Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: StealC V2: ThreatLabz Unveils the Evolution of a Stealthy Info-Stealer and Malware Loader
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:35:49 +0000
════════════════════════
⌗ Tags: #Malware #Amadey #C2 Protocol #Credential Theft #Malware Analysis #MSI Loader #PowerShell Malware #RC4 Encryption #ThreatLabz
Daily CyberSecurity
StealC V2: ThreatLabz Unveils the Evolution of a Stealthy Info-Stealer and Malware Loader
ThreatLabz reveals StealC V2—an evolving info-stealer with encrypted C2, MSI and PowerShell payloads, and a rule-driven control panel for targeted attacks.
15 views
Daily Writeups
⤷ Title: SonicWall Exploit Chain Exposes Admin Hijack Risk via CVE-2023-44221 and CVE-2024-38475
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:28:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache mod_rewrite #Authentication Bypass #CISA KEV #Command Injection #CVE_2023_44221 #CVE_2024_38475 #SMA Exploit #SonicWall
Daily CyberSecurity
SonicWall Exploit Chain Exposes Admin Hijack Risk via CVE-2023-44221 and CVE-2024-38475
CVE-2024-38475 and CVE-2023-44221 form an exploit chain targeting SonicWall SMA appliances, enabling remote admin hijack and code execution.
18 views
Daily Writeups
⤷ Title: APT36 Targets India with Pahalgam Attack-Themed Phishing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:27:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #cyber_espionage #Indian government #Pahalgam Attack #phishing #Seqrite Labs #Transparent Tribe
Daily CyberSecurity
APT36 Targets India with Pahalgam Attack-Themed Phishing
Seqrite Labs uncovers APT36 phishing campaign using Pahalgam terror attack-themed lures to deploy Crimson RAT against Indian government targets.
30 views
Daily Writeups
⤷ Title: Golden Chickens Unveils TerraStealerV2 and TerraLogger Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:18:13 +0000
════════════════════════
⌗ Tags: #Malware
Daily CyberSecurity
Golden Chickens Unveils TerraStealerV2 and TerraLogger Malware
Recorded Future uncovers TerraStealerV2 and TerraLogger—two new malware families from Golden Chickens, aimed at stealing credentials and logging keystrokes.
13 views
Daily Writeups
⤷ Title: CVE-2025-31191: Microsoft Exposes macOS Vulnerability Allowing App Sandbox Escape
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:13:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Keychain Exploit #macOS vulnerability #Microsoft Threat Intelligence #Sandbox Escape #Security_Scoped Bookmarks
Daily CyberSecurity
CVE-2025-31191: Microsoft Exposes macOS Vulnerability Allowing App Sandbox Escape
Microsoft uncovers CVE-2025-31191, a macOS sandbox escape exploiting security-scoped bookmarks. Apple patched it in March 2025.
13 views
Daily Writeups
⤷ Title: SocGholish Reloaded: Darktrace Uncovers Ransomware-Primed Loader Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:10:31 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #Darktrace #JavaScript malware #Keitaro TDS #malware loader #NTLM Hashing #ransomware #SCF Exploits #WebDAV
Daily CyberSecurity
SocGholish Reloaded: Darktrace Uncovers Ransomware-Primed Loader Campaign
Darktrace uncovers a SocGholish campaign using obfuscated loaders and legacy Windows exploits to harvest NTLM hashes and deliver ransomware payloads.
12 views
Daily Writeups
⤷ Title: Iranian APT Group Breaches Middle Eastern Critical Infrastructure in Stealth Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:03:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #cyber_espionage #FortiGuard #HanifNet #HXLibrary #Iranian APT #Lemon Sandstorm #NeoExpressRAT
Daily CyberSecurity
Iranian APT Group Breaches Middle Eastern Critical Infrastructure in Stealth Campaign
FortiGuard reveals an Iranian APT's multi-stage intrusion into Middle Eastern critical infrastructure using custom malware and stealthy persistence.
19 views
Daily Writeups
⤷ Title: SIGINT(Signals Intelligence)Tools
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:42:24 GMT
════════════════════════
⌗ Tags: #osint #cybersecurity #hacking #programming #sigint
Medium
SIGINT(Signals Intelligence)Tools
A collection of tools to help SIGINT investigations
17 views
Daily Writeups
⤷ Title: Initial Methodology for Hack The Box Machines
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:36:10 GMT
════════════════════════
⌗ Tags: #hackthebox #cybersecurity #ctf_writeup #ctf #hacking
Medium
Initial Methodology for Hack The Box Machines
Automate and organize your first steps in Hack The Box: from connecting to the VPN to setting up the interactive shell.
