Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: ADCS Attack Series: Abusing ESC9 for Privilege Escalation via Weak Certificate Mapping
════════════════════════
𐀪 Author: Nairuz Abulhul
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 21:13:54 GMT
════════════════════════
⌗ Tags: #red_team #infosec #pentesting #security #hacking
Medium
ADCS Attack Series: Abusing ESC9 for Privilege Escalation via Weak Certificate Mapping
Learn how missing objectSid values and permissive ACLs enable user impersonation through ADCS certificate mapping.
23 views
Daily Writeups
⤷ Title: ️ Living Off the Land Attacks: The Invisible Threat Inside Your Network
════════════════════════
𐀪 Author: Ekene Joseph
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 21:10:00 GMT
════════════════════════
⌗ Tags: #ethical_hacking #living_off_the_land #cybersecurity #hacking #vulnerability_assessment
Medium
🕵️‍♂️ Living Off the Land Attacks: The Silent Hackers Hiding in Plain Sight
LotL attacks occur when threat actors leverage tools that are already available in the operating system (especially Windows environments)…
20 views
Daily Writeups
⤷ Title: The AI Agent That Almost Became a Corporate Spy
════════════════════════
𐀪 Author: Nwosu Rosemary
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 22:35:07 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #security #cybersecurity #compliance
Medium
The AI Agent That Almost Became a Corporate Spy
It was 7 PM when I realized I had built something terrifying.
13 views
Daily Writeups
⤷ Title: Mastering Suricata: A Practical Guide to Inline IPS Deployment
════════════════════════
𐀪 Author: ierdnA
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 22:33:37 GMT
════════════════════════
⌗ Tags: #intrusionpreventionsystem #cybersecurity #suricata #threat_intelligence #linux_networking
Medium
Mastering Suricata: A Practical Guide to Inline IPS Deployment
Summary:
Learn how to deploy Suricata as a high-performance inline Intrusion Prevention System (IPS) using af-packet, optimized for speed…
15 views
Daily Writeups
⤷ Title: Bypassing Web Application Firewalls: Techniques That Still Work
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 22:18:08 GMT
════════════════════════
⌗ Tags: #web_development #technology #careers #networking #cybersecurity
Medium
Bypassing Web Application Firewalls: Techniques That Still Work
Subtitle:  From evading filters to exploiting blind spots — how attackers are still slipping past WAFs in 2025.
15 views
Daily Writeups
⤷ Title: Auslagerungsmanagement 2025: Der strategische Leitfaden für resiliente Compliance und operative…
════════════════════════
𐀪 Author: Philip Hansen
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 21:57:24 GMT
════════════════════════
⌗ Tags: #digitale_transformation #cybersecurity #kmu #kritis
Medium
Auslagerungsmanagement 2025: Der strategische Leitfaden für resiliente Compliance und operative Exzellenz im Finanzsektor
Zentrale Erkenntnisse für Entscheidungsträger
10 views
Daily Writeups
⤷ Title: Business Continuity & Resilience Roadmap 2025: Der ultimative Leitfaden für krisenresistente…
════════════════════════
𐀪 Author: Philip Hansen
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 21:57:02 GMT
════════════════════════
⌗ Tags: #kmu #business_continuity #cybersecurity #kritis #digitale_transformation
Medium
Business Continuity & Resilience Roadmap 2025: Der ultimative Leitfaden für krisenresistente…
Strategische Kernerkenntnisse auf einen Blick
9 views
Daily Writeups
⤷ Title: Roadmap zum Erfolg: Standard-Software-Implementierung meistern [Kostenloses Implementation-Kit]
════════════════════════
𐀪 Author: Philip Hansen
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 21:56:49 GMT
════════════════════════
⌗ Tags: #kritis #cybersecurity #kmu #digitale_transformation
Medium
Roadmap zum Erfolg: Standard-Software-Implementierung meistern [Kostenloses Implementation-Kit]
Executive Insights auf einen Blick
13 views
Daily Writeups
⤷ Title: Déploiement d’un SOC complet (Wazuh-TheHive-Cortex-Misp-Shuffle)sur un environnement local à…
════════════════════════
𐀪 Author: ahmed fathallah
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 21:15:55 GMT
════════════════════════
⌗ Tags: #blue_team #pentesting #soc #automation #cybersecurity
Medium
Déploiement d’un SOC complet (Wazuh-TheHive-Cortex-Misp-Shuffle)sur un environnement local à…
l’architecture de solution:
16 views
Daily Writeups
⤷ Title: Key challenges of hybrid cloud adoption 2025
════════════════════════
𐀪 Author: IT_Engineer
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 21:11:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #hybrid_work #infrastructure #cloud_integration #cloud_computing
Medium
Key challenges of hybrid cloud adoption 2025
In today’s scenario, or in 2025, if we particularly look at it from the perspective of the IT adoption of businesses — the hybrid cloud…
14 views
Daily Writeups
⤷ Title: Best-in-Class AI Solutions for Fraud, Risk and Compliance
════════════════════════
𐀪 Author: Peter Bordes
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 20:54:21 GMT
════════════════════════
⌗ Tags: #fraud_prevention #cybersecurity #artificial_intelligence #ai
Medium
Best-in-Class AI Solutions for Fraud, Risk and Compliance
16 views
Daily Writeups
⤷ Title: TryHackMe: CMess | Subdomain Discovery, File Upload, and Privilege Escalation
════════════════════════
𐀪 Author: N16H7H4WK
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 21:56:47 GMT
════════════════════════
⌗ Tags: #walkthrough #cmess #tryhackme #easy
Medium
TryHackMe: CMess | Subdomain Discovery, File Upload, and Privilege Escalation
CMess is one of those boxes that reminds you why enumeration is everything. At first I though it seems like just another basic web…
33 views
Daily Writeups
⤷ Title: TryHackMe: Daily Bugle Walkthrough
════════════════════════
𐀪 Author: CyberQuestor
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 21:17:20 GMT
════════════════════════
⌗ Tags: #hackthebox #ejpt #walkthrough #oscp_preparation #tryhackme
Medium
TryHackMe: Daily Bugle Walkthrough
Before I even deployed the machine, I’ll be honest — I hesitated.
