Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: A (not so) Unexpected Journey: Building My First Home Lab, Part 3
════════════════════════
𐀪 Author: Chris C.
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 22:26:54 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
A (not so) Unexpected Journey: Building My First Home Lab, Part 3
Very minor update
19 views
Daily Writeups
⤷ Title: How Attackers Are Weaponizing Open Redirects in 2025
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 22:16:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability #networking #careers #technology
Medium
How Attackers Are Weaponizing Open Redirects in 2025
From phishing campaigns to OAuth hijacking, open redirects have evolved into powerful tools in an attacker’s arsenal.
16 views
Daily Writeups
⤷ Title: Regulatory Compliance for Global Critical Infrastructure:
════════════════════════
𐀪 Author: A-STAR7_DOCTOR
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 22:09:44 GMT
════════════════════════
⌗ Tags: #technology #business #data_science #programming #cybersecurity
Medium
Regulatory Compliance for Global Critical Infrastructure:
Harmonizing NIST, NERC-CIP, ISA/IEC 62443, ISO 27019, and GDPR in a Fractured World
14 views
Daily Writeups
⤷ Title: Hardening Linux untuk Pemula: Biar Server Kamu Nggak Jadi Tumbal
════════════════════════
𐀪 Author: Ahmad Ubaidillah
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 22:06:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #idnbootcampcyber #hacker
Medium
Hardening Linux untuk Pemula: Biar Server Kamu Nggak Jadi Tumbal
Linux itu keren. Stabil, gratis, open source, dan bisa dijadikan apa saja, dari server game, web, sampai tempat nyimpen skrip curian (eh)…
16 views
Daily Writeups
⤷ Title: OHSINT WALKTHROUGH : TRYHACKME
════════════════════════
𐀪 Author: rizzziom
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 22:32:09 GMT
════════════════════════
⌗ Tags: #ctf_writeup #tryhackme #penetration_testing #ctf #tryhackme_walkthrough
Medium
OHSINT WALKTHROUGH : TRYHACKME
To access the room, click on the link given below:
17 views
Daily Writeups
⤷ Title: OneNote Malware Analysis
════════════════════════
𐀪 Author: Iram Jack
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 22:32:09 GMT
════════════════════════
⌗ Tags: #dynamic_analysis #miss_robot #tryhackme #malware_analysis #static_analysis
Medium
OneNote Malware Analysis
Malicious Documents | Part 5
31 views
Daily Writeups
⤷ Title: Easy Peasy — TryHackMe
════════════════════════
𐀪 Author: Yulia Popov
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 21:25:35 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #easy_peasy_tryhackme #easypeasy #tryhackme #tryhackme_walkthrough
Medium
Easy Peasy — TryHackMe
The Easy Peasy machine on TryHackMe is designed for beginners and includes basic challenges in Web attacks and privilege escalation. It…
31 views
Daily Writeups
⤷ Title: kubestalk: discovers Kubernetes and related infrastructure based attack surface
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:18:15 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Vulnerability Assessment #discover Kubernetes #kubestalk
Penetration Testing Tools
kubestalk: discovers Kubernetes and related infrastructure based attack surface
KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective.
35 views
Daily Writeups
⤷ Title: SupplyShield: Fortify Your Software Supply Chain
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:14:24 +0000
════════════════════════
⌗ Tags: #Code Assessment #Vulnerability Assessment #application security #AppSec #Container Security #DevSecOps #open source security #software supply chain security #supply chain orchestration #vulnerability management
Penetration Testing Tools
SupplyShield: Fortify Your Software Supply Chain
Secure your software supply chain with SupplyShield, an open-source AppSec orchestration framework. Automate vulnerability detection, prioritization, and resolution for dependencies and containers.
21 views
Daily Writeups
⤷ Title: Critical Flaws in Acronis Cyber Protect Expose Sensitive Data: CVSS 10 Vulnerabilities Patched
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:46:27 +0000
════════════════════════
⌗ Tags: #Vulnerability #Acronis #critical security #CVEs #cyber protect #cybersecurity #Data Protection #Data Security #patching #security advisory #Vulnerabilities
Daily CyberSecurity
Critical Flaws in Acronis Cyber Protect Expose Sensitive Data: CVSS 10 Vulnerabilities Patched
Urgent Acronis Cyber Protect advisory: Critical flaws (CVSS 10.0) expose data. Patch immediately to prevent unauthorized access and data manipulation.
16 views
Daily Writeups
⤷ Title: Warning: “Sleeper Agent” Chrome Extensions Infect 1.5 Million Users!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:40:13 +0000
════════════════════════
⌗ Tags: #Malware #audio enhancers #botnet #browser security #Chrome extensions #cybersecurity #data exfiltration #ExtStatTracker #LayerX #malware #ReadBee #surveillance
Daily CyberSecurity
Warning: "Sleeper Agent" Chrome Extensions Infect 1.5 Million Users!
LayerX found "sleeper agent" Chrome extensions, installed on 1.5M devices, disguised as audio tools but capable of remote command execution and data theft.
