Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Beginners Guide To Cybersecurity For Small Businesses (Free tools inside!)
════════════════════════
𐀪 Author: Bree
════════════════════════
ⴵ Time: Tue, 20 May 2025 20:57:50 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity
Medium
Beginners Guide To Cybersecurity For Small Businesses (Free tools inside!)
Small businesses often have this dangerous misconception that only big businesses and organizations are prone to hacking and scammers which is very wrong. Infact, recent studies shows that small…
35 views
Daily Writeups
⤷ Title: Getting Started in Cybersecurity Without a Degree
════════════════════════
𐀪 Author: Nkemsinachi Leslie Onyekwuluje
════════════════════════
ⴵ Time: Tue, 20 May 2025 23:39:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #without_degree #soc_analyst #beginner #linux
Medium
Getting Started in Cybersecurity Without a Degree
How I transitioned into the field — and how you can too
23 views
Daily Writeups
⤷ Title: Attack Chain Breakdown: Malicious PyPI Package Targeting Solana Devs
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Tue, 20 May 2025 23:21:15 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #open_source #cyber_security_awareness #information_security
Medium
Attack Chain Breakdown: Malicious PyPI Package Targeting Solana Devs
In a recent software supply chain scare, researchers uncovered a malicious Python package posing as a legitimate blockchain tool. The…
21 views
Daily Writeups
⤷ Title: VeraCrypt Encryption Guide: Secure Your USB with Hidden Volumes
════════════════════════
𐀪 Author: Eduard Jacobs
════════════════════════
ⴵ Time: Tue, 20 May 2025 22:48:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #veracrypt #security #encryption #data_protection
Medium
🔐 VeraCrypt Encryption Guide: Secure Your USB with Hidden Volumes
VeraCrypt is a free, open-source encryption tool that helps protect your data. This guide walks you through setting up a USB drive with…
14 views
Daily Writeups
⤷ Title: I Got Phished by an Apple Scam — Here’s What Happened and What I Learned
════════════════════════
𐀪 Author: Mercy Baliach
════════════════════════
ⴵ Time: Tue, 20 May 2025 22:43:26 GMT
════════════════════════
⌗ Tags: #phishing #online_security #cybersecurity
Medium
I Got Phished by an Apple Scam — Here’s What Happened and What I Learned
We all like to think we’re too smart to fall for scams. We imagine phishing attempts as clumsy emails filled with grammatical errors or…
10 views
Daily Writeups
⤷ Title: HackTheBox Legacy Walkthrough: Exploiting a Windows XP Vulnerability
════════════════════════
𐀪 Author: Amanuel
════════════════════════
ⴵ Time: Tue, 20 May 2025 22:28:45 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #hackthebox
Medium
HackTheBox Legacy Walkthrough: Exploiting a Windows XP Vulnerability
Welcome to this detailed walkthrough of the HackTheBox “Legacy” machine, a retired box that showcases classic Windows XP exploitation…
12 views
Daily Writeups
⤷ Title: What Happens When You Type a URL into a Web Browser?
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Tue, 20 May 2025 22:17:33 GMT
════════════════════════
⌗ Tags: #networking #cybersecurity #programming #technology #security
Medium
What Happens When You Type a URL into a Web Browser?
A Simple, Step-by-Step Guide to How the Internet Delivers Websites to Your Browser
15 views
Daily Writeups
⤷ Title: Living Off the Land: How Attackers Weaponize Trusted Binaries with LOLBins
════════════════════════
𐀪 Author: Zero Day Thirty
════════════════════════
ⴵ Time: Tue, 20 May 2025 22:02:58 GMT
════════════════════════
⌗ Tags: #cyber_threat #information_security #operating_systems #cybersecurity #incident_response
Medium
Living Off the Land: How Attackers Weaponize Trusted Binaries with LOLBins
May 17, 2025
13 views
Daily Writeups
⤷ Title: This is a formal personal account of repeated privacy violations and emotional manipulation…
════════════════════════
𐀪 Author: A. Lu
════════════════════════
ⴵ Time: Tue, 20 May 2025 22:01:13 GMT
════════════════════════
⌗ Tags: #cybersecurity #social_media #this_happened_to_me #true_crime #justice
Medium
This is a formal personal account of repeated privacy violations and emotional manipulation…
Digital Harassment, Unauthorized Access & Image Mimicry: A Formal Report on Jade Picon
17 views
Daily Writeups
⤷ Title: The Art of Static Analysis
════════════════════════
𐀪 Author: Iram Jack
════════════════════════
ⴵ Time: Tue, 20 May 2025 22:32:37 GMT
════════════════════════
⌗ Tags: #tryhackme #static_analysis #dynamic_analysis #malware_analysis #miss_robot
Medium
The Art of Static Analysis
Basic Static Analysis | Part 2
❤2
20 views
Daily Writeups
⤷ Title: mitmproxy2swagger: Automagically reverse-engineer REST APIs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 01:33:17 +0000
════════════════════════
⌗ Tags: #Reverse Engineering #mitmproxy2swagger
Penetration Testing Tools
mitmproxy2swagger: Automagically reverse-engineer REST APIs
mitmproxy2swagger is a tool that you can automatically reverse-engineer REST APIs by just running the apps and capturing the traffic.
