Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Zircolite: fast SIGMA-based detection tool for EVTX or JSON Logs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:30:35 +0000
════════════════════════
⌗ Tags: #Data Forensics #SIGMA_based detection tool #zircolite
Penetration Testing Tools
Zircolite: fast SIGMA-based detection tool for EVTX or JSON Logs
Zircolite is a standalone tool written in Python 3. It allows to use SIGMA rules on MS Windows EVTX (EVTX and JSON format)
25 views
Daily Writeups
⤷ Title: Cisco SD-WAN Vulnerabilities: PoC Exists for XSS and Filter Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:50:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cisco SD_WAN #CVE_2025_20147 #CVE_2025_20221 #network_security #packet filter bypass #script injection #SD_WAN advisory #XSS Vulnerability
Daily CyberSecurity
Cisco SD-WAN Vulnerabilities: PoC Exists for XSS and Filter Bypass
Cisco warns of SD-WAN flaws (CVE-2025-20147, CVE-2025-20221) with available proof-of-concept exploit code, posing risks of XSS and traffic bypass.
18 views
Daily Writeups
⤷ Title: FBI Warns: End-of-Life Routers Hijacked to Power Cybercriminal Proxy Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:40:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #botnet #cybersecurity #Cybersecurity Advisory #end_of_life routers #EOL routers #fbi #FBI alert #IC3 #network_security #proxy networks #proxy server #Remote Access #router exploitation #router malware #router security #TheMoon malware
Daily CyberSecurity
FBI Warns: End-of-Life Routers Hijacked to Power Cybercriminal Proxy Networks
FBI warns cybercriminals are exploiting outdated routers with TheMoon malware to build anonymous proxy networks for illicit activities.
13 views
Daily Writeups
⤷ Title: RedisRaider Worm Exploits Misconfigured Redis for Cryptojacking
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:35:45 +0000
════════════════════════
⌗ Tags: #Malware #Cryptojacking #cybersecurity #Linux #malware #Monero #Obfuscation #Redis #RedisRaider #worm #XMRig
Daily CyberSecurity
RedisRaider Worm Exploits Misconfigured Redis for Cryptojacking
RedisRaider malware exploits misconfigured Redis servers to deploy cryptominers via cron jobs, evading detection with obfuscation and anti-forensics.
15 views
Daily Writeups
⤷ Title: Radware Cloud WAF Vulnerable to Filter Bypass via Crafted Requests
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:33:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_56523 #CVE_2024_56524 #filter bypass #Radware #security #waf #Web Application Firewall
Daily CyberSecurity
Radware Cloud WAF Vulnerable to Filter Bypass via Crafted Requests
Radware Cloud WAF has vulnerabilities (CVE-2024-56523, CVE-2024-56524) allowing attackers to bypass filtering via crafted HTTP requests and special characters.
14 views
Daily Writeups
⤷ Title: Sophisticated IIS Malware Targets South Korean Web Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:20:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASEC #china #cyberattack #Gh0st RAT #HijackDriverManager #IIS #malware #south korea #web server #Web Shell #Winkbj.sys
Daily CyberSecurity
Sophisticated IIS Malware Targets South Korean Web Servers
A sophisticated campaign deployed malicious IIS modules on South Korean web servers, enabling traffic control and backdoor access. Suspected Chinese actor.
14 views
Daily Writeups
⤷ Title: New Phishing Tactic: Attackers Abuse Blob URIs to Bypass Email Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:16:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Blob URI #Cofense #Credential Phishing #Email Security #phishing #Phishing technique
Daily CyberSecurity
New Phishing Tactic: Attackers Abuse Blob URIs to Bypass Email Security
Cofense Intelligence reports a new phishing tactic using blob URIs to bypass Secure Email Gateways. Attackers use these local URIs to hide phishing pages.
17 views
Daily Writeups
⤷ Title: DOGE Big Balls Ransomware: New Tools and Tactics Uncovered
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:13:37 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #DOGE Big Balls Ransomware #Exploit #Infection chain #lateral movement #Netskope #powershell #ransomware
Daily CyberSecurity
DOGE Big Balls Ransomware: New Tools and Tactics Uncovered
Netskope Labs details a complex infection chain used by the DOGE Big Balls Ransomware, involving PowerShell scripts, exploits, and lateral movement tactics.
14 views
Daily Writeups
⤷ Title: Oriental Gudgeon: Sophisticated Phishing Campaign Targets Japanese Companies
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:10:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Financial services #Japan #Oriental Gudgeon #phishing #Phishing Campaign #urlscan
Daily CyberSecurity
Oriental Gudgeon: Sophisticated Phishing Campaign Targets Japanese Companies
A sophisticated phishing campaign, Oriental Gudgeon, has been targeting Japanese companies since October 2024. It uses advanced cloaking to steal user data.
16 views
Daily Writeups
⤷ Title: DieNet Hacktivist Group Exploits DDoS-as-a-Service in Rapid Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:01:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyberattack #cybersecurity #ddos #DDoS_as_a_Service #DieNet #Hacktivist #NETSCOUT #Threat Actors
Daily CyberSecurity
DieNet Hacktivist Group Exploits DDoS-as-a-Service in Rapid Attacks
DieNet, a new hacktivist group, is leveraging DDoS-as-a-service for rapid-fire attacks on critical infrastructure. NETSCOUT reports on their tactics and targets.
