Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: How to Build a Scalable Network Security Architecture for Enterprises
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 22:17:20 GMT
════════════════════════
⌗ Tags: #network #cybersecurity #careers #security #technology
Medium
How to Build a Scalable Network Security Architecture for Enterprises
Designing resilient, future-proof security frameworks that grow with your business.
16 views
Daily Writeups
⤷ Title: Firewalls Against Oblivion: The Invisible Defenders of Ukraine
════════════════════════
𐀪 Author: Philip Laureano
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 22:02:13 GMT
════════════════════════
⌗ Tags: #ukraine_war #fiction #ukraine #cybersecurity
Medium
Firewalls Against Oblivion: The Invisible Defenders of Ukraine
📜 A Note for the Readers
12 views
Daily Writeups
⤷ Title: From Rejections to Accomplishment: Landing My First Cybersecurity Internship in USA
════════════════════════
𐀪 Author: Henil Gandhi
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 21:45:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #consistency #hard_work #methodology #internships
Medium
From Rejections to Accomplishment: Landing My First Cybersecurity Internship in USA
Hello H4kers & incoming international students, I am Henil Gandhi, Master’s student in Cyber Forensics & Security from Chicago. Here, I…
11 views
Daily Writeups
⤷ Title: BLASTER WALKTHROUGH : TRYHACKME
════════════════════════
𐀪 Author: rizzziom
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 22:32:17 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #ctf_writeup #penetration_testing #ctf #tryhackme
Medium
BLASTER WALKTHROUGH : TRYHACKME
To access the machine, click on the link given below:
21 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough — Unattended
════════════════════════
𐀪 Author: Nicholas Abundis
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 22:05:34 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme #unattended #soc #tryhackme_writeup
Medium
TryHackMe Walkthrough — Unattended
Use your Windows forensics knowledge to investigate an incident.
23 views
Daily Writeups
⤷ Title: HTB Remote Walkthrough
════════════════════════
𐀪 Author: The Cyber Outpost
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 23:02:15 GMT
════════════════════════
⌗ Tags: #teamviewer #hackthebox_writeup #hackthebox_walkthrough #hackthebox #umbraco
Medium
HTB Remote Walkthrough
In this article, we’re going to explore the retired easy box of Remote, following the guided mode.
29 views
Daily Writeups
⤷ Title: Can prediction markets outsmart polls, and should we trust them?
════════════════════════
𐀪 Author: Enrique Dans
════════════════════════
ⴵ Time: Sun, 08 Jun 2025 22:05:17 GMT
════════════════════════
⌗ Tags: #ai #blockchain #predictions #prediction_markets #xs
Medium
Can prediction markets outsmart polls, and should we trust them?
Prediction markets — platforms that allow users to bet, with real or virtual money, on the likelihood of future events — are not new, but…
28 views
Daily Writeups
⤷ Title: Quiet Riot: enumeration tool for scalable, unauthenticated validation of AWS principals
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:19:45 +0000
════════════════════════
⌗ Tags: #Web AppSec #AWS enumeration tool #Quiet Riot
Penetration Testing Tools
Quiet Riot: enumeration tool for scalable, unauthenticated validation of AWS principals
Quiet Riot is an enumeration tool for scalable, unauthenticated validation of AWS principals; including AWS Account IDs, root e-mail addresses, users
25 views
Daily Writeups
⤷ Title: KubeAPI-Inspector: Discover the secrets hidden in apis
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:15:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #API endpoint #API Security #authentication bypass #cloud native #cluster security #cybersecurity #KubeAPI_Inspector #Kubernetes #vulnerability
Penetration Testing Tools
KubeAPI-Inspector: Discover the secrets hidden in apis
KubeAPI-Inspector automates discovery of hidden vulnerable APIs in Kubernetes clusters, demonstrating authentication bypasses that can compromise an entire cluster.
❤1
20 views
Daily Writeups
⤷ Title: Microsoft BFS Flaws Expose Windows to Privilege Escalation – PoC Code Released
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:50:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #AppContainer #cybersecurity #Exploit #Microsoft BFS #PoC #privilege escalation #race condition #use after free #UWP #windows
Daily CyberSecurity
Microsoft BFS Flaws Expose Windows to Privilege Escalation – PoC Code Released
Critical flaws in Microsoft's Brokering File System (BFS), including race conditions and UAF bugs, expose Windows to privilege escalation. PoC code available. Patch now!
21 views
Daily Writeups
⤷ Title: From Cheats to Compromise: Blitz Malware Exploits Gamers via Backdoored Standoff 2 Cheats
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:48:28 +0000
════════════════════════
⌗ Tags: #Malware #Blitz malware #Cryptojacking #Cybercrime #cybersecurity #gaming cheats #Hugging Face #Infostealer #Standoff 2 #Telegram #Unit 42 #Windows malware
Daily CyberSecurity
From Cheats to Compromise: Blitz Malware Exploits Gamers via Backdoored Standoff 2 Cheats
Blitz malware infects gamers via backdoored Standoff 2 cheats, stealing data and cryptojacking. It uses Hugging Face for C2 and targets Windows users globally.
16 views
Daily Writeups
⤷ Title: QNAP Fixes SQL Injection and Certificate Validation Flaws in Qsync Central and File Station 5
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:43:36 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #data compromise #File Station 5 #network storage #QNAP #Qsync Central #Remote Code Execution #security update #sql injection
Daily CyberSecurity
QNAP Fixes SQL Injection and Certificate Validation Flaws in Qsync Central and File Station 5
QNAP releases urgent patches for high-severity flaws in Qsync Central and File Station 5, enabling RCE and data compromise. Update immediately!