17 views
Daily Writeups
⤷ Title: Porch Pirate: The most comprehensive Postman recon / OSINT client and framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 01:30:50 +0000
════════════════════════
⌗ Tags: #OSINT _ Open Source Intelligence #OSINT #Postman
Penetration Testing Tools
Porch Pirate: The most comprehensive Postman recon / OSINT client and framework
Porch Pirate started as a tool to quickly uncover Postman secrets, and has slowly begun to evolve into a multi-purpose reconnaissance / OSINT framework
25 views
Daily Writeups
⤷ Title: Critical Remote Code Execution Flaw Hits Lexmark Printers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:50:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_1127 #CVSS 9.1 #CWE_22 #CWE_362 #DEVCORE #firmware update #Lexmark #Path Traversal #Printer Vulnerability #Remote Code Execution #ZDI
Daily CyberSecurity
Critical Remote Code Execution Flaw Hits Lexmark Printers
Lexmark CVE-2025-1127 flaw allows remote code execution via embedded web server. Affects many printer models—patch firmware to version .240.206+ now.
12 views
Daily Writeups
⤷ Title: Critical CVSS 9.8 RCE Flaw in vLLM Exposes AI Hosts to Remote Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:43:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI security #CVE_2025_47277 #CVSS 9.8 #LLM infrastructure #PyNcclPipe #Python Pickle #Remote Code Execution #UC Berkeley #unsafe deserialization #vLLM
Daily CyberSecurity
Critical CVSS 9.8 RCE Flaw in vLLM Exposes AI Hosts to Remote Attacks
Critical CVSS 9.8 flaw in vLLM allows remote code execution via PyNcclPipe. Patch to 0.8.5 now to protect your AI infrastructure.
10 views
Daily Writeups
⤷ Title: Critical containerd Vulnerability: Malicious Images Can Hijack Host Filesystem
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:40:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #container #containerd #CVE_2025_47290 #docker #Kubernetes #security
Daily CyberSecurity
Critical containerd Vulnerability: Malicious Images Can Hijack Host Filesystem
A critical containerd flaw (CVE-2025-47290) allows malicious container images to hijack the host filesystem. Update to version 2.1.1 now.
11 views
Daily Writeups
⤷ Title: CISA Alerts: Vertiv Products Vulnerable to RCE, Auth Bypass (CVSS 9.8)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:37:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #CISA advisory #CVE_2025_41426 #CVE_2025_46412 #CVSS 9.8 #industrial cybersecurity #IS_UNITY #Liebert RDU101 #rce #Vertiv
Daily CyberSecurity
CISA Alerts: Vertiv Products Vulnerable to RCE, Auth Bypass (CVSS 9.8)
CISA warns of critical CVSS 9.8 flaws in Vertiv Liebert devices allowing RCE and auth bypass—patch now to protect OT environments.
10 views
Daily Writeups
⤷ Title: Hazy Hawk: Stealthy Threat Actor Hijacks High-Profile Subdomains
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:33:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CNAME hijacking #cybersecurity #DNS Security #Hazy Hawk #Subdomain takeover #threat actor
Daily CyberSecurity
Hazy Hawk: Stealthy Threat Actor Hijacks High-Profile Subdomains
Hazy Hawk is exploiting DNS misconfigurations and CNAME hijacking to take over subdomains of high-profile organizations for scams and malware.
14 views
Daily Writeups
⤷ Title: PoC Available: TP-Link Archer AX50 Flaw Allows Remote Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:29:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #Archer AX50 #CVE_2025_40634 #PoC #Remote Code Execution #router #security #stack_based buffer overflow #TP_Link
Daily CyberSecurity
PoC Available: TP-Link Archer AX50 Flaw Allows Remote Root Access
A critical vulnerability (CVE-2025-40634) in TP-Link Archer AX50 routers allows remote code execution as root. A public PoC increases the risk.
13 views
Daily Writeups
⤷ Title: High-Severity Privilege Escalation Threat Hits Atlassian Jira Data Center
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:25:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #Atlassian #CVE_2025_22157 #CVSS 7.2 #cybersecurity #Data Center #Jira #Jira Core #Jira Service Management #privilege escalation
Daily CyberSecurity
High-Severity Privilege Escalation Threat Hits Atlassian Jira Data Center
CVE-2025-22157 is a CVSS 7.2 Jira vulnerability allowing privilege escalation. Update Jira Data Center now to prevent unauthorized access.
13 views
Daily Writeups
⤷ Title: High Risk: PowerDNS DNSdist Flaw Allows Unauthenticated DoS Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:23:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_30193 #Denial of Service #dns #dnsdist #dos #security #unauthenticated
Daily CyberSecurity
High Risk: PowerDNS DNSdist Flaw Allows Unauthenticated DoS Attacks
A critical DNSdist vulnerability allows unauthenticated attackers to launch DoS attacks, disrupting DNS operations. Update now to secure your system.
12 views
Daily Writeups
⤷ Title: AI Scam Alert: Fake Kling AI Sites Deploy Infostealer, Hide Executables
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:19:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #AI #cybersecurity #filename masquerading #Infostealer #Kling AI #Malvertising #scam
Daily CyberSecurity
AI Scam Alert: Fake Kling AI Sites Deploy Infostealer, Hide Executables
Beware fake Kling AI sites! A new campaign uses deceptive filenames to trick users into downloading infostealers, stealing crypto and browser data.
8 views