16 views
Daily Writeups
⤷ Title: Securing National Infrastructure: The Silent War for Cyber Sovereignty
════════════════════════
𐀪 Author: Saleh A AbuRumman
════════════════════════
ⴵ Time: Mon, 05 May 2025 01:45:38 GMT
════════════════════════
⌗ Tags: #cyber_defense #critical_infrastructure #national_infrastructure #cybersecurity #infrastructure_security
Medium
The Hidden Threat in Our Connected World
The Hidden Threat in Our Connected World
16 views
Daily Writeups
⤷ Title: SolarWinds Unshaded: A Deep Dive into the 2020 Supply Chain Breach — Cyber Threat
════════════════════════
𐀪 Author: Jadala Ajay
════════════════════════
ⴵ Time: Mon, 05 May 2025 01:39:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #cyber_intelligence #cyber_threat_intelligence #solarwinds
Medium
SolarWinds Unshaded: A Deep Dive into the 2020 Supply Chain Breach — Cyber Threat Intelligence
By analyzing the attack lifecycle, detection challenges, and defensive takeaways, this case study aims to offer a practical and technical
15 views
Daily Writeups
⤷ Title: Mastering Modern Red Teaming Infrastructure — Part 8: Simulating APT Infostealer via Stealthy…
════════════════════════
𐀪 Author: Faris Faisal 0xFF
════════════════════════
ⴵ Time: Mon, 05 May 2025 01:25:34 GMT
════════════════════════
⌗ Tags: #cybercrime #redteam_tool #cyberattack #cyber #cybersecurity
Medium
Mastering Modern Red Teaming Infrastructure — Part 8: Simulating APT Infostealer via Stealthy Browser Extension for Cookie Exfiltration…
In this part of the “Mastering Modern Red Teaming Infrastructure” series, we explore the design and deployment of a stealthy Chrome…
21 views
Daily Writeups
⤷ Title: Securing a Small Business Network with Switch and Router Configurations
════════════════════════
𐀪 Author: Cell
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:47:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #network_security #networking #cisco #ccna
Medium
Securing a Small Business Network with Switch and Router Configurations
Introduction
14 views
Daily Writeups
⤷ Title: Writing a Detection Broke My Brain (And Made Me Respect Security Engineers Forever)
════════════════════════
𐀪 Author: Emmanuel Joshua
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:44:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #security_engineering #detection_engineering #incident_response #lessons_learned
Medium
Writing a Detection Broke My Brain (And Made Me Respect Security Engineers Forever)
So here’s the story.
13 views
Daily Writeups
⤷ Title: My PortSwigger Journey: Exploring SQL Vulnerabilities Using Burp Suite (Pt 6)
════════════════════════
𐀪 Author: Emmanuel Chibuzor Kingsley
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:39:17 GMT
════════════════════════
⌗ Tags: #sql_injection #web_app_security #pentesting #cybersecurity #portswigger
Medium
My PortSwigger Journey: Exploring SQL Vulnerabilities Using Burp Suite (Pt 6)
Exploiting blind SQL injection by triggering time delays
22 views
Daily Writeups
⤷ Title: Email Spoofing Can Destroy Your Business!!
════════════════════════
𐀪 Author: Md. Ashiquer Rahman Fahad
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:16:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #email_security
Medium
Email Spoofing Can Destroy Your Business!!
Understanding Email Spoofing: A Silent Threat to Organizations
33 views
Daily Writeups
⤷ Title: Security in the Grey: A Study of Risk, Reward, and Human Nature
════════════════════════
𐀪 Author: Tuan Kamiss
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:14:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #risk_management #security_awareness #tech_leadership #cyber_resilience
Medium
Security in the Grey: A Study of Risk, Reward, and Human Nature
“At its most basic level, security is a feeling — a perception born from a deep understanding of risk and reward.”
32 views
Daily Writeups
⤷ Title: Utilize Your Rewards with X $TY
════════════════════════
𐀪 Author: TY
════════════════════════
ⴵ Time: Mon, 05 May 2025 00:57:27 GMT
════════════════════════
⌗ Tags: #crypto #ethereum #web3 #ties #xs
Medium
Utilize Your Rewards with X $TY
A Beginner's Guide to Earning More with X $TY
36 views
Daily Writeups
⤷ Title: Google to Offer Gemini AI to Kids Under 13 with Parental Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 02:37:52 +0000
════════════════════════
⌗ Tags: #Technology
Daily CyberSecurity
Google to Offer Gemini AI to Kids Under 13 with Parental Controls
Google plans to give kids under 13 access to Gemini AI via Family Link. Parents will manage use, with warnings about accuracy and privacy.
33 views
Daily Writeups
⤷ Title: NCSC Warns of Pervasive Ransomware Threat: Act Now
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 May 2025 02:29:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #account monitoring #Cyber Security #helpdesk security #MFA #NCSC #ransomware #threat intelligence #UK
Daily CyberSecurity
NCSC Warns of Pervasive Ransomware Threat: Act Now
The UK's NCSC warns of a pervasive ransomware threat targeting all organizations. Learn key recommendations to enhance your cyber security and resilience.
27 views
Daily Writeups
⤷ Title: Stop Wasting Time: Build a CTI Collection Plan That Actually Works!
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Mon, 05 May 2025 02:40:44 GMT
════════════════════════
⌗ Tags: #hacking #cyber_threat_intelligence #bug_bounty #cybersecurity #threat_hunting
Medium
Stop Wasting Time: Build a CTI Collection Plan That Actually Works!
If you’re new to cybersecurity or working as a junior analyst, building a Cyber Threat Intelligence (CTI) Collection Plan might sound…
22 views