Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: ChromeAlone: Stealthy Browser Implant Steals Sessions and Phishes for YubiKeys
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:59:35 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Browser Implant #ChromeAlone #Credential Theft #EDR Bypass #post_exploitation #Red Team Tool #SOCKS Proxy #WebAuthn Phishing
Penetration Testing Tools
ChromeAlone: Stealthy Browser Implant Steals Sessions and Phishes for YubiKeys
ChromeAlone is a stealthy browser implant providing EDR-resistant persistence, SOCKS proxying, session/credential theft, and WebAuthn phishing for security tokens.
25 views
Daily Writeups
⤷ Title: Sauron: Fast Active Directory Tool Maps Credential Privileges and Nested Groups in Seconds
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 03:42:55 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #AD Enumeration #Credential Context #cybersecurity #Group Policy #LDAP #post_exploitation #Red Team Tool #Sauron
Penetration Testing Tools
Sauron: Fast Active Directory Tool Maps Credential Privileges and Nested Groups in Seconds
Sauron is a fast AD tool for post-exploitation. It provides instant context on new credentials, resolving nested groups, OUs, GPO inheritance, and account metadata via LDAP.
10 views
Daily Writeups
⤷ Title: Unmasking Mythic: Kaspersky Reveals How to Detect the Stealthy Open-Source Post-Exploitation Framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:18:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #C2 framework #Cobalt Strike #kaspersky #Mythic #Network Detection #open source #post_exploitation #Suricata #UUID
Penetration Testing Tools
Unmasking Mythic: Kaspersky Reveals How to Detect the Stealthy Open-Source Post-Exploitation Framework
Researchers at Kaspersky Lab have published an in-depth study on how to detect the presence of Mythic within
16 views
Daily Writeups
⤷ Title: Silent Pivot: Exploiting SpeechRuntimeMove for Stealthy Lateral Movement via DCOM
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:57:03 +0000
════════════════════════
⌗ Tags: #Open Source Tool #COM Hijacking #DCOM #DLL Sideloading #Lateral Movement #post_exploitation #red teaming #Remote Registry #SpeechRuntime #Windows Security
Penetration Testing Tools
Silent Pivot: Exploiting SpeechRuntimeMove for Stealthy Lateral Movement via DCOM
SpeechRuntimeMove abuses DCOM and COM hijacking to execute code in an active user's session, bypassing the need for a full system takeover.
46 views
Daily Writeups
⤷ Title: The Admin’s Shadow: How Hackers Turned the Nezha Monitoring Tool into a Stealth RAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:38:40 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security 2025 #Evasion #Nezha #NT AUTHORITY\SYSTEM #Ontinue #open source #post_exploitation #Qualys #RAT #RMM Abuse #Root Access
Information Security News
The Admin’s Shadow: How Hackers Turned the Nezha Monitoring Tool into a Stealth RAT
Threat actors have begun repurposing a legitimate server monitoring tool as a ready-made platform for remotely controlling systems that have already been compromised. According to the Ontinue Cybe…
18 views
Daily Writeups
⤷ Title: The Ghost in the Machine: Master Stealth with the Orsted C2 Framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:44:26 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AMSI Evasion #Command and Control #cybersecurity #Go_lang #Ligolo_ng #Orsted C2 #Penetration Testing #post_exploitation #red teaming #Sandbox Deception
Penetration Testing Tools
The Ghost in the Machine: Master Stealth with the Orsted C2 Framework
Orsted C2 is a modular Go framework featuring sandbox deception, AMSI/ETW evasion, and native Ligolo-ng pivoting for advanced red team simulations.
36 views
Daily Writeups
⤷ Title: The Nim Shadow: Conquest C2 Redefines Stealth for 2026 Red Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:47:54 +0000
════════════════════════
⌗ Tags: #Open Source Tool #adversary simulation #Conquest C2 #Dear ImGui #evasion techniques #InfoSec 2026 #Monarch Agent #Nim Programming #Penetration Testing #post_exploitation #red teaming
Information Security News
The Nim Shadow: Conquest C2 Redefines Stealth for 2026 Red Teams
Conquest is a feature-rich, extensible and malleable command & control/post-exploitation framework developed for penetration testing and adversary simulation. Conquest’s team server, ope…
18 views
Daily Writeups
⤷ Title: Exploiting Redis and ROP: A Full Walkthrough of the Blackgate CTF Machine
════════════════════════
𐀪 Author: MGMK
════════════════════════
ⴵ Time: Sun, 01 Feb 2026 00:09:43 GMT
════════════════════════
⌗ Tags: #post_exploitation #security_assessments #misconfiguration #privilege_escalation #penetration_testing
Medium
Exploiting Redis and ROP: A Full Walkthrough of the Blackgate CTF Machine
In this write-up, we’ll walk through the exploitation of the Blackgate Linux machine. Initial access is achieved through a misconfigured…
30 views
Daily Writeups
⤷ Title: Invisible Intruder: “ShadowHS” Malware Weaponizes Hackshell on Linux
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:22:02 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #Cyble Research #Fileless attack #GSocket #Hackshell #Linux Malware #Memory injection #post_exploitation #ShadowHS #threat intelligence
Daily CyberSecurity
Invisible Intruder: "ShadowHS" Malware Weaponizes Hackshell on Linux
Cyble uncovers "ShadowHS," a fileless Linux malware weaponizing hackshell. It uses GSocket tunneling to evade firewalls and kill rival bots.
21 views
Daily Writeups
⤷ Title: Post-Exploitation Toolbox: 25 Commands from Foothold to Domain Admin Mastery
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 07:20:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #post_exploitation #domains #penetration_testing
Medium
Post-Exploitation Toolbox: 25 Commands from Foothold to Domain Admin Mastery
Ever landed a shell and hit that “now what?” moment? You’re not alone — most pentesters and ethical hackers admit post-exploitation is…
27 views