability Advisory Response with Tines
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 02 May 2025 16:00:00 +0530
════════════════════════
⌗ Tags: No_Tags
97 views
Daily Writeups
⤷ Title: MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 02 May 2025 14:27:00 +0530
════════════════════════
⌗ Tags: No_Tags
88 views
Daily Writeups
⤷ Title: Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 02 May 2025 12:10:00 +0530
════════════════════════
⌗ Tags: No_Tags
61 views
Daily Writeups
⤷ Title: Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 01 May 2025 21:17:00 +0530
════════════════════════
⌗ Tags: No_Tags
37 views
Daily Writeups
⤷ Title: 200+ Fake Retail Sites Used in New Wave of Subscription Scams
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 02 May 2025 10:01:57 +0000
════════════════════════
⌗ Tags: #Security #Scams and Fraud #bitdefender #Cyber Attack #Fraud #Scam #Social Engineering #Social Media #Subscription
Hackread
200+ Fake Retail Sites Used in New Wave of Subscription Scams
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
26 views
Daily Writeups
⤷ Title: npm Malware Targets Crypto Wallets, MongoDB; Code Points to Turkey
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 01 May 2025 22:00:30 +0000
════════════════════════
⌗ Tags: #Security #Malware #Crypto #Cyber Attack #Cybersecurity #MongoDB #NPM #Python #TURKEY #Wallets
Hackread
npm Malware Targets Crypto Wallets, MongoDB; Code Points to Turkey
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
21 views
Daily Writeups
⤷ Title: Scammers Use Spain-Portugal Blackout for TAP Air Refund Phishing Scam
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 01 May 2025 19:39:26 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Scams and Fraud #Cyber Attack #Cybersecurity #europe #Fraud #Phishing #Portugal #Scam #Spain #TAP Air
Hackread
Scammers Use Spain-Portugal Blackout for TAP Air Refund Phishing Scam
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
21 views
Daily Writeups
⤷ Title: sessionless: Burp Suite extension for editing, signing, verifying various signed web tokens
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 05:27:13 +0000
════════════════════════
⌗ Tags: #Web AppSec #Burp Suite extension #token
Penetration Testing Tools
sessionless: Burp Suite extension for editing, signing, verifying various signed web tokens
Sessionless is a Burp Suite extension for editing, signing, verifying, and attacking signed tokens: Django TimestampSigner
23 views
Daily Writeups
⤷ Title: SentryPeer: distributed list of bad IP addresses and phone numbers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 05:22:58 +0000
════════════════════════
⌗ Tags: #Data Forensics #HoneyPot #SIP Honeypot
Penetration Testing Tools
SentryPeer: distributed list of bad IP addresses and phone numbers
SentryPeer is a distributed list of bad IP addresses and phone numbers collected via a SIP Honeypot. This is basically a fraud detection tool
19 views
Daily Writeups
⤷ Title: Microsoft Authenticator to Drop Password Manager Features by August 2025
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 08:34:53 +0000
════════════════════════
⌗ Tags: #Technology #android #Autofill #ios #Microsoft Authenticator #microsoft edge #Passkeys #password manager #Password Sync
Daily CyberSecurity
Microsoft Authenticator to Drop Password Manager Features by August 2025
Microsoft is phasing out password saving and autofill in Authenticator. Saved passwords will sync to Edge starting June 2025. Plan your migration!
18 views
Daily Writeups
⤷ Title: Google Gemini Adds AI Image Editing with Natural Language Prompts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:47:01 +0000
════════════════════════
⌗ Tags: #Technology #AI Image Editing #artificial intelligence #Google Gemini #Image Manipulation #Natural Language #SynthID
Daily CyberSecurity
Google Gemini Adds AI Image Editing with Natural Language Prompts
Google's Gemini now lets you edit images using text prompts! Change backgrounds, add elements, and more. Includes SynthID watermarking.
