Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Here we go , 2 bugs in the same program
════════════════════════
𐀪 Author: Youssef Hany
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:52:37 GMT
════════════════════════
⌗ Tags: #writeup #broken_access_control #bug_bounty #ssti #security
Medium
Here we go 🚨, 2 bugs in the same program
“بِسْمِ اللَّهِ، وَالْحَمْدُ لِلَّهِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى رَسُولِ اللَّهِ، اللَّهُمَّ عَلِّمْنَا مَا يَنْفَعُنَا، وَانْفَعْنَا…
12 views
Daily Writeups
⤷ Title: Secrets HACKERS Don’t Want You to Know About OSINT!
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Mon, 05 May 2025 23:03:54 GMT
════════════════════════
⌗ Tags: #osint #hacking #security #osint_investigation #cybersecurity
Medium
Secrets HACKERS Don’t Want You to Know About OSINT!
Imagine having the ability to uncover hidden truths, track down critical information or even protect your organization — all using data…
26 views
Daily Writeups
⤷ Title: Building the Digital Fortress: The Next Chapter in my Story [WHO AM I — PART2]
════════════════════════
𐀪 Author: Taher Amine, mMBA, CISSP-SME, CCISO, CMSA, ISOxx
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:26:27 GMT
════════════════════════
⌗ Tags: #cybersecurity #taher_amine_elhouari #infosec
Medium
Building the Digital Fortress: The Next Chapter in my Story [WHO AM I — PART2]
“How I’m Scaling My Impact While Staying Rooted in Purpose”
17 views
Daily Writeups
⤷ Title: Digital White Blood Cells: Building an Immune System for the Internet
════════════════════════
𐀪 Author: Aaron Rose
════════════════════════
ⴵ Time: Mon, 05 May 2025 23:25:01 GMT
════════════════════════
⌗ Tags: #internet #network_security #ddos #cybersecurity #infrastructure
Medium
Digital White Blood Cells: Building an Immune System for the Internet
How digital networks could evolve from passive routing to active defense — and finally outgrow the malware
9 views
Daily Writeups
⤷ Title: Top 5 Cybersecurity Threats to Watch in 2025 — and How to Get Ready
════════════════════════
𐀪 Author: Michael Siopa
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:56:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #cyber_threat #cybersecurity_awareness #cyberattack
Medium
Top 5 Cybersecurity Threats to Watch in 2025 — and How to Get Ready
As digital transformation accelerates and cybercriminals grow more advanced, 2025 is shaping up to be a defining year in the cybersecurity…
14 views
Daily Writeups
⤷ Title: The Unexpected Upside: Unleashing Creativity and Exploring Limits?
════════════════════════
𐀪 Author: Majeztik SlumBoi / Julius Crawford
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:37:25 GMT
════════════════════════
⌗ Tags: #software_engineering #privacy #deep_learning #artificial_intelligence #cybersecurity
Medium
The Unexpected Upside: Unleashing Creativity and Exploring Limits?
Everyone doesn't have bad intentions but we're limited because of those that do
12 views
Daily Writeups
⤷ Title: Windows DPAPI Fundamentals
════════════════════════
𐀪 Author: Tom O'Neill
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:32:20 GMT
════════════════════════
⌗ Tags: #windows_security #red_team #cybersecurity #penetration_testing
Medium
Windows DPAPI Fundamentals
A review of fundamental Windows DPAPI concepts and a C# project to demonstrate the Protect/Unprotect methods using byte arrays.
15 views
Daily Writeups
⤷ Title: TryHackMe: Python Basics Room Explained
════════════════════════
𐀪 Author: Diego Lasarin
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:27:01 GMT
════════════════════════
⌗ Tags: #automation #scripting #tryhackme #python #cybersecurity
Medium
TryHackMe: Python Basics Room Explained
From Hello World to Cyber Scripts
12 views
Daily Writeups
⤷ Title: Understanding the Role of a CISO in Protecting Your Organization’s Cybersecurity
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:17:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #networking #security #careers #technology
Medium
Understanding the Role of a CISO in Protecting Your Organization’s Cybersecurity
Why every modern business needs a strong, strategic Chief Information Security Officer at the helm of cyber defense.
13 views
Daily Writeups
⤷ Title: The Ultimate Guide to API Security Testing — Cheat sheet 2025 Edition
════════════════════════
𐀪 Author: Mohamed Talaat Saada (@t4144t)
════════════════════════
ⴵ Time: Mon, 05 May 2025 20:49:12 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty_writeup #bug_bounty_tips #owasp_top_10 #bug_bounty
Medium
The Ultimate Guide to API Security Testing — Cheat sheet 2025 Edition
I was searching for such resource to work as cheat sheet series and guide me through different attack scenarios for API attacks, didn’t…
25 views
Daily Writeups
⤷ Title: How I Passed the Certified Ethical Hacker Exam!
════════════════════════
𐀪 Author: Dr. Alexis | Health | Tech | Business | Blog
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:05:07 GMT
════════════════════════
⌗ Tags: #certified_ethical_hacker #ethical_hacking #ec_council #che #ec_council_certification
Medium
How I Passed the Certified Ethical Hacker Exam!
