Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Crocodilus Trojan Evolves: Android Malware Goes Global with New Seed Phrase Stealer and Contact Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:35:25 +0000
════════════════════════
⌗ Tags: #Malware #android #Banking Trojan #Crocodilus #cryptocurrency #Cybercrime #malware #mobile security #Seed Phrase Stealer #ThreatFabric
Daily CyberSecurity
Crocodilus Trojan Evolves: Android Malware Goes Global with New Seed Phrase Stealer and Contact Injection
Crocodilus, a rapidly evolving Android banking trojan, now targets global users, stealing crypto seed phrases and bypassing defenses.
10 views
Daily Writeups
⤷ Title: Samba Security Alert: Stale Group Data Poses Risk in Kerberos SMB Sessions, No Patch!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:30:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication #Group Membership #Kerberos #samba #security #smb
Daily CyberSecurity
Samba Security Alert: Stale Group Data Poses Risk in Kerberos SMB Sessions, No Patch!
Samba vulnerability (CVE-2025-0620) exposes stale group data in Kerberos SMB sessions. Learn how this impacts security and mitigation.
19 views
Daily Writeups
⤷ Title: Alert: Malicious RubyGems Impersonate Fastlane Plugins, Steal CI/CD Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:24:29 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD #cybersecurity #Fastlane #malware #RubyGems #Software security #supply chain attack #Telegram #Typosquatting #Vietnam
Daily CyberSecurity
Alert: Malicious RubyGems Impersonate Fastlane Plugins, Steal CI/CD Data
Socket uncovers malicious RubyGems impersonating Fastlane plugins, stealing sensitive CI/CD data by rerouting Telegram API calls. Beware of fastlane-plugin-telegram-proxy!
14 views
Daily Writeups
⤷ Title: AI Interface Hijacked: Open WebUI Exploited for Cryptominers and Stealthy AI Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:19:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #AI #cryptomining #cybersecurity #Infostealer #LLM #malware #Open WebUI #Software Supply Chain #Sysdig #threat research
Daily CyberSecurity
AI Interface Hijacked: Open WebUI Exploited for Cryptominers and Stealthy AI Malware
Sysdig uncovers a campaign exploiting misconfigured Open WebUI instances to deploy AI-assisted cryptominers and infostealers, showcasing new threat vectors.
16 views
Daily Writeups
⤷ Title: New WordPress Malware Masquerades as Legit Plugin with Data Exfiltration and RCE Capabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:13:47 +0000
════════════════════════
⌗ Tags: #Malware #administrator credentials #cybersecurity #data exfiltration #malware #plugin #Remote Code Execution #Website Security #Wordfence #wordpress
Daily CyberSecurity
New WordPress Malware Masquerades as Legit Plugin with Data Exfiltration and RCE Capabilities
Wordfence uncovers a sophisticated WordPress malware disguised as a legitimate plugin, stealing admin credentials & enabling remote code execution.
18 views
Daily Writeups
⤷ Title: New npm Packages Exposed: Crypto Drainers Targeting BSC & Ethereum Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:06:05 +0000
════════════════════════
⌗ Tags: #Malware #Binance Smart Chain #crypto exploit #cryptocurrency #Ethereum #javascript #malware #npm #security #supply chain attack
Daily CyberSecurity
New npm Packages Exposed: Crypto Drainers Targeting BSC & Ethereum Wallets
Socket discovers 4 malicious npm packages designed to drain crypto wallets on BSC & Ethereum, downloaded over 2,100 times.
13 views
Daily Writeups
⤷ Title: Identifying the AWS Account ID from a Public S3 Bucket (ACRTP)
════════════════════════
𐀪 Author: Makayla Ferrell
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:46:16 GMT
════════════════════════
⌗ Tags: #red_team #s3 #cybersecurity #hacking #aws
Medium
Identifying the AWS Account ID from a Public S3 Bucket (ACRTP)
This is a walkthrough of the Identifying the AWS Account ID from a Public S3 Bucket lab from PwnedLabs, which is part of the Amazon Cloud…
18 views
Daily Writeups
⤷ Title: Looting Public EBS Snapshots (ACRTP)
════════════════════════
𐀪 Author: Makayla Ferrell
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:27:06 GMT
════════════════════════
⌗ Tags: #aws #hacking #ec2 #red_team #cybersecurity
Medium
Looting Public EBS Snapshots (ACRTP)
This is a walkthrough of the Looting Public EBS Snapshots lab from PwnedLabs, which is part of the Amazon Cloud Red Team Professional…
18 views
Daily Writeups
⤷ Title: ACRTP: Hunting for Secrets in Git Repos
════════════════════════
𐀪 Author: Makayla Ferrell
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:43:41 GMT
════════════════════════
⌗ Tags: #aws #git #hacking #red_team #cybersecurity
Medium
Hunting for Secrets in Git Repos (ACRTP)
This is a walkthrough of the “Hunting for Secrets in Git Repos” lab from PwnedLabs. This lab is a CTF style challenge that focuses on…
13 views
Daily Writeups
⤷ Title: Ketika Hacker Menyerang Pembangkit Listrik: Kisah Nyata Ancaman di Dunia ICS/SCADA
════════════════════════
𐀪 Author: RootKitty7
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:36:02 GMT
════════════════════════
⌗ Tags: #scada #industrial #ci #infosec #cybersecurity
Medium
Ketika Hacker Menyerang Pembangkit Listrik: Kisah Nyata Ancaman di Dunia ICS/SCADA
Bayangkan ini: Sebuah kota tiba-tiba gelap gulita. Pompa air berhenti mengalir. Lalu lintas kacau karena lampu merah mati. Pabrik berhenti…
