Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Critical Risk (CVSS 9.1): Auth0-PHP SDK Flaw Threatens 16M+ Downloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:43:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Auth0 #Auth0_PHP SDK #Brute Force #CVE_2025_47275 #php #security #Session Hijacking
Daily CyberSecurity
Critical Risk (CVSS 9.1): Auth0-PHP SDK Flaw Threatens 16M+ Downloads
Critical vulnerability (CVSS 9.1) in Auth0-PHP SDK! This flaw threatens applications with over 16 million downloads. Update now to avoid brute force attacks.
12 views
Daily Writeups
⤷ Title: High DoS Risk: Tornado’s Default Parser Exposes Apps (CVE-2025-47287)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:38:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_47287 #Denial of Service #dos #parser #Python #security #tornado #web framework
Daily CyberSecurity
High DoS Risk: Tornado's Default Parser Exposes Apps (CVE-2025-47287)
Tornado is vulnerable to DoS attacks due to its default parser. Details on CVE-2025-47287 and how to mitigate the high-severity threat.
13 views
Daily Writeups
⤷ Title: Skitnet Analysis: Nim, Rust, and DNS Abuse in Advanced Malware Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:35:16 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #cybersecurity #DLL Sideloading #dns #malware #Malware Analysis #Nim #reverse shell #Rust #Skitnet
Daily CyberSecurity
Skitnet Analysis: Nim, Rust, and DNS Abuse in Advanced Malware Campaign
In-depth analysis of Skitnet malware: Rust, Nim, and DNS abuse. Discover how this sophisticated threat evades detection.
16 views
Daily Writeups
⤷ Title: XSS Vulnerability Discovered in Label Studio: Update Now!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:32:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cross_Site Scripting #CVE_2025_47783 #data labeling #Label Studio #machine_learning #security #XSS
Daily CyberSecurity
XSS Vulnerability Discovered in Label Studio: Update Now!
Learn about the Label Studio XSS flaw (CVE-2025-47783) that allows attackers to inject malicious scripts. Protect your data labeling projects.
12 views
Daily Writeups
⤷ Title: Kuwait Under Attack: 230+ Domains Used in Sophisticated Phishing Operation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:30:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #credentials #cyberattack #cybersecurity #domain impersonation #Fraud #Kuwait #phishing #threat intelligence
Daily CyberSecurity
Kuwait Under Attack: 230+ Domains Used in Sophisticated Phishing Operation
Phishing campaign uses deceptive domains to target Kuwaiti sectors. Details on how attackers impersonate brands and steal credentials.
19 views
Daily Writeups
⤷ Title: glibc Vulnerability Puts Millions of Linux Systems at Risk of Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:22:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_4802 #glibc #glibc vulnerability #LD_LIBRARY_PATH #Linux #Linux Security #Linux users #local exploit #security #setuid #system security
Daily CyberSecurity
glibc Vulnerability Puts Millions of Linux Systems at Risk of Code Execution
glibc vulnerability CVE-2025-4802 could allow attackers to hijack setuid binaries on Linux systems, putting millions at risk.
27 views
Daily Writeups
⤷ Title: Race Condition in Windows Remote Desktop Gateway Enables RCE – PoC Demonstrates Exploitability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:18:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #aaedge.dll #CVE_2025_21297 #Exploit #Microsoft #PoC #proof_of_concept #race condition #rce #RD Gateway #Remote Code Execution #Remote Desktop Gateway #UAF #use after free
Daily CyberSecurity
Race Condition in Windows Remote Desktop Gateway Enables RCE - PoC Demonstrates Exploitability
CVE-2025-21297 in Windows RD Gateway allows remote code execution via race condition. PoC proves exploitability. Patch now to stay secure.
23 views
Daily Writeups
⤷ Title: Trojanized KeePass Used to Deploy Cobalt Strike and Steal Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:13:51 +0000
════════════════════════
⌗ Tags: #Malware #Cobalt Strike #Credential Theft #cybersecurity #Infostealer #initial access broker #KeeLoader #KeePass #Malvertising #malware #password manager #ransomware #Trojan
Daily CyberSecurity
Trojanized KeePass Used to Deploy Cobalt Strike and Steal Credentials
A trojanized KeePass installer is spreading malware! Learn how this sophisticated attack steals credentials and deploys Cobalt Strike.
24 views
Daily Writeups
⤷ Title: RVTools Supply Chain Attack: Bumblebee Malware Delivered via Trusted VMware Utility
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:08:17 +0000
════════════════════════
⌗ Tags: #Malware #Bumblebee loader #cybersecurity #initial access #IT management tools #malware #Malware Distribution #RVTools #supply chain attack #threat analysis #vmware #ZeroDay Labs
Daily CyberSecurity
RVTools Supply Chain Attack: Bumblebee Malware Delivered via Trusted VMware Utility
RVTools briefly hijacked in a Bumblebee malware supply chain attack. Learn how attackers used a trusted tool to deliver post-exploitation payloads.
26 views
Daily Writeups
⤷ Title: High-Risk Flaw in Python Web Framework Reflex Could Lead to Account Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:02:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_47425 #cybersecurity #framework #Python #python framework #reflex #security #web application #web development
Daily CyberSecurity
High-Risk Flaw in Python Web Framework Reflex Could Lead to Account Takeover
Discover a serious Reflex Python framework vulnerability and how to fix it. Learn about the CVE-2025-47425 flaw and secure your web applications.