When I set out to pursue the CEH (Certified Ethical Hacker) certification, I knew it would require more than interest—it would require…
26 views
Daily Writeups
⤷ Title: Unauthenticated DoS Vulnerability Crashes Windows Deployment Services, No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:40:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #Denial of Service #memory exhaustion #Preauth DoS #UDP spoofing #WDS vulnerability #Windows Deployment Services #Zhiniang Peng
Daily CyberSecurity
Unauthenticated DoS Vulnerability Crashes Windows Deployment Services, No Patch
A preauth DoS flaw in Windows Deployment Services allows attackers to crash systems via spoofed UDP packets, warns researcher Zhiniang Peng.
24 views
Daily Writeups
⤷ Title: CVE-2025-2905 (CVSS 9.1): Critical XXE Vulnerability Found in WSO2 API Manager
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:37:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #API Manager #CVE_2025_2905 #security advisory #WSO2 #XXE Vulnerability
Daily CyberSecurity
CVE-2025-2905 (CVSS 9.1): Critical XXE Vulnerability Found in WSO2 API Manager
A critical XXE vulnerability (CVE-2025-2905) in WSO2 API Manager allows attackers to read files and cause DoS. Patch WSO2-2016-0151 is the solution.
16 views
Daily Writeups
⤷ Title: CVE-2025-2605 (CVSS 9.9): Critical Vulnerability Found in Honeywell MB-Secure Alarm Panels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:33:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #alarm panel #CVE_2025_2605 #cybersecurity #Honeywell #Industrial Security #MB_Secure
Daily CyberSecurity
CVE-2025-2605 (CVSS 9.9): Critical Vulnerability Found in Honeywell MB-Secure Alarm Panels
A critical vulnerability (CVE-2025-2605) in Honeywell MB-Secure alarm panels allows attackers to execute OS commands. Update to the latest version now.
13 views
Daily Writeups
⤷ Title: Darcula Exposed: Inside a Global Phishing-as-a-Service Empire Powered by the Magic Cat Toolkit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:22:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #Darcula #Magic Cat #mnemonic #PhaaS #phishing infrastructure #Phishing_as_a_Service #smishing #Telegram scams
Daily CyberSecurity
Darcula Exposed: Inside a Global Phishing-as-a-Service Empire Powered by the Magic Cat Toolkit
mnemonic exposes Darcula, a global phishing-as-a-service network using the Magic Cat toolkit to target mobile users with encrypted, real-time scam dashboards.
10 views
Daily Writeups
⤷ Title: Digigram PYKO-OUT AoIP Devices Exposed to Attacks Due to Missing Default Password
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:18:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #audio_over_IP #CERT/CC #CVE_2025_3927 #default credentials #Digigram #network_security #PYKO_OUT
Daily CyberSecurity
Digigram PYKO-OUT AoIP Devices Exposed to Attacks Due to Missing Default Password
CERT/CC warns of CVE-2025-3927 in Digigram PYKO-OUT AoIP device, where default no-password access allows attackers to control devices and pivot networks.
10 views
Daily Writeups
⤷ Title: Massive E-commerce Supply Chain Attack Uncovered: Hundreds of Stores at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:13:38 +0000
════════════════════════
⌗ Tags: #Malware #e_commerce #Magento #Magesolution #malware #Meetanshi #Sansec #security breach #supply chain attack #Tigren
Daily CyberSecurity
Massive E-commerce Supply Chain Attack Uncovered: Hundreds of Stores at Risk
A large-scale supply chain attack has injected backdoors into e-commerce software, potentially affecting 500-1,000 stores. Sansec urges immediate checks.
12 views
Daily Writeups
⤷ Title: DragonForce Ransomware Cartel Hits UK Retailers with Custom Payloads and Global Extortion Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:10:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Conti #CVE_2024_21887 #cyberattack #DragonForce #LockBit #RansomBay #ransomware #SentinelOne #Threat Actors #UK retailers
Daily CyberSecurity
DragonForce Ransomware Cartel Hits UK Retailers with Custom Payloads and Global Extortion Campaign
DragonForce ransomware cartel targets UK retailers with Conti-based payloads, RansomBay leaks, and phishing attacks, warns SentinelOne report.
11 views
Daily Writeups
⤷ Title: Critical IBM Cognos Analytics Vulnerabilities Demand Urgent Patching
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:03:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cognos Analytics #CVE_2024_40695 #CVE_2024_51466 #cybersecurity #EL Injection #file upload #IBM #patch
Daily CyberSecurity
Critical IBM Cognos Analytics Vulnerabilities Demand Urgent Patching
IBM patches CVE-2024-51466 and CVE-2024-40695 in Cognos Analytics to prevent system compromise, sensitive data leaks, and remote code execution.
21 views
Daily Writeups
⤷ Title: Fictional Hack Series: Exploiting an Outdated WordPress Plugin
════════════════════════
𐀪 Author: www.Rarefied.co
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:46:34 GMT
════════════════════════
⌗ Tags: #hacking #wordpress #wordpress_plugins #penetration_testing #hacking_tools
Medium
Fictional Hack Series: Exploiting an Outdated WordPress Plugin
Initial Reconnaissance
18 views
Daily Writeups
⤷ Title: Open-Source Intelligence (OSINT) for Threat Enrichment: A Deep Dive with Maltego, Spiderfoot…
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:44:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #osint #hacking #threat_intelligence
Medium
Open-Source Intelligence (OSINT) for Threat Enrichment: A Deep Dive with Maltego, Spiderfoot, IntelX, and Recon-ng
In the modern cybersecurity landscape, data is everywhere — but context is power.
21 views