Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.56K subscribers

2 photos

130K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.56K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Tue, 10 Oct 2023 07:38:35 GMT
———————————————
✏️Title: Simple Mail Transfer Protocol
———————————————
📎Link: https://medium.com/p/5ae7e6089c3e
———————————————
Tags: #cybersecurity #smtp

Simple Mail Transfer Protocol

Simple Mail Transfer Protocol(SMTP), bir IP ağında e-posta göndermek için kullanılan bir protokoldür. İki SMTP sunucusu arasında ya da…

14 views08:02

⤷ Title: PII Exposure: The Data Heist You Never Knew Was Possible!
════════════════════════
𐀪 Author: th3.d1p4k
════════════════════════
ⴵ Time: Wed, 05 Feb 2025 06:09:14 GMT
════════════════════════
⌗ Tags: #misconfiguration #hacking #bug_bounty #smtp #api

PII Exposure: The Data Heist You Never Knew Was Possible!

Hey there, fellow security enthusiasts! Today, we’re going to talk about something that might blow your mind. How an SMTP conversation can…

42 views07:03

⤷ Title: Networking Core Protocols
════════════════════════
𐀪 Author: Demegorash
════════════════════════
ⴵ Time: Mon, 10 Feb 2025 00:15:48 GMT
════════════════════════
⌗ Tags: #smtp #cybersecurity #whois #ftp

Networking Core Protocols

Learn about the core TCP/IP protocols.

26 views01:04

⤷ Title: Starting My CodePath Cybersecurity Journey: Hands-On Learning with Real-World Security Challenges
════════════════════════
𐀪 Author: Mateo Flores
════════════════════════
ⴵ Time: Mon, 24 Feb 2025 02:10:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #wireshark #smtp #ethical_hacking #pcap_analysis

Starting My CodePath Cybersecurity Journey: Hands-On Learning with Real-World Security Challenges

February 2025 | By Mateo Flores

77 views03:05

⤷ Title: Dorking My Way In: How I Uncovered Mail Server Flaws
════════════════════════
𐀪 Author: Ganesh Balaji V
════════════════════════
ⴵ Time: Fri, 07 Mar 2025 23:57:11 GMT
════════════════════════
⌗ Tags: #email #cybersecurity #smtp #openrelay #ethical_hacking

Dorking My Way In: How I Uncovered Mail Server Flaws 💡

During my recent research on Google dorking and email protocols, I stumbled upon an intriguing question: Is it possible to combine the…

26 views00:04

⤷ Title: ️‍♂️ How I Got Access to a UK Government Organization’s SMTP Server?
════════════════════════
𐀪 Author: B4LOGI
════════════════════════
ⴵ Time: Sun, 30 Mar 2025 17:40:24 GMT
════════════════════════
⌗ Tags: #infosec #unauthorized #smtp_server #cybersecurity

🕵️‍♂️ How I Got Access to a UK Government Organization’s SMTP Server? 📧🚨

While researching Google Dorking over my favorite cup of coffee ☕, I stumbled upon something unexpected — an exposed mail server belonging…

30 views18:04

⤷ Title: How I Found an SMTP Injection Bug & Earned $800 in Just 30 Minutes!
════════════════════════
𐀪 Author: TheIndianNetwork
════════════════════════
ⴵ Time: Wed, 02 Apr 2025 06:42:02 GMT
════════════════════════
⌗ Tags: #smtp_injection #bug_bounty #email_spoofing #bug_bounty_tips #smtp

How I Found an SMTP Injection Bug & Earned $800 in Just 30 Minutes!

Bug bounty hunting is full of surprises, and sometimes, the easiest vulnerabilities can pay the most. This is the story of how I stumbled…

12 views08:04

⤷ Title: Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 02 May 2025 00:20:40 +0000
════════════════════════
⌗ Tags: #Malware #Command and Control #gmail #malware #PyPI #Python #SMTP tunneling #Socket #supply chain attack

Daily CyberSecurity

Malicious Python Packages Exploited Gmail as Covert Command-and-Control Channels

Socket discovers Python packages abusing Gmail SMTP for covert C2 tunnels, evading firewalls and exfiltrating data through trusted email infrastructure.

17 views16:04

⤷ Title: HTB Solution: SMTP
════════════════════════
𐀪 Author: Nabin Saru
════════════════════════
ⴵ Time: Wed, 21 May 2025 01:31:32 GMT
════════════════════════
⌗ Tags: #htb #cybersecurity #smtp #htb_academy #solutions

HTB Solution: SMTP

Solution for the Footprinting: SMTP module.