15 views
Daily Writeups
⤷ Title: Domina los Google Dorks: Técnicas de Búsqueda para Ciberseguridad y OSINT
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:02:29 GMT
════════════════════════
⌗ Tags: #ethical_hacking #osint #infosec #bug_bounty #cybersecurity
Medium
Domina los Google Dorks: Técnicas de Búsqueda para Ciberseguridad y OSINT
Aprende a utilizar Google como una herramienta poderosa para la ciberseguridad. Ideal para pentesters, bug bounty hunters y más.
14 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough — Blaster
════════════════════════
𐀪 Author: Nicholas Abundis
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:58:58 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #hacking #ctf_walkthrough #tryhackme_writeup #ctf_writeup
Medium
TryHackMe Walkthrough — Blaster
Alternative Modes of Exploitation.
17 views
Daily Writeups
⤷ Title: What Hacking Taught Me About Building Ethical Startups
════════════════════════
𐀪 Author: Ronit Yadav
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:09:15 GMT
════════════════════════
⌗ Tags: #hacker_turned_founder #ai_cybersecurity_company #business #business_building #hacking
Medium
What Hacking Taught Me About Building Ethical Startups
I used to bend systems just to understand them.
16 views
Daily Writeups
⤷ Title: SOC210 — Possible Brute Force Detected on VPN
════════════════════════
𐀪 Author: Harshprajapati
════════════════════════
ⴵ Time: Mon, 19 May 2025 01:53:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #computers #information_technology #soc
Medium
SOC210 — Possible Brute Force Detected on VPN
We will start the Playbook by click on the start Playbook.
17 views
Daily Writeups
⤷ Title: Footprinting a Target using OSRFramework
════════════════════════
𐀪 Author: Maleesha Rathnayaka
════════════════════════
ⴵ Time: Mon, 19 May 2025 01:31:28 GMT
════════════════════════
⌗ Tags: #footprints #cybersecurity #framework
Medium
Footprinting a Target using OSRFramework
Use domainfy to check with the existing domains using words and nicknames. Type domainfy -n [Domain Name] -t all (here, the target domain…
18 views
Daily Writeups
⤷ Title: The Gig Economy’s Hidden Exploit: Identity Rental in Delivery Apps
════════════════════════
𐀪 Author: Internet Exposed
════════════════════════
ⴵ Time: Mon, 19 May 2025 01:29:36 GMT
════════════════════════
⌗ Tags: #scams_to_avoid #identity_theft #gig_economy #rideshare #cybersecurity
Medium
The Gig Economy’s Hidden Exploit: Identity Rental in Delivery Apps
In the ever-expanding gig economy, platforms like Uber Eats, DoorDash, and Grubhub have revolutionized flexible work. But with low barriers…
18 views
Daily Writeups
⤷ Title: Dynamic Malware Analysis Walkthrough — LetsDefend
════════════════════════
𐀪 Author: md_ashmar
════════════════════════
ⴵ Time: Mon, 19 May 2025 01:22:24 GMT
════════════════════════
⌗ Tags: #malware_analysis #letsdefendio #cybersecurity #soc #information_security
Medium
Dynamic Malware Analysis Walkthrough — LetsDefend
This is a summary of Dynamic Malware Analysis module in SOC analysis learning path from LetsDefend.
14 views
Daily Writeups
⤷ Title: Cyberworld Series: OWASP Overview
════════════════════════
𐀪 Author: Cyberworld
════════════════════════
ⴵ Time: Mon, 19 May 2025 01:17:22 GMT
════════════════════════
⌗ Tags: #education #owasp #cybersecurity
Medium
Cyberworld Series: OWASP Overview
We’re launching a new series to break down key security concepts, aiming to make cybersecurity more understandable for everyone. Over the…
12 views
Daily Writeups
⤷ Title: Privasi pada Mobile Devices and Internet of Things (IoT)
════════════════════════
𐀪 Author: Hendarwan Suryandaru
════════════════════════
ⴵ Time: Mon, 19 May 2025 01:01:16 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #iot #cybersecurity
Medium
Privasi pada Mobile Devices and Internet of Things (IoT)
Dalam era digital saat ini, kita sebagai manusia yang dalam mobilitasnya tidak terlepas dari penggunaan gadget tentunya akan selalu terikat…
29 views
Daily Writeups
⤷ Title: Linux Primer
════════════════════════
𐀪 Author: Raja Muhammad Kurnia Setyawan
════════════════════════
ⴵ Time: Mon, 19 May 2025 01:00:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #programming #sharing_stories #linux
Medium
Linux Primer
Kebanyakan orang yang tumbuh di zaman sekarang diperkenalkan pada komputer melalui grafis, baik itu melalui konsol video game, laptop, atau…
18 views
Daily Writeups
⤷ Title: One Year Working in Cybersecurity, Here Are My Experiences And Advices.
════════════════════════
𐀪 Author: José Reyes (@Architekt)
════════════════════════
ⴵ Time: Mon, 19 May 2025 00:58:32 GMT
════════════════════════
⌗ Tags: #motivation #cybersecurity #career_advice
Medium
One Year Working in Cybersecurity, Here Are My Experiences And Advices.
A year ago, I started working on this exciting cybersecurity adventure.
18 views