Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Qu1cksc0pe: All-in-One malware analysis tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 01:45:21 +0000
════════════════════════
⌗ Tags: #Malware Defense
Penetration Testing Tools
Qu1cksc0pe: All-in-One malware analysis tool
Qu1cksc0pe aims to get even more information about suspicious files and helps user realize what that file is capable of.
20 views
Daily Writeups
⤷ Title: Crawlector: threat hunting framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:34:55 +0000
════════════════════════
⌗ Tags: #Data Forensics #Malware Defense #threat hunting framework
Penetration Testing Tools
Crawlector: threat hunting framework
Crawlector (Crawlector is a combination of Crawler & Detector) is a threat hunting framework designed for scanning websites for malicious objects.
15 views
Daily Writeups
⤷ Title: Apache Tomcat Flaw Allows Security Bypass on Case-Insensitive Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 01:52:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache Tomcat #CGI servlet #macOS #security bypass #web server #windows
Daily CyberSecurity
Apache Tomcat Flaw Allows Security Bypass on Case-Insensitive Systems
A low-severity flaw in Apache Tomcat (CVE-2025-46701) allows security constraint bypass via crafted URLs on case-insensitive file systems. Update now!
15 views
Daily Writeups
⤷ Title: Spring Cloud Gateway Vulnerability Exposes Applications to Header Injection Risks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 01:41:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #header spoofing #Spring Cloud Gateway #Spring Framework #trust boundary
Daily CyberSecurity
Spring Cloud Gateway Vulnerability Exposes Applications to Header Injection Risks
A critical Spring Cloud Gateway flaw allows header spoofing from untrusted proxies. Update to fix or disable forwarding.
14 views
Daily Writeups
⤷ Title: Critical (CVSS 9.8): IBM Tivoli Monitoring Flaw Risks Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:42:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #cybersecurity #IBM Tivoli Monitoring #rce #Remote Code Execution #security update
Daily CyberSecurity
Critical (CVSS 9.8): IBM Tivoli Monitoring Flaw Risks Remote Code Execution
A critical IBM Tivoli Monitoring flaw (CVSS 9.8) allows remote arbitrary code execution due to improper array validation. Update now.
11 views
Daily Writeups
⤷ Title: Warning: Fake AI Tools Spread CyberLock Ransomware and Numero Destructive Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:39:26 +0000
════════════════════════
⌗ Tags: #Malware #AI #CyberLock #cybersecurity #fake software #Infostealer #Lucky_Gh0$t #malware #Numero #ransomware
Daily CyberSecurity
Warning: Fake AI Tools Spread CyberLock Ransomware and Numero Destructive Malware
Threat actors are exploiting AI hype with fake software installers, delivering CyberLock ransomware, Lucky_Gh0$t, and the destructive Numero malware.
13 views
Daily Writeups
⤷ Title: ZITADEL Flaw: Host Header Injection Risks Account Takeover (Password Reset)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:33:30 +0000
════════════════════════
⌗ Tags: #Vulnerability #Account Takeover #cybersecurity #host header injection #MFA #password reset #security patch #ZITADEL
Daily CyberSecurity
ZITADEL Flaw: Host Header Injection Risks Account Takeover (Password Reset)
A ZITADEL vulnerability allows host header injection to hijack user accounts via password reset links. Update to 3.2.2+ or configure proxy.
15 views
Daily Writeups
⤷ Title: Spear-Phishing Alert: NetBird RAT Spreads via Deceptive Job Lures
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:30:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #cybersecurity #NetBird #phishing #rat #Remote Access Trojan #Rothschild & Co #social engineering #spear_phishing
Daily CyberSecurity
Spear-Phishing Alert: NetBird RAT Spreads via Deceptive Job Lures
A stealthy spear-phishing campaign uses fake Rothschild job offers to trick finance execs into installing NetBird RAT, gaining remote access.
14 views
Daily Writeups
⤷ Title: Critical Vulnerability (CVSS 9.3): Icinga 2 Flaw Risks Certificate Impersonation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:16:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #certificate impersonation #CVSS #Icinga 2 #monitoring system #openssl #security
Daily CyberSecurity
Critical Vulnerability (CVSS 9.3): Icinga 2 Flaw Risks Certificate Impersonation
A critical Icinga 2 vulnerability (CVSS 9.3) allows malicious certificate impersonation, affecting builds with older OpenSSL. Update now!
7 views
Daily Writeups
⤷ Title: APT41 Uses Google Calendar as Covert C2 in Stealthy Cyberespionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:13:13 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT41 #C2 #Cyberespionage #Google Calendar #Google Threat Intelligence #malware #state_sponsored #TOUGHPROGRESS
Daily CyberSecurity
APT41 Uses Google Calendar as Covert C2 in Stealthy Cyberespionage Campaign
APT41 is exploiting Google Calendar as a covert C2 channel in the TOUGHPROGRESS cyberespionage campaign, targeting government entities with stealthy malware.