23 views02:05

⤷ Title: Postfish (Proving Grounds) — OSEP-Focused Write-Up
════════════════════════
𐀪 Author: Amatheusfeitosam
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 01:29:33 GMT
════════════════════════
⌗ Tags: #linux_priv_esc #proving_grounds_practice #penetration_testing #smtp_server #post_exploitation

Postfish (Proving Grounds) — OSEP-Focused Write-Up

Goal: Document a realistic and practical approach aligned with the OSEP mindset. Focused on post-exploitation, lateral movement, and…

22 views03:04

⤷ Title: Internal Penetration Test Report
════════════════════════
𐀪 Author: Amatheusfeitosam
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 14:19:35 GMT
════════════════════════
⌗ Tags: #smtp #penetration_testing #cybersecurity #kali #linux_privesc

Internal Penetration Test Report

Initial Access & Enumeration — SMTP Vuln

21 views15:04

⤷ Title: Opossum Attack: New Vulnerability Compromises Encrypted TLS Connections, Allowing MitM & Data Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 10 Jul 2025 00:26:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cybersecurity #Desynchronization #FTP #http #Man in the Middle #mitm #Opossum Attack #Opportunistic TLS #SMTP #tls #Transport Layer Security #Vulnerability

Daily CyberSecurity

Opossum Attack: New Vulnerability Compromises Encrypted TLS Connections, Allowing MitM & Data Injection

The Opossum Attack is a new desynchronization flaw exploiting implicit/opportunistic TLS in protocols like HTTP, allowing MitM to compromise encrypted connections. Over 3M servers affected.

15 views01:04

⤷ Title: Opossum Attack: New TLS Flaw Injects Malicious Data Into Encrypted Sessions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:23:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Encryption #ftp #HTTP #man_in_the_middle #Opossum #POP3 #security flaw #SMTP #TLS #vulnerability

Penetration Testing Tools

Opossum Attack: New TLS Flaw Injects Malicious Data Into Encrypted Sessions

A new TLS vulnerability, "Opossum," allows attackers to inject malicious messages into encrypted sessions by desynchronizing client and server views.

14 views05:04

⤷ Title: Urgent Sophos Firewall Update: Two Critical RCE Flaws (CVE-2025-6704, CVE-2025-7624) Patched via Hotfixes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 02:07:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_6704 #CVE_2025_7624 #cybersecurity #HA Mode #Hotfix #rce #Remote Code Execution #SMTP Proxy #Sophos Firewall #SPX #Vulnerability

Daily CyberSecurity

Urgent Sophos Firewall Update: Two Critical RCE Flaws (CVE-2025-6704, CVE-2025-7624) Patched via Hotfixes

Sophos patched five flaws in Sophos Firewall, including two critical RCEs (CVE-2025-6704, CVE-2025-7624) allowing remote attackers to take control under specific conditions.

8 views03:04

⤷ Title: ✉️SMTP Enumeration: The Ethical Hacker’s Guide to Uncovering Email Vulnerabilities
════════════════════════
𐀪 Author: Rajkumar Kumawat
════════════════════════
ⴵ Time: Sat, 02 Aug 2025 15:21:40 GMT
════════════════════════
⌗ Tags: #smtp #penetration_testing #red_team #ethical_hacking #cybersecurity

✉️SMTP Enumeration: The Ethical Hacker’s Guide to Uncovering Email Vulnerabilities

By Rajkumar Kumawat 🔗 GitHub: Rjkumarkumawat

79 views17:05

⤷ Title: Broadcom Fixes Multiple VMware vCenter and NSX Vulnerabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 30 Sep 2025 02:04:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Broadcom #CVE_2025_41250 #cybersecurity #NSX #security update #SMTP Header Injection #Username Enumeration #vCenter #vmware

Daily CyberSecurity

Broadcom Fixes Multiple VMware vCenter and NSX Vulnerabilities

Broadcom patches three vulnerabilities in VMware vCenter and NSX. The flaws could lead to SMTP header injection and username enumeration, increasing the risk of unauthorized access.

25 views04:04

⤷ Title: Room 109-SMTP: The Hidden Recon Goldmine Every Hacker Uses
════════════════════════
𐀪 Author: blackXmask
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 19:30:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #viral #hacking #smtp_server #reconnaissance

Room 109-SMTP: The Hidden Recon Goldmine Every Hacker Uses

A beginner‑friendly guide covering how SMTP works, why it’s still used today, and how attackers leverage VRFY/EXPN, open relays, and…

19 views20:04

⤷ Title: Phantom v3.5 Alert: New Info-Stealer Disguised as Adobe Update Uses SMTP to Loot Digital Lives
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 19 Dec 2025 00:11:31 +0000
════════════════════════
⌗ Tags: #Malware #Adobe Installer #Credential Theft #crypto wallet #info_stealer #JavaScript malware #K7 Security Labs #malware #Phantom Stealer #powershell #SMTP Exfiltration

Daily CyberSecurity

Phantom v3.5 Alert: New Info-Stealer Disguised as Adobe Update Uses SMTP to Loot Digital Lives

Phantom v3.5 info-stealer targets passwords and crypto via a fake Adobe installer. It uses SMTP to exfiltrate data directly to attackers.

16 views04:04

⤷ Title: Exim’s Poisoned Record: How a Failed Patch and SQL Injection Lead to Critical Heap Overflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:43:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_67896 #Exim #Heap Buffer Overflow #Mail Transfer Agent #memory corruption #NIST #Ratelimit ACL #SMTP Security #sql injection #SQLite

Daily CyberSecurity

Exim’s Poisoned Record: How a Failed Patch and SQL Injection Lead to Critical Heap Overflows

NIST warns of a critical Exim 4.99 flaw. A failed SQLi patch allows attackers to poison SQLite records and trigger a 1.5MB heap buffer overflow.

12 views02:04