12 views
Daily Writeups
⤷ Title: Critical CVSS 10.0 Flaws in B. Braun OnlineSuite Threaten Healthcare Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:39:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #B. Braun #CVE_2025_3322 #cybersecurity #healthcare #IT security #medical devices #OnlineSuite AP 3.0 #patient safety #rce #Vulnerabilities
Daily CyberSecurity
Critical CVSS 10.0 Flaws in B. Braun OnlineSuite Threaten Healthcare Infrastructure
B. Braun's OnlineSuite AP 3.0 faces severe vulnerabilities, including a CVSS 10.0 RCE, risking hospital IT and data. Immediate patching is crucial.
11 views
Daily Writeups
⤷ Title: UNC1151 Exploits Roundcube Flaw in Spear Phishing Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:35:31 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #APT #CERT Polska #Credential Theft #CVE_2024_42009 #cybersecurity #Roundcube #spear_phishing #UNC1151 #webmail #XSS
Daily CyberSecurity
UNC1151 Exploits Roundcube Flaw in Spear Phishing Attack
CERT Polska warns of a critical Roundcube XSS flaw (CVE-2024-42009) exploited by UNC1151 in spear phishing, stealing credentials and compromising Polish organizations.
11 views
Daily Writeups
⤷ Title: DuplexSpy RAT: New C# Malware Toolkit Emerges on GitHub
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:30:48 +0000
════════════════════════
⌗ Tags: #Malware #C++ #Cybercrime #cybersecurity #Cyfirma #DuplexSpy #github #Infostealer #malware #rat #Remote Access Trojan #threat intelligence
Daily CyberSecurity
DuplexSpy RAT: New C# Malware Toolkit Emerges on GitHub
CYFIRMA uncovers DuplexSpy, a powerful C# RAT on GitHub with surveillance, persistence, and anti-analysis features, posing a significant cybercrime threat.
12 views
Daily Writeups
⤷ Title: Destructive npm Packages Disguised as Utilities Trigger Remote System Wipes on Demand
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:27:46 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #cybersecurity #data wiping #Developer Tools #express_api_sync #malware #npm #Socket Security #supply chain attack #system_health_sync_api
Daily CyberSecurity
Destructive npm Packages Disguised as Utilities Trigger Remote System Wipes on Demand
Two malicious npm packages, express-api-sync and system-health-sync-api, act as remote-controlled time bombs, wiping entire directories with a single POST request.
12 views
Daily Writeups
⤷ Title: Android’s Secret Tracking: Meta & Yandex Abused Localhost for User Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:21:39 +0000
════════════════════════
⌗ Tags: #Data Leak #android #cross_context tracking #cybersecurity #facebook #Instagram #localhost #Meta #Meta Pixel #privacy #tracking #WebRTC #Yandex
Daily CyberSecurity
Android's Secret Tracking: Meta & Yandex Abused Localhost for User Data
Researchers found Meta and Yandex secretly tracked Android users via localhost, linking web activity to app IDs, even in Incognito. This widespread abuse bypassed privacy controls.
15 views
Daily Writeups
⤷ Title: Go Fixes Three Security Flaws: Update Your Apps Now!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:16:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #crypto/x509 #CVE #cybersecurity #go #Golang #net/http #OS #security vulnerability #software update #web development
Daily CyberSecurity
Go Fixes Three Security Flaws: Update Your Apps Now!
Go 1.24.4 and 1.23.10 fix flaws in net/http, os, and crypto/x509, addressing data leaks, file inconsistencies, and certificate validation bypasses. Update now!
20 views
Daily Writeups
⤷ Title: FormBook Returns: Exploiting CVE-2017-0199 via Malicious Excel Attachments in New Phishing Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:11:27 +0000
════════════════════════
⌗ Tags: #Malware #CVE_2017_0199 #cybersecurity #Excel #Exploit #Formbook #FortiGuard #Infostealer #malware #microsoft office #phishing
Daily CyberSecurity
FormBook Returns: Exploiting CVE-2017-0199 via Malicious Excel Attachments in New Phishing Campaign
An old Microsoft Office vulnerability (CVE-2017-0199) is being exploited in a new phishing campaign to deploy the FormBook infostealer malware. Update now!
19 views
Daily Writeups
⤷ Title: EnigmaCyberSecurity: Brazil-Focused Banking Malware Campaign Uses RATs and Malicious Extensions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:07:04 +0000
════════════════════════
⌗ Tags: #Malware #banking trojans #Browser Extension Malware #EnigmaCyberSecurity #Financial Credential Theft #Latin America Cybercrime #Mesh Agent #Phishing Campaign #rat
Daily CyberSecurity
EnigmaCyberSecurity: Brazil-Focused Banking Malware Campaign Uses RATs and Malicious Extensions
"EnigmaCyberSecurity" is a new multi-stage cybercrime campaign hitting Brazil and beyond, using phishing, malicious extensions, and RATs to steal banking data.
16 views
Daily Writeups
⤷ Title: CVE-2025-4318 (CVSS 9.5): AWS Amplify RCE Flaw Exposed with PoC – CI/CD Pipelines at Risk
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Jun 2025 00:02:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AWS Amplify #CI/CD security #CVE_2025_4318 #JavaScript Exploits #Node.js #PoC Exploit #Remote Code Execution #Web Development Security
Daily CyberSecurity
CVE-2025-4318 (CVSS 9.5): AWS Amplify RCE Flaw Exposed with PoC – CI/CD Pipelines at Risk
CVE-2025-4318 (CVSS 9.5) hits AWS Amplify Codegen UI with PoC exploit. RCE flaw puts CI/CD pipelines and developer environments at high risk.
15 views