Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Windows DPAPI Fundamentals
════════════════════════
𐀪 Author: Tom O'Neill
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:32:20 GMT
════════════════════════
⌗ Tags: #windows_security #red_team #cybersecurity #penetration_testing
Medium
Windows DPAPI Fundamentals
A review of fundamental Windows DPAPI concepts and a C# project to demonstrate the Protect/Unprotect methods using byte arrays.
15 views
Daily Writeups
⤷ Title: TryHackMe: Python Basics Room Explained
════════════════════════
𐀪 Author: Diego Lasarin
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:27:01 GMT
════════════════════════
⌗ Tags: #automation #scripting #tryhackme #python #cybersecurity
Medium
TryHackMe: Python Basics Room Explained
From Hello World to Cyber Scripts
12 views
Daily Writeups
⤷ Title: Understanding the Role of a CISO in Protecting Your Organization’s Cybersecurity
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:17:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #networking #security #careers #technology
Medium
Understanding the Role of a CISO in Protecting Your Organization’s Cybersecurity
Why every modern business needs a strong, strategic Chief Information Security Officer at the helm of cyber defense.
13 views
Daily Writeups
⤷ Title: The Ultimate Guide to API Security Testing — Cheat sheet 2025 Edition
════════════════════════
𐀪 Author: Mohamed Talaat Saada (@t4144t)
════════════════════════
ⴵ Time: Mon, 05 May 2025 20:49:12 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty_writeup #bug_bounty_tips #owasp_top_10 #bug_bounty
Medium
The Ultimate Guide to API Security Testing — Cheat sheet 2025 Edition
I was searching for such resource to work as cheat sheet series and guide me through different attack scenarios for API attacks, didn’t…
25 views
Daily Writeups
⤷ Title: How I Passed the Certified Ethical Hacker Exam!
════════════════════════
𐀪 Author: Dr. Alexis | Health | Tech | Business | Blog
════════════════════════
ⴵ Time: Mon, 05 May 2025 22:05:07 GMT
════════════════════════
⌗ Tags: #certified_ethical_hacker #ethical_hacking #ec_council #che #ec_council_certification
Medium
How I Passed the Certified Ethical Hacker Exam!
When I set out to pursue the CEH (Certified Ethical Hacker) certification, I knew it would require more than interest—it would require…
26 views
Daily Writeups
⤷ Title: Unauthenticated DoS Vulnerability Crashes Windows Deployment Services, No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:40:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #Denial of Service #memory exhaustion #Preauth DoS #UDP spoofing #WDS vulnerability #Windows Deployment Services #Zhiniang Peng
Daily CyberSecurity
Unauthenticated DoS Vulnerability Crashes Windows Deployment Services, No Patch
A preauth DoS flaw in Windows Deployment Services allows attackers to crash systems via spoofed UDP packets, warns researcher Zhiniang Peng.
24 views
Daily Writeups
⤷ Title: CVE-2025-2905 (CVSS 9.1): Critical XXE Vulnerability Found in WSO2 API Manager
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:37:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #API Manager #CVE_2025_2905 #security advisory #WSO2 #XXE Vulnerability
Daily CyberSecurity
CVE-2025-2905 (CVSS 9.1): Critical XXE Vulnerability Found in WSO2 API Manager
A critical XXE vulnerability (CVE-2025-2905) in WSO2 API Manager allows attackers to read files and cause DoS. Patch WSO2-2016-0151 is the solution.
16 views
Daily Writeups
⤷ Title: CVE-2025-2605 (CVSS 9.9): Critical Vulnerability Found in Honeywell MB-Secure Alarm Panels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:33:43 +0000
════════════════════════
⌗ Tags: #Vulnerability #alarm panel #CVE_2025_2605 #cybersecurity #Honeywell #Industrial Security #MB_Secure
Daily CyberSecurity
CVE-2025-2605 (CVSS 9.9): Critical Vulnerability Found in Honeywell MB-Secure Alarm Panels
A critical vulnerability (CVE-2025-2605) in Honeywell MB-Secure alarm panels allows attackers to execute OS commands. Update to the latest version now.
13 views
Daily Writeups
⤷ Title: Darcula Exposed: Inside a Global Phishing-as-a-Service Empire Powered by the Magic Cat Toolkit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:22:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cybercrime #Darcula #Magic Cat #mnemonic #PhaaS #phishing infrastructure #Phishing_as_a_Service #smishing #Telegram scams
Daily CyberSecurity
Darcula Exposed: Inside a Global Phishing-as-a-Service Empire Powered by the Magic Cat Toolkit
mnemonic exposes Darcula, a global phishing-as-a-service network using the Magic Cat toolkit to target mobile users with encrypted, real-time scam dashboards.
10 views
Daily Writeups
⤷ Title: Digigram PYKO-OUT AoIP Devices Exposed to Attacks Due to Missing Default Password
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:18:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #audio_over_IP #CERT/CC #CVE_2025_3927 #default credentials #Digigram #network_security #PYKO_OUT
Daily CyberSecurity
Digigram PYKO-OUT AoIP Devices Exposed to Attacks Due to Missing Default Password
CERT/CC warns of CVE-2025-3927 in Digigram PYKO-OUT AoIP device, where default no-password access allows attackers to control devices and pivot networks.