36 views
Daily Writeups
⤷ Title: WindowSpy: Cobalt Strike Beacon Object File meant for targeted user surveillance
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 00:49:17 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #Cobalt Strike Beacon #WindowSpy
Penetration Testing Tools
WindowSpy: Cobalt Strike Beacon Object File meant for targeted user surveillance
WindowSpy is a Cobalt Strike Beacon Object File meant for targeted user surveillance. The goal of this project was to trigger surveillance capabilities
44 views
Daily Writeups
⤷ Title: Boost Your GitHub Actions Security with sisakulint: Fast SAST for YAML
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 00:17:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #blue team #CI/CD Security #cybersecurity #GitHub Actions #OWASP #SAST #security tool #sisakulint #Static Analysis #YAML
Penetration Testing Tools
Boost Your GitHub Actions Security with sisakulint: Fast SAST for YAML
Discover sisakulint, a fast SAST tool for GitHub Actions. It validates YAML files against security guidelines, prevents malicious code, and supports autofix.
27 views
Daily Writeups
⤷ Title: Popular Chrome Extensions Caught Leaking Sensitive User Data via Unencrypted HTTP
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 00:30:42 +0000
════════════════════════
⌗ Tags: #Data Leak #Chrome extensions #cybersecurity #data leak #Data Privacy #http #Man in the Middle #password manager #Symantec #Unencrypted Traffic #vpn
Daily CyberSecurity
Popular Chrome Extensions Caught Leaking Sensitive User Data via Unencrypted HTTP
Symantec reveals popular Chrome extensions like Browsec VPN & DualSafe Password Manager are leaking sensitive user data over unencrypted HTTP, risking privacy.
19 views
Daily Writeups
⤷ Title: TA397’s Global Targeting Tactics Reveal Indian State-Backed Cyber Operations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 00:15:44 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #Bitter APT #cyber_espionage #geopolitics #India #malware #phishing #Proofpoint #State_Sponsored Hacking #TA397 #threat intelligence
Daily CyberSecurity
TA397’s Global Targeting Tactics Reveal Indian State-Backed Cyber Operations
Proofpoint reveals TA397 (Bitter APT) is an India-aligned state-backed group conducting long-term espionage campaigns globally, targeting rivals and partners.
12 views
Daily Writeups
⤷ Title: Signal Phishing Alert: Sophisticated Campaign Targets Armenian Civil Society & Government
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 00:12:18 +0000
════════════════════════
⌗ Tags: #Cyber Security #Armenia #Civil Society #cyberattack #CyberHUB_AM #Government #intelligence gathering #Mandiant #phishing #Signal #spear_phishing #UNC5792
Daily CyberSecurity
Signal Phishing Alert: Sophisticated Campaign Targets Armenian Civil Society & Government
A sophisticated spear-phishing campaign using Signal targeted Armenian civil society and government in March 2025, linked to threat actor UNC5792.
13 views
Daily Writeups
⤷ Title: CISA Alert: Critical Vulnerabilities Found in CyberData SIP Emergency Intercom Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 00:11:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Critical Infrastructure #CVE_2025_30184 #CyberData #cybersecurity #industrial control systems #Patch Now #Remote Code Execution #SIP Intercom #Vulnerability
Daily CyberSecurity
CISA Alert: Critical Vulnerabilities Found in CyberData SIP Emergency Intercom Devices
CISA issues critical warning for CyberData SIP Emergency Intercom (Model 011209) with severe vulnerabilities (CVSS 9.8), risking remote access and code execution. Update now.
11 views
Daily Writeups
⤷ Title: A New Risk: Thought Time Bombs
════════════════════════
𐀪 Author: Wrangler
════════════════════════
ⴵ Time: Fri, 06 Jun 2025 22:52:02 GMT
════════════════════════
⌗ Tags: #emerging_risk #emerging_technology #risk_management #chatbots_for_business #hacking
Medium
A New Risk: Thought Time Bombs
Something may be hiding in your AI.
15 views
Daily Writeups
⤷ Title: Dokumentasi Hardening SSH
════════════════════════
𐀪 Author: Mukti Badriyan
════════════════════════
ⴵ Time: Sat, 07 Jun 2025 00:46:06 GMT
════════════════════════
⌗ Tags: #bootcamp #cybersecurity #hardening #ssh
Medium
Dokumentasi Hardening SSH
Tugas | Minggu 2, Sesi 2 #IDNBootCampCyber
11 views