13 views
Daily Writeups
⤷ Title: Apple Revises U.S. App Store Rules After Court Ruling in Epic Games Case
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:41:53 +0000
════════════════════════
⌗ Tags: #Technology #Antitrust #App Store #Apple #court ruling #Epic Games #Fortnite #Spotify #third_party payments #U.S. tech policy
Daily CyberSecurity
Apple Revises U.S. App Store Rules After Court Ruling in Epic Games Case
Apple updates U.S. App Store rules to allow external links and third-party payments after losing antitrust case brought by Epic Games.
24 views
Daily Writeups
⤷ Title: Redis Reintroduces Open-Source AGPL Alongside SSPL Licensing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:35:51 +0000
════════════════════════
⌗ Tags: #Technology #AGPL #Amazon AWS #cloud #database #Google Cloud #Licensing #open_source #Redis #SSPL
Daily CyberSecurity
Redis Reintroduces Open-Source AGPL Alongside SSPL Licensing
Redis adopts AGPLv3 alongside its SSPL license, returning to open source for Redis 8. Aims to boost community and address cloud provider concerns.
16 views
Daily Writeups
⤷ Title: Microsoft Pushes Passwordless: New Accounts Default to Passkeys & MFA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 07:28:43 +0000
════════════════════════
⌗ Tags: #Technology #Account Security #authentication #Login #MFA #Microsoft #Multi_Factor Authentication #Passkeys #Passwordless
Daily CyberSecurity
Microsoft Pushes Passwordless: New Accounts Default to Passkeys & MFA
Microsoft will soon default new accounts to passwordless login with passkeys & MFA. Existing users can still choose passwords. Learn more!
13 views
Daily Writeups
⤷ Title: Critical UAF Vulnerability Discovered in Ladybird Browser Engine (CVE-2025-47154)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:43:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #browser engine #CVE_2025_47154 #cybersecurity #Exploit #javascript #Ladybird #LibJS #use after free
Daily CyberSecurity
Critical UAF Vulnerability Discovered in Ladybird Browser Engine (CVE-2025-47154)
A critical use-after-free (UAF) vulnerability (CVE-2025-47154) in the Ladybird browser engine's LibJS component allows for potential code execution.
13 views
Daily Writeups
⤷ Title: CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:33:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #Couchbase #CVE_2025_46619 #Cybersecurity Advisory #database security #lfi #local file inclusion #nosql #windows
Daily CyberSecurity
CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows
Couchbase Server for Windows hit by LFI flaw CVE-2025-46619 (CVSS 8.7). Upgrade to 7.6.4 or 7.2.7 to prevent unauthorized file access.
17 views
Daily Writeups
⤷ Title: SonicWall Issues Patch for SSRF Vulnerability in SMA1000 Appliances
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:25:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_2170 #Cybersecurity Advisory #network_security #SMA1000 #SonicWall #ssrf #vulnerability patch
Daily CyberSecurity
SonicWall Issues Patch for SSRF Vulnerability in SMA1000 Appliances
SonicWall fixes CVE-2025-2170, an SSRF flaw in SMA1000 appliances. Users urged to update to platform-hotfix 12.4.3-02925 or later to stay secure.
45 views
Daily Writeups
⤷ Title: Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:20:40 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #gmail #malware #PyPI #Python #SMTP tunneling #Socket #supply chain attack
Daily CyberSecurity
Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels
Socket discovers Python packages abusing Gmail SMTP for covert C2 tunnels, evading firewalls and exfiltrating data through trusted email infrastructure.
17 views
Daily Writeups
⤷ Title: Intrinsec Links Eye Pyramid C2 to Ransomware Networks in New Infrastructure Mapping Report
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:14:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #bulletproof hosting #Cobalt Strike #Eye Pyramid #Intrinsec #RansomHub #Ransomware C2 #Rhysida #Vice Society
Daily CyberSecurity
Intrinsec Links Eye Pyramid C2 to Ransomware Networks in New Infrastructure Mapping Report
Intrinsec reveals shared infrastructure between Eye Pyramid C2 and ransomware groups like Rhysida and Vice Society in new threat intelligence report.
11 views