Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: The 5 Most Dangerous Linux Services If Left Unsecured
════════════════════════
𐀪 Author: Faruk Ahmed
════════════════════════
ⴵ Time: Sun, 18 May 2025 23:30:50 GMT
════════════════════════
⌗ Tags: #ubuntu #linux #cybersecurity
Medium
The 5 Most Dangerous Linux Services If Left Unsecured
✍️ Full Blog Content:
21 views
Daily Writeups
⤷ Title: Basit Linux komutlari sistem bilgilerini kontol etmek icin
════════════════════════
𐀪 Author: Ipek U
════════════════════════
ⴵ Time: Sun, 18 May 2025 22:09:19 GMT
════════════════════════
⌗ Tags: #threat_intelligence #siber_guvenlik #threat_hunting #linux #cybersecurity
Medium
Basit Linux komutlari sistem bilgilerini kontol etmek icin
Şimdi ,kisaca Linux makinenizin içini merak edip hangi donanımlara sahip olduğunu görmek istiyorsaniz; Linux, bunu doğrudan komut…
32 views
Daily Writeups
⤷ Title: Siber güvenlik dünyasında, açık kaynak istihbaratı (OSINT)
════════════════════════
𐀪 Author: Ipek U
════════════════════════
ⴵ Time: Sun, 18 May 2025 21:56:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint_investigation #siber_guvenlik
Medium
Siber güvenlik dünyasında, açık kaynak istihbaratı (OSINT)
Günümüzün dijital tehdit ortamında, özellikle Telegram, sadece sıradan kullanıcıların değil, aynı zamanda siber suçluların, hacktivistlerin…
33 views
Daily Writeups
⤷ Title: BILLING WALKTHROUGH : TRYHACKME
════════════════════════
𐀪 Author: rizzziom
════════════════════════
ⴵ Time: Sun, 18 May 2025 22:32:20 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #ctf_writeup #ctf #pentesting
Medium
BILLING WALKTHROUGH : TRYHACKME
To access the machine, click on the link given below:
29 views
Daily Writeups
⤷ Title: IMAGE_NT_HEADERS Dissecting
════════════════════════
𐀪 Author: Iram Jack
════════════════════════
ⴵ Time: Sun, 18 May 2025 22:32:20 GMT
════════════════════════
⌗ Tags: #dynamic_analysis #static_analysis #malware_analysis #miss_robot #tryhackme
Medium
IMAGE_NT_HEADERS Dissecting
PE Headers | Part 2
26 views
Daily Writeups
⤷ Title: HTB Devel Walkthrough
════════════════════════
𐀪 Author: The Cyber Outpost
════════════════════════
ⴵ Time: Sun, 18 May 2025 23:01:38 GMT
════════════════════════
⌗ Tags: #hackthebox #ftp #hackthebox_walkthrough #hackthebox_writeup #metasploit
Medium
HTB Devel Walkthrough
In this article, we’re going to explore the retired easy box of Blue, following the guided mode.
33 views
Daily Writeups
⤷ Title: Living-off-the-COM-Type-Coercion-Abuse: achieve stealthy command execution by abusing implicit type coercion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 01:51:22 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Command Execution
Penetration Testing Tools
Living-off-the-COM-Type-Coercion-Abuse: achieve stealthy command execution by abusing implicit type coercion
This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit type coercion.
25 views
Daily Writeups
⤷ Title: MailFail: Identify Email Misconfigurations in Your Browser
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:17:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #browser extension #email configuration #email security #MailFail #security tool
Penetration Testing Tools
MailFail: Identify Email Misconfigurations in Your Browser
MailFail is a browser extension that identifies email misconfigurations for your domain and subdomain. See and fix issues easily.
18 views
Daily Writeups
⤷ Title: scriptkiddi3: recon and initial vulnerability detection tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:06:22 +0000
════════════════════════
⌗ Tags: #OSINT _ Open Source Intelligence #scriptkiddi3 #vulnerability detection tool
Penetration Testing Tools
scriptkiddi3 v0.1.4 releases: recon and initial vulnerability detection tool
SCRIPTKIDDI3, a powerful recon and initial vulnerability detection tool for Bug Bounty Hunters. Built using a variety of open-source tools
15 views
Daily Writeups
⤷ Title: PoC Released: iOS Kernel Flaw Allows File System Modification Without Jailbreak
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:50:23 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_24203 #dirtyZero #Exploit #file system #ios #iPadOS #kernel vulnerability #mdc0 #PoC #proof_of_concept #security
Daily CyberSecurity
PoC Released: iOS Kernel Flaw Allows File System Modification Without Jailbreak
iOS is vulnerable! Learn about the dirtyZero exploit and how it allows system customization without jailbreak. Details on CVE-2025-24203.
17 views
Daily Writeups
⤷ Title: Critical Risk (CVSS 9.1): Auth0-PHP SDK Flaw Threatens 16M+ Downloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:43:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Auth0 #Auth0_PHP SDK #Brute Force #CVE_2025_47275 #php #security #Session Hijacking
Daily CyberSecurity
Critical Risk (CVSS 9.1): Auth0-PHP SDK Flaw Threatens 16M+ Downloads
Critical vulnerability (CVSS 9.1) in Auth0-PHP SDK! This flaw threatens applications with over 16 million downloads. Update now to avoid brute force attacks.