21 views
Daily Writeups
⤷ Title: Critical CVSS 9.8 Flaw Hits Popular LlamaIndex Framework Used by Millions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:37:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI #Couchbase #cybersecurity #Data Breach #LlamaIndex #LLM #sql injection #vector store #web application security
Daily CyberSecurity
Critical CVSS 9.8 Flaw Hits Popular LlamaIndex Framework Used by Millions
A critical (CVSS 9.8) SQL injection flaw found in popular LlamaIndex (v0.12.21) allows data manipulation, affecting LLM-powered applications.
20 views
Daily Writeups
⤷ Title: Booking.com Spoofed in ClickFix Malware Surge Targeting Hotels and Travel Sector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:31:55 +0000
════════════════════════
⌗ Tags: #Malware #Booking.com #captcha #ClickFix #ConnectWise RAT #DanaBot #hotel industry #information stealer #phishing #powershell #Pure Logs Stealer #rat #Remote Access Trojan #travel industry #XWorm
Daily CyberSecurity
Booking.com Spoofed in ClickFix Malware Surge Targeting Hotels and Travel Sector
A sophisticated "ClickFix" phishing campaign uses fake Booking.com CAPTCHAs to deliver RATs and info stealers to the hotel and travel industry.
17 views
Daily Writeups
⤷ Title: Amazon Alerts: High-Severity FreeRTOS-Plus-TCP Flaw Needs Immediate Patch!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:26:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Amazon #CVE_2025_5688 #cybersecurity #embedded systems #FreeRTOS #FreeRTOS_Plus_TCP #IoT security #out_of_bounds write #real_time operating system #Vulnerability
Daily CyberSecurity
Amazon Alerts: High-Severity FreeRTOS-Plus-TCP Flaw Needs Immediate Patch!
Amazon warns of a high-severity (CVSS 8.4) memory corruption flaw (CVE-2025-5688) in FreeRTOS-Plus-TCP. Patch immediately to prevent crashes and RCE in affected devices.
15 views
Daily Writeups
⤷ Title: ViperSoftX Resurfaces: Stealthy Crypto-Stealing Malware Hits Global Users!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:21:22 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #ClipBanker #cryptocurrency #Cybercrime #malware #powershell #PureCrypter #PureHVNC #Quasar RAT #security alert #TesseractStealer #ViperSoftX
Daily CyberSecurity
ViperSoftX Resurfaces: Stealthy Crypto-Stealing Malware Hits Global Users!
ViperSoftX, a stealthy malware, is actively spreading via fake software to steal cryptocurrency and enable remote control, affecting users globally.
20 views
Daily Writeups
⤷ Title: UNC6040 Threat Actor Exploits Salesforce via Vishing and Malicious Data Loader Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:17:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Theft #Cybercrime #data exfiltration #Data Loader #Google Threat Intelligence Group #GTIG #Microsoft 365 #Okta #Salesforce #social engineering #UNC6040 #Vishing
Daily CyberSecurity
UNC6040 Threat Actor Exploits Salesforce via Vishing and Malicious Data Loader Apps
UNC6040 is using sophisticated vishing to breach Salesforce, tricking employees into granting access, exfiltrating data, and then pivoting to other cloud platforms.
13 views
Daily Writeups
⤷ Title: High-Severity Flaw in MIM Medical Imaging Software Allows Code Execution!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:13:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CVE_2025_1701 #cybersecurity #healthcare security #medical imaging #MIM Admin service #MIM Software #patch #RMI #Vulnerability
Daily CyberSecurity
High-Severity Flaw in MIM Medical Imaging Software Allows Code Execution!
A high-severity vulnerability (CVE-2025-1701) in MIM Admin service allows local code execution with elevated privileges, impacting medical imaging environments.
16 views
Daily Writeups
⤷ Title: Clickfix Meets macOS: AMOS Variant Targets Spectrum Users in Credential Harvesting Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:08:38 +0000
════════════════════════
⌗ Tags: #Malware #AMOS #CloudSEK #cybersecurity #macOS #malware #social engineering #Spectrum #stealer #Threat Alert #Typosquatting
Daily CyberSecurity
Clickfix Meets macOS: AMOS Variant Targets Spectrum Users in Credential Harvesting Campaign
A new AMOS macOS stealer variant is using typo-squatted Spectrum domains in a clever cross-platform social engineering campaign. Stay vigilant!
17 views
Daily Writeups
⤷ Title: Weaponizing Group Policy: Custom Client-Side Extensions as a Stealthy Backdoor into Active Directory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 00:03:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #active directory #blue team #cybersecurity #dll #GPO #persistence #Red Team #Registry #SYSTEM access #Tenable
Daily CyberSecurity
Weaponizing Group Policy: Custom Client-Side Extensions as a Stealthy Backdoor into Active Directory
A new, stealthy AD persistence technique abuses custom Group Policy Client-Side Extensions (CSEs) for SYSTEM-level access. Learn how to detect it!
15 views
Daily Writeups
⤷ Title: From NA to P3: Unlocking a Premium Feature
════════════════════════
𐀪 Author: Mustafa Hatab
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 23:58:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #infosec #bug_bounty
Medium
From NA to P3: Unlocking a Premium Feature
Hello folks!
20 views
Daily Writeups
⤷ Title: Roadmap to eJPTv2 Success
════════════════════════
𐀪 Author: Mr Horbio
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 23:10:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #bug_bounty #ejpt #hacking
Medium
🛠 Roadmap to eJPTv2 Success
1️⃣ Understanding the Exam
15 views