12 views
Daily Writeups
⤷ Title: PureHVNC RAT Spreads Through Fake Job Offers and Multi-Stage Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:09:48 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Job Scam #malware #Obfuscation #phishing #PureHVNC #rat #social engineering
Daily CyberSecurity
PureHVNC RAT Spreads Through Fake Job Offers and Multi-Stage Obfuscation
A new global malware campaign delivers PureHVNC RAT via fake job offers and complex, multi-stage obfuscation, making detection extremely difficult.
14 views
Daily Writeups
⤷ Title: Security Alert: Multi Flaws in Kea DHCP Server Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:01:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #Data Leakage #ISC #Kea DHCP #network_security #Patch Now #privilege escalation #security advisory
Daily CyberSecurity
Security Alert: Multi Flaws in Kea DHCP Server Disclosed
ISC uncovers security flaws in its Kea DHCP server, including privilege escalation and data leakage. Update to Kea 2.4.2, 2.6.3, or 2.7.9 immediately.
11 views
Daily Writeups
⤷ Title: Crack Zip File password
════════════════════════
𐀪 Author: Mr Horbio
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:38:14 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #ethical_hacking #bug_bounty #pentesting
Medium
Crack Zip File password
This article describes to unlock your password protected zip file. This is very simple to crack the password of zip any kind of zip file.
15 views
Daily Writeups
⤷ Title: SOAR x EDR Integration for Automated Incident Alerting & Response: PART I
════════════════════════
𐀪 Author: Godspower Melariri-okwu
════════════════════════
ⴵ Time: Fri, 30 May 2025 01:11:33 GMT
════════════════════════
⌗ Tags: #security_engineering #cyber_security_projects #cybersecurity #automation #incident_response
Medium
SOAR x EDR Integration for Automated Incident Alerting & Response: PART I
Detailed walkthrough of how to integrate and EDR with messaging apps via SOAR
12 views
Daily Writeups
⤷ Title: Why is Edge Computing More Vulnerable, Yet Versatile?
════════════════════════
𐀪 Author: Rah Tech Wiz (she, her)
════════════════════════
ⴵ Time: Fri, 30 May 2025 01:01:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #firmware #best_practices #access_control #edge_computing
Medium
Why is Edge Computing More Vulnerable, Yet Versatile?
Edge Computing in Access Control: The Hidden Risks Every OEM Must Know 🔒💻
10 views
Daily Writeups
⤷ Title: Altreserve Review: How I Recovered My Lost Funds
════════════════════════
𐀪 Author: Lucy t. Gowan
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:32:29 GMT
════════════════════════
⌗ Tags: #this_happened_to_me #cryptocurrency #writing #cybersecurity #finance
Medium
Altreserve Review: How I Recovered My Lost Funds
After being scammed by Altreserve, I was left financially devastated and emotionally overwhelmed, with no clear path to recover my money…
11 views
Daily Writeups
⤷ Title: Octalyn Stealer: When Cybercriminals Go Open Source
════════════════════════
𐀪 Author: Brendan Smith
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:32:17 GMT
════════════════════════
⌗ Tags: #malware #cybersecurity #spyware #virus #malware_analysis
Medium
Octalyn Stealer: When Cybercriminals Go Open Source
Because apparently, even malware developers believe in sharing their code these days
16 views
Daily Writeups
⤷ Title: How I Recovered My Money from Ironwave Capital
════════════════════════
𐀪 Author: Alyssa Schmidt
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:22:38 GMT
════════════════════════
⌗ Tags: #cryptocurrency #space #writing #this_happened_to_me #cybersecurity
Medium
How I Recovered My Money from Ironwave Capital
After falling victim to a scam by Ironwave Capital, I was left both financially devastated and emotionally drained, unsure of how to get my…
13 views
Daily Writeups
⤷ Title: Fintxpert Review: How I Recovered My Lost Funds
════════════════════════
𐀪 Author: Michael E. Camara
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:15:01 GMT
════════════════════════
⌗ Tags: #ethereum #cryptocurrency #cybersecurity #space #this_happened_to_me
Medium
Fintxpert Review: How I Recovered My Lost Funds
After being scammed by Fintxpert, I was left financially and emotionally overwhelmed, with no clear path to recover my money. That’s when I…
12 views
Daily Writeups
⤷ Title: Additional risky behaviors in the Contec CMS8000
════════════════════════
𐀪 Author: Karambit.AI
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:14:12 GMT
════════════════════════
⌗ Tags: #patient_safety #sbob #cybersecurity #fda #medical_devices
Medium
Additional risky behaviors in the Contec CMS8000
The “backdoor” mentioned in our previous post is not the only function in the firmware that contains risky behaviors. The code does have…
22 views
Daily Writeups
⤷ Title: How I Recovered My Funds from Fintxpert
════════════════════════
𐀪 Author: Michael E. Camara
════════════════════════
ⴵ Time: Fri, 30 May 2025 00:12:48 GMT
════════════════════════
⌗ Tags: #this_happened_to_me #space #bitcoin #ethereum #cybersecurity
Medium
How I Recovered My Funds from Fintxpert
After falling victim to the Fintxpert scam, I found myself financially devastated and unsure of how to recover my losses. Thankfully, I…
21 views