12 views
Daily Writeups
⤷ Title: High DoS Risk: Tornado’s Default Parser Exposes Apps (CVE-2025-47287)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:38:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_47287 #Denial of Service #dos #parser #Python #security #tornado #web framework
Daily CyberSecurity
High DoS Risk: Tornado's Default Parser Exposes Apps (CVE-2025-47287)
Tornado is vulnerable to DoS attacks due to its default parser. Details on CVE-2025-47287 and how to mitigate the high-severity threat.
13 views
Daily Writeups
⤷ Title: Skitnet Analysis: Nim, Rust, and DNS Abuse in Advanced Malware Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:35:16 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #cybersecurity #DLL Sideloading #dns #malware #Malware Analysis #Nim #reverse shell #Rust #Skitnet
Daily CyberSecurity
Skitnet Analysis: Nim, Rust, and DNS Abuse in Advanced Malware Campaign
In-depth analysis of Skitnet malware: Rust, Nim, and DNS abuse. Discover how this sophisticated threat evades detection.
16 views
Daily Writeups
⤷ Title: XSS Vulnerability Discovered in Label Studio: Update Now!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:32:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cross_Site Scripting #CVE_2025_47783 #data labeling #Label Studio #machine_learning #security #XSS
Daily CyberSecurity
XSS Vulnerability Discovered in Label Studio: Update Now!
Learn about the Label Studio XSS flaw (CVE-2025-47783) that allows attackers to inject malicious scripts. Protect your data labeling projects.
12 views
Daily Writeups
⤷ Title: Kuwait Under Attack: 230+ Domains Used in Sophisticated Phishing Operation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:30:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #credentials #cyberattack #cybersecurity #domain impersonation #Fraud #Kuwait #phishing #threat intelligence
Daily CyberSecurity
Kuwait Under Attack: 230+ Domains Used in Sophisticated Phishing Operation
Phishing campaign uses deceptive domains to target Kuwaiti sectors. Details on how attackers impersonate brands and steal credentials.
19 views
Daily Writeups
⤷ Title: glibc Vulnerability Puts Millions of Linux Systems at Risk of Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:22:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_4802 #glibc #glibc vulnerability #LD_LIBRARY_PATH #Linux #Linux Security #Linux users #local exploit #security #setuid #system security
Daily CyberSecurity
glibc Vulnerability Puts Millions of Linux Systems at Risk of Code Execution
glibc vulnerability CVE-2025-4802 could allow attackers to hijack setuid binaries on Linux systems, putting millions at risk.
27 views
Daily Writeups
⤷ Title: Race Condition in Windows Remote Desktop Gateway Enables RCE – PoC Demonstrates Exploitability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:18:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #aaedge.dll #CVE_2025_21297 #Exploit #Microsoft #PoC #proof_of_concept #race condition #rce #RD Gateway #Remote Code Execution #Remote Desktop Gateway #UAF #use after free
Daily CyberSecurity
Race Condition in Windows Remote Desktop Gateway Enables RCE - PoC Demonstrates Exploitability
CVE-2025-21297 in Windows RD Gateway allows remote code execution via race condition. PoC proves exploitability. Patch now to stay secure.
23 views
Daily Writeups
⤷ Title: Trojanized KeePass Used to Deploy Cobalt Strike and Steal Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:13:51 +0000
════════════════════════
⌗ Tags: #Malware #Cobalt Strike #Credential Theft #cybersecurity #Infostealer #initial access broker #KeeLoader #KeePass #Malvertising #malware #password manager #ransomware #Trojan
Daily CyberSecurity
Trojanized KeePass Used to Deploy Cobalt Strike and Steal Credentials
A trojanized KeePass installer is spreading malware! Learn how this sophisticated attack steals credentials and deploys Cobalt Strike.
24 views
Daily Writeups
⤷ Title: RVTools Supply Chain Attack: Bumblebee Malware Delivered via Trusted VMware Utility
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:08:17 +0000
════════════════════════
⌗ Tags: #Malware #Bumblebee loader #cybersecurity #initial access #IT management tools #malware #Malware Distribution #RVTools #supply chain attack #threat analysis #vmware #ZeroDay Labs
Daily CyberSecurity
RVTools Supply Chain Attack: Bumblebee Malware Delivered via Trusted VMware Utility
RVTools briefly hijacked in a Bumblebee malware supply chain attack. Learn how attackers used a trusted tool to deliver post-exploitation payloads.
26 views
Daily Writeups
⤷ Title: High-Risk Flaw in Python Web Framework Reflex Could Lead to Account Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:02:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_47425 #cybersecurity #framework #Python #python framework #reflex #security #web application #web development
Daily CyberSecurity
High-Risk Flaw in Python Web Framework Reflex Could Lead to Account Takeover
Discover a serious Reflex Python framework vulnerability and how to fix it. Learn about the CVE-2025-47425 flaw and secure your web applications.
15 views
Daily Writeups
⤷ Title: Domina los Google Dorks: Técnicas de Búsqueda para Ciberseguridad y OSINT
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:02:29 GMT
════════════════════════
⌗ Tags: #ethical_hacking #osint #infosec #bug_bounty #cybersecurity
Medium
Domina los Google Dorks: Técnicas de Búsqueda para Ciberseguridad y OSINT
Aprende a utilizar Google como una herramienta poderosa para la ciberseguridad. Ideal para pentesters, bug bounty hunters y más.
14 views