10 views
Daily Writeups
⤷ Title: Massive E-commerce Supply Chain Attack Uncovered: Hundreds of Stores at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:13:38 +0000
════════════════════════
⌗ Tags: #Malware #e_commerce #Magento #Magesolution #malware #Meetanshi #Sansec #security breach #supply chain attack #Tigren
Daily CyberSecurity
Massive E-commerce Supply Chain Attack Uncovered: Hundreds of Stores at Risk
A large-scale supply chain attack has injected backdoors into e-commerce software, potentially affecting 500-1,000 stores. Sansec urges immediate checks.
12 views
Daily Writeups
⤷ Title: DragonForce Ransomware Cartel Hits UK Retailers with Custom Payloads and Global Extortion Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:10:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Conti #CVE_2024_21887 #cyberattack #DragonForce #LockBit #RansomBay #ransomware #SentinelOne #Threat Actors #UK retailers
Daily CyberSecurity
DragonForce Ransomware Cartel Hits UK Retailers with Custom Payloads and Global Extortion Campaign
DragonForce ransomware cartel targets UK retailers with Conti-based payloads, RansomBay leaks, and phishing attacks, warns SentinelOne report.
11 views
Daily Writeups
⤷ Title: Critical IBM Cognos Analytics Vulnerabilities Demand Urgent Patching
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:03:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cognos Analytics #CVE_2024_40695 #CVE_2024_51466 #cybersecurity #EL Injection #file upload #IBM #patch
Daily CyberSecurity
Critical IBM Cognos Analytics Vulnerabilities Demand Urgent Patching
IBM patches CVE-2024-51466 and CVE-2024-40695 in Cognos Analytics to prevent system compromise, sensitive data leaks, and remote code execution.
21 views
Daily Writeups
⤷ Title: Fictional Hack Series: Exploiting an Outdated WordPress Plugin
════════════════════════
𐀪 Author: www.Rarefied.co
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:46:34 GMT
════════════════════════
⌗ Tags: #hacking #wordpress #wordpress_plugins #penetration_testing #hacking_tools
Medium
Fictional Hack Series: Exploiting an Outdated WordPress Plugin
Initial Reconnaissance
18 views
Daily Writeups
⤷ Title: Open-Source Intelligence (OSINT) for Threat Enrichment: A Deep Dive with Maltego, Spiderfoot…
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:44:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #osint #hacking #threat_intelligence
Medium
Open-Source Intelligence (OSINT) for Threat Enrichment: A Deep Dive with Maltego, Spiderfoot, IntelX, and Recon-ng
In the modern cybersecurity landscape, data is everywhere — but context is power.
21 views
Daily Writeups
⤷ Title: Hack The Box — Machine — Lame Walkthrough (ES)
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:02:27 GMT
════════════════════════
⌗ Tags: #hackthebox #ctf #cybersecurity #linux #hacking
Medium
Hack The Box — Machine — Lame Walkthrough (ES)
Descubre como ganar acceso a la máquina Lame de HTB con explicaciones simples.
14 views
Daily Writeups
⤷ Title: The Great Data Heist: Your Digital Life Under Siege in 2025
════════════════════════
𐀪 Author: kiran dhathri boddepalli
════════════════════════
ⴵ Time: Tue, 06 May 2025 00:02:01 GMT
════════════════════════
⌗ Tags: #hacking #data_breach #scam #cybersecurity #data
Medium
The Great Data Heist: Your Digital Life Under Siege in 2025
The digital realm, once a frontier of boundless opportunity, has become a battleground. In 2025, the stakes are higher than ever, with…
12 views
Daily Writeups
⤷ Title: 2025 Mobile App Pentesting Guide: Tools, Techniques & Real-World Examples
════════════════════════
𐀪 Author: Pawan Jaiswal
════════════════════════
ⴵ Time: Tue, 06 May 2025 01:44:40 GMT
════════════════════════
⌗ Tags: #technology #software_engineering #cybersecurity #programming #openexploit
Medium
2025 Mobile App Pentesting Guide: Tools, Techniques & Real-World Examples
Mobile apps are omnipresent — from social media and enterprise to payment wallets. But most are still open to attack. This handbook is…
18 views
Daily Writeups
⤷ Title: Hack The Box Academy — Network Foundations — Wireless Networks
════════════════════════
𐀪 Author: bl77rd
════════════════════════
ⴵ Time: Tue, 06 May 2025 01:40:50 GMT
════════════════════════
⌗ Tags: #hackthebox #information_security #cybersecurity #hackthebox_writeup #information_technology
Medium
Hack The Box Academy — Network Foundations — Wireless Networks
And we are back for another quick Network Foundations chapter from the Hack The Box Academy. In this chapter, Wireless Networks are…
14 views
Daily Writeups
⤷ Title: Cybersecurity for Small Businesses in 2025: Essential Tools and Strategies
════════════════════════
𐀪 Author: Pawan Jaiswal
════════════════════════
ⴵ Time: Tue, 06 May 2025 01:40:26 GMT
════════════════════════
⌗ Tags: #programming #technology #openexploit #cybersecurity #software_engineering
Medium
Cybersecurity for Small Businesses in 2025: Essential Tools and Strategies
Even small businesses are vulnerable to serious cybersecurity threats. From phishing emails to ransomware attacks, hackers are always in…
14 views
Daily Writeups
⤷ Title: Safety Concerns in Autonomous Vehicles
════════════════════════
𐀪 Author: Imali
════════════════════════
ⴵ Time: Tue, 06 May 2025 01:04:42 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #autonomous_vehicles #safety_concerns #cybersecurity #software
Medium
Safety Concerns in Autonomous Vehicles
The development of autonomous vehicles (AVs) has been one of the most revolutionary advances in modern transportation. With promises of…
11 views