15 views
Daily Writeups
⤷ Title: Improve your cybersecurity skills
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:47:32 GMT
════════════════════════
⌗ Tags: #ctf #bug_bounty #penetration_testing #hacking #cybersecurity
Medium
Improve your cybersecurity skills
Upgrade your bug bounty, pentesting, ctf, etc, skills using these resources
15 views
Daily Writeups
⤷ Title: XSS Explained: A Complete Guide to Cross-Site Scripting with Practical Examples
════════════════════════
𐀪 Author: Mazen Elsayed
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:03:35 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #cybersecurity #bug_bounty #web_penetration_testing #penetration_testing
Medium
XSS Explained: A Complete Guide to Cross-Site Scripting with Practical Examples
What is XSS and Why It’s One of the Most Dangerous Threats on the Web?
20 views
Daily Writeups
⤷ Title: How Breaches Start: 5 Real-World Vulnerabilities That Escalated Fast
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Fri, 09 May 2025 01:38:15 GMT
════════════════════════
⌗ Tags: #cybercrime #ai #information_security #application_security #cybersecurity
Medium
How Breaches Start: 5 Real-World Vulnerabilities That Escalated Fast
In cybersecurity, not every vulnerability screams “critical.” But in the hands of a skilled attacker, even the smallest flaw can snowball…
16 views
Daily Writeups
⤷ Title: The Red Teaming: 30-Day Challenge[25]
════════════════════════
𐀪 Author: Bl@ckC!pH3r
════════════════════════
ⴵ Time: Fri, 09 May 2025 01:16:40 GMT
════════════════════════
⌗ Tags: #blue_team #red_team #purple_team #cybersecurity #hacking
Medium
The Red Teaming: 30-Day Challenge[25]
Day 25: Mastering Red Team Operations
12 views
Daily Writeups
⤷ Title: Incognito Mode Myths Busted: Secure Your Online Life Now!
════════════════════════
𐀪 Author: Arpit Kishor Giri
════════════════════════
ⴵ Time: Fri, 09 May 2025 01:07:23 GMT
════════════════════════
⌗ Tags: #vpn #incognito #hacking #privacy #tech
Medium
Incognito Mode Ain’t Your Privacy Superhero: Busting Myths and Locking Down Your Online Life
So, picture this: I’m on a secret mission to find the perfect surprise gift, right? Something that’ll make everyone’s jaw hit the floor. I…
12 views
Daily Writeups
⤷ Title: ❗️Telefonimdan firibgarlik SMS yuborildi. Nima bo‘ldi va qanday himoyalanish kerak?
════════════════════════
𐀪 Author: KOMILJON MUKHAMMADIEV
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:46:48 GMT
════════════════════════
⌗ Tags: #hacking #online_scams #cybersecurity #digital_safety #mobile_security
Medium
❗️Telefonimdan firibgarlik SMS yuborildi. Nima bo‘ldi va qanday himoyalanish kerak?
So‘nggi vaqtlarda ko‘plab foydalanuvchilar telefonidan avtomatik tarzda “pul berib tur”, “zarurat bo‘lyapti” kabi xabarlar yuborilganini…
13 views
Daily Writeups
⤷ Title: North Korean Hackers Might Be Your New Remote Co-Workers
════════════════════════
𐀪 Author: CyberMassive
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:34:21 GMT
════════════════════════
⌗ Tags: #cyberattack #hacking #cybersecurity #deepfakes #north_korea
Medium
North Korean Hackers Might Be Your New Remote Co-Workers
TL;DR: I was just wrapping up my day when an extortion attempt revealed a far deeper conspiracy: North Korean IT workers, state-sponsored…
20 views
Daily Writeups
⤷ Title: The Airport Wi-Fi Trap: How Hackers Can Own You Before You Board
════════════════════════
𐀪 Author: All in One security
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:22:38 GMT
════════════════════════
⌗ Tags: #hacker #hacking #data #wifi #wifihacking
Medium
The Airport Wi-Fi Trap: How Hackers Can Own You Before You Board
You’ve just passed security.  You’re early for your flight.  You open your laptop and connect to “Free Airport Wi-Fi.”
12 views
Daily Writeups
⤷ Title: Burp Suite Guide to Ethical Hacking
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:01:35 GMT
════════════════════════
⌗ Tags: #hacking #tools #ctf #cybersecurity #penetration_testing
Medium
Burp Suite Guide to Ethical Hacking
A basic guide to setting up and using Burp Suite: proxy, certificate, scope, and key tools for pentesters and web enthusiasts.
16 views
Daily Writeups
⤷ Title: Guía de Burp Suite para hacking ético
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 09 May 2025 00:01:35 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #ctf #cybersecurity #tools
Medium
Guía de Burp Suite para hacking ético
Guía básica para configurar y usar Burp Suite: proxy, certificado, scope y herramientas clave para pentesters y entusiastas web.
18 views
Daily Writeups
⤷ Title: Cybersecurity 101: What Your Operating System Actually Does in the Context of Cybersecurity.
════════════════════════
𐀪 Author: Kheyraldhs
════════════════════════
ⴵ Time: Fri, 09 May 2025 01:58:08 GMT
════════════════════════
⌗ Tags: #operating_systems #cybersecurity
Medium
Cybersecurity 101: What Your Operating System Actually Does in the Context of Cybersecurity.
When was the last time you heard about operating system? 🤔
16 views