Daily Writeups
@Daily_Writeups
3.49K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.49K subscribers
Daily Writeups
⤷ Title: Hazy Hawk: Stealthy Threat Actor Hijacks High-Profile Subdomains
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:33:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CNAME hijacking #cybersecurity #DNS Security #Hazy Hawk #Subdomain takeover #threat actor
Daily CyberSecurity
Hazy Hawk: Stealthy Threat Actor Hijacks High-Profile Subdomains
Hazy Hawk is exploiting DNS misconfigurations and CNAME hijacking to take over subdomains of high-profile organizations for scams and malware.
14 views
Daily Writeups
⤷ Title: PoC Available: TP-Link Archer AX50 Flaw Allows Remote Root Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:29:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #Archer AX50 #CVE_2025_40634 #PoC #Remote Code Execution #router #security #stack_based buffer overflow #TP_Link
Daily CyberSecurity
PoC Available: TP-Link Archer AX50 Flaw Allows Remote Root Access
A critical vulnerability (CVE-2025-40634) in TP-Link Archer AX50 routers allows remote code execution as root. A public PoC increases the risk.
13 views
Daily Writeups
⤷ Title: High-Severity Privilege Escalation Threat Hits Atlassian Jira Data Center
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:25:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #Atlassian #CVE_2025_22157 #CVSS 7.2 #cybersecurity #Data Center #Jira #Jira Core #Jira Service Management #privilege escalation
Daily CyberSecurity
High-Severity Privilege Escalation Threat Hits Atlassian Jira Data Center
CVE-2025-22157 is a CVSS 7.2 Jira vulnerability allowing privilege escalation. Update Jira Data Center now to prevent unauthorized access.
13 views
Daily Writeups
⤷ Title: High Risk: PowerDNS DNSdist Flaw Allows Unauthenticated DoS Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:23:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_30193 #Denial of Service #dns #dnsdist #dos #security #unauthenticated
Daily CyberSecurity
High Risk: PowerDNS DNSdist Flaw Allows Unauthenticated DoS Attacks
A critical DNSdist vulnerability allows unauthenticated attackers to launch DoS attacks, disrupting DNS operations. Update now to secure your system.
12 views
Daily Writeups
⤷ Title: AI Scam Alert: Fake Kling AI Sites Deploy Infostealer, Hide Executables
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:19:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #AI #cybersecurity #filename masquerading #Infostealer #Kling AI #Malvertising #scam
Daily CyberSecurity
AI Scam Alert: Fake Kling AI Sites Deploy Infostealer, Hide Executables
Beware fake Kling AI sites! A new campaign uses deceptive filenames to trick users into downloading infostealers, stealing crypto and browser data.
8 views
Daily Writeups
⤷ Title: Is Your Unix Automation Secure? Critical Broadcom Flaw Poses High Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:14:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #Automation #Broadcom #Cyber Threat #privilege escalation #security #Unix
Daily CyberSecurity
Is Your Unix Automation Secure? Critical Broadcom Flaw Poses High Risk
A critical flaw in Broadcom's Automic Automation Agent for Unix exposes systems to privilege escalation. Check your version and update to stay secure.
11 views
Daily Writeups
⤷ Title: Microsoft Resolves Windows 10/11 Secure Boot Conflict with Linux UEFI
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:11:20 +0000
════════════════════════
⌗ Tags: #Windows #compatibility #dual_boot #Linux #SBAT #Secure Boot #UEFI #Windows 10 #Windows 11
Daily CyberSecurity
Microsoft Resolves Windows 10/11 Secure Boot Conflict with Linux UEFI
Microsoft's May update addresses the conflict between Secure Boot Advanced Targeting and Linux UEFI, resolving dual-boot startup failures.
18 views
Daily Writeups
⤷ Title: Critical OpenPGP.js Flaw Allows Message Signature Spoofing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:09:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_47934 #encryption #messaging #OpenPGP.js #security #signature spoofing
Daily CyberSecurity
Critical OpenPGP.js Flaw Allows Message Signature Spoofing
A critical OpenPGP.js flaw (CVE-2025-47934) allows attackers to spoof message signatures and manipulate content. Update to fix this risk.
9 views
Daily Writeups
⤷ Title: North Korea-Linked Saja Network Infiltrates Tech Firms with Fake Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:05:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #cybersecurity #employment scam #fake profiles #North Korea #Saja Network
Daily CyberSecurity
North Korea-Linked Saja Network Infiltrates Tech Firms with Fake Developers
A sophisticated North Korea-linked employment scam, the Saja Network, is using fake developer profiles to infiltrate tech companies.
9 views
Daily Writeups
⤷ Title: How I Earned my Second Bounty of €2000 by Discovering an Authorization Bypass Vulnerability in a…
════════════════════════
𐀪 Author: Risky
════════════════════════
ⴵ Time: Wed, 21 May 2025 01:29:26 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty
Medium
💰How I Earned my Second Bounty of €2000 by Discovering an Authorization Bypass Vulnerability in a Document Management Platform
In this blog, I’ll walk you through my second successful bug bounty, a critical Authorization Bypass File Read vulnerability I discovered…
12 views
Daily Writeups
⤷ Title: $2,400 in 60 Minutes: Hacking a Management Backend by Tweaking a Single Response Packet
════════════════════════
𐀪 Author: Invik
════════════════════════
ⴵ Time: Wed, 21 May 2025 01:23:39 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_security #pentesting #bounty_program #hacker
Medium
$2,400 in 60 Minutes: Hacking a Management Backend by Tweaking a Single Response Packet
It’s been a while since I last updated. I recently encountered an interesting vulnerability, so I thought I’d share it with you all.