13 views
Daily Writeups
⤷ Title: Panduan Lengkap Hardening SSH di Linux: Kunci Server Anda dari Serangan Brute Force
════════════════════════
𐀪 Author: RootKitty7
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:53:33 GMT
════════════════════════
⌗ Tags: #server_security #sshhardening #servers #cybersecurity #linux
Medium
Panduan Lengkap Hardening SSH di Linux: Kunci Server Anda dari Serangan Brute Force
Bayangkan ini: Suatu pagi, Anda menerima notifikasi bahwa server Anda dihack. Setelah diperiksa, ternyata ada 1.000.000 percobaan login SSH…
17 views
Daily Writeups
⤷ Title: Defining Your Protect Surface
════════════════════════
𐀪 Author: Rob Forbes
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:25:18 GMT
════════════════════════
⌗ Tags: #zero_trust #cybersecurity #zero_trust_security
Medium
🔐 Defining Your Protect Surface
The First Stumbling Block to Actually Implementing Zero Trust
16 views
Daily Writeups
⤷ Title: CryptoBreaker
════════════════════════
𐀪 Author: EdCho
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:16:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #it #computer_science
Medium
CryptoBreaker 🔓💻
An advanced web-based decryption tool to easily crack encryption methods like Base64, AES, RSA, and more
15 views
Daily Writeups
⤷ Title: Mastering Nmap: A Deep Dive into Network Scanning Techniques — Part 1
════════════════════════
𐀪 Author: Seshu
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:15:17 GMT
════════════════════════
⌗ Tags: #nmap_command #nmap #penetration_testing #cybersecurity #nmap_scan
Medium
Mastering Nmap: A Deep Dive into Network Scanning Techniques — Part 1
Hey , cybersecurity folks! I’m excited to share a detailed Detailed Guide on the Use of Nmap with Various Flags— Part 1 from identifying…
19 views
Daily Writeups
⤷ Title: ThreatLens: Building a Real-World Threat Intelligence Dashboard with Python & Flask
════════════════════════
𐀪 Author: Teshera Kimbrough
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:56:39 GMT
════════════════════════
⌗ Tags: #open_source #python #cybersecurity #threat_intelligence #flask
Medium
ThreatLens: Building a Real-World Threat Intelligence Dashboard with Python & Flask
A practical walkthrough of creating a professional-grade threat intelligence tool from scratch
26 views
Daily Writeups
⤷ Title: CIOs Under Pressure: 5 Challenges to Tackle in 2025
════════════════════════
𐀪 Author: Eddy AZEBAZE
════════════════════════
ⴵ Time: Tue, 03 Jun 2025 23:57:19 GMT
════════════════════════
⌗ Tags: #digital_transformation #it_strategy #cio #cybersecurity #ai_governance
Medium
CIOs Under Pressure: 5 Challenges to Tackle in 2025
In 2025, the role of CIO has never been more critical or more exposed.  Faced with rising cyber risks, AI adoption pressure, talent…
38 views
Daily Writeups
⤷ Title: Actively Exploited Qualcomm GPU Zero-Days Added to CISA’s KEV Catalog
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 02:55:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adreno #android #CISA #CVE_2025_21479 #CVE_2025_21480 #exploitation #GPU #KEV #memory corruption #mobile security #Qualcomm #use after free #Vulnerability #zero_day
Daily CyberSecurity
Actively Exploited Qualcomm GPU Zero-Days Added to CISA's KEV Catalog
CISA adds 3 actively exploited Qualcomm Adreno GPU flaws to KEV catalog. Android devices at risk from memory corruption and use-after-free bugs.
29 views
Daily Writeups
⤷ Title: Unpatched Telecom Flaws (CVSS 9.8) Enable Remote Code Execution: Critical Buffer Overflows Expose Core Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 02:20:22 +0000
════════════════════════
⌗ Tags: #Vulnerability #AudioCodes #Critical Infrastructure #CVSS #cybersecurity #Memory Leak #rce #Remote Code Execution #RTOS #Sangoma #telecom #unpatched
Daily CyberSecurity
Unpatched Telecom Flaws (CVSS 9.8) Enable Remote Code Execution: Critical Buffer Overflows Expose Core Infrastructure
Two unpatched CVSS 9.8 flaws in telecom gear enable remote code execution via buffer overflows, exposing critical infrastructure to attack.
16 views
Daily Writeups
⤷ Title: OWASP Top 10 —
════════════════════════
𐀪 Author: Badal kathayat
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 03:40:57 GMT
════════════════════════
⌗ Tags: #vulnerability #sql_injection #owasp_top_10 #bug_bounty #owasp
Medium
🚨 OWASP Top 10 —
1. SQL Injection
18 views
Daily Writeups
⤷ Title: Again I Found more than 10+ : Target Info, Vulnerability Description, Steps to Reproduce & POC.
════════════════════════
𐀪 Author: Ravindra
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 03:23:51 GMT
════════════════════════
⌗ Tags: #bug_bounty #cyber_security_awareness #bug_bounty_tips #bug_bounty_writeup #bugs
Medium
Again I Found more than 10+ : Target Info, Vulnerability Description, Steps to Reproduce & POC.
Okay! so i don’t want to waste your time to introduce myself. Then we can directly jump into the point.
15 views
Daily Writeups
⤷ Title: Bypassing CAPTCHA to Unleash Brute-force, A Pentester’s Approach
════════════════════════
𐀪 Author: Ehxb
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 02:28:19 GMT
════════════════════════
⌗ Tags: #captcha #python #hacking #technology #ctf_writeup
Medium
Bypassing CAPTCHA to Unleash Brute-force- A Pentester’s Approach
In this write-up, we explore how CAPTCHA works as a security mechanism and how it is commonly used to prevent automated attacks such as…
27 views