12 views
Daily Writeups
⤷ Title: I Slipped an Item Into a Stranger’s Cart(Well, Almost)
════════════════════════
𐀪 Author: Nizar Kadiri
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:54:11 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #cybersecurity #infosec_write_ups
Medium
I Slipped an Item Into a Stranger’s Cart(Well, Almost)
It started the same way most bug bounty journeys begin — with a bit of curiosity, a browser & a proxy, and way too much coffee.
15 views
Daily Writeups
⤷ Title: Getting Started with Internal Active Directory Testing (No Initial Access)
════════════════════════
𐀪 Author: codesterzz
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:40:03 GMT
════════════════════════
⌗ Tags: #offensive_security #hacking #cybersecurity
Medium
Getting Started with Internal Active Directory Testing (No Initial Access)
Getting started with on-prem Active Directory testing can feel overwhelming at first. If you’re looking to break into AD (and cloud down…
14 views
Daily Writeups
⤷ Title: My Experience with Ethical Hacking: A Journey into Cybersecurity
════════════════════════
𐀪 Author: Yadwinder Kooner
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:34:18 GMT
════════════════════════
⌗ Tags: #technology #hacking #advacement #deep_learning #ethical_hacking
Medium
My Experience with Ethical Hacking: A Journey into Cybersecurity
Hey, everyone! I recently delved into the fascinating world of ethical hacking, and I can’t wait to share what I’ve learned with you. It’s…
16 views
Daily Writeups
⤷ Title: Finish Strong Lolos Seleksi Bootcamp ID-Networkers Cyber Security Engineers
════════════════════════
𐀪 Author: Raja Muhammad Kurnia Setyawan
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:09:50 GMT
════════════════════════
⌗ Tags: #ctf #ctf_writeup #cybersecurity #learning #hacking
Medium
Finish Strong Lolos Seleksi Bootcamp ID-Networkers Cyber Security Engineers
Hai kawan-kawan Medium, apakabar? Semoga kalian sehat selalu dan di berikan kelancaran dalam setiap aktifitas nya. Oh yaa sesuai janji saya…
13 views
Daily Writeups
⤷ Title: Cybersecurity Understanding and Network Triage (CUNT) Certification
════════════════════════
𐀪 Author: Edgar Huemac Sanchez Hernandez
════════════════════════
ⴵ Time: Wed, 21 May 2025 00:32:32 GMT
════════════════════════
⌗ Tags: #infosec #certification
Medium
Cybersecurity Understanding and Network Triage (CUNT) Certification
Today’s topic: certifications. 
Those blessed scrolls handed down from the cybersecurity Olympus to the mortals desperate for LinkedIn…
12 views
Daily Writeups
⤷ Title: Lessons from the Field: Working with Cribl in a Modern Security Stack
════════════════════════
𐀪 Author: Kyle Barbre
════════════════════════
ⴵ Time: Tue, 20 May 2025 20:32:30 GMT
════════════════════════
⌗ Tags: #log_management #infosec #cybersecurity #information_security #cyber_security_awareness
Medium
🛠 Lessons from the Field: Working with Cribl in a Modern Security Stack
By Kyle Barbre This story was written by the author with the help of AI-assisted editing tools.
13 views
Daily Writeups
⤷ Title: Light comes through the forest and guides the way.
숲 사이로 빛이 들어와 그 길을 인도하다.
════════════════════════
𐀪 Author: 이상덕 (KOREA Republic of)
════════════════════════
ⴵ Time: Wed, 21 May 2025 01:56:05 GMT
════════════════════════
⌗ Tags: #work #lifestyle #spirituality #culture #cybersecurity
Medium
Light comes through the forest and guides the way. 숲 사이로 빛이 들어와 그 길을 인도하다.
Member-only story
16 views
Daily Writeups
⤷ Title: The Trump administration is a global issue, but the citizens should have faith and show trust.
════════════════════════
𐀪 Author: 이상덕 (KOREA Republic of)
════════════════════════
ⴵ Time: Wed, 21 May 2025 01:48:14 GMT
════════════════════════
⌗ Tags: #lifestyle #flutter #cybersecurity #ios #work
Medium
The Trump administration is a global issue, but the citizens should have faith and show trust.
Member-only story
21 views
Daily Writeups
⤷ Title: HTB Solution: SMTP
════════════════════════
𐀪 Author: Nabin Saru
════════════════════════
ⴵ Time: Wed, 21 May 2025 01:31:32 GMT
════════════════════════
⌗ Tags: #htb #cybersecurity #smtp #htb_academy #solutions
Medium
HTB Solution: SMTP
Solution for the Footprinting: SMTP module.
23 views
Daily Writeups
⤷ Title: THM — Incident Handing with Splunk
════════════════════════
𐀪 Author: Shamar Isaac
════════════════════════
ⴵ Time: Wed, 21 May 2025 01:25:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #learning
Medium
THM — Incident Handing with Splunk
Scenario:
24 views