Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Fri, 24 Mar 2023 07:08:27 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: What is external infrastructure penetration testing?
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/c13a7ab3f537
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #external_penetration #cybersecurity #ethical_hacking
Medium
What is external infrastructure penetration testing?
With cybercrime on the rise, companies need to ensure the security of their infrastructure against potential attacks. One effective method to do so is external infrastructure penetration testing. In…
5 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Mon, 17 Jul 2023 13:35:46 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Enabled Sign Up on Jenkins leading to Groovy Script Remote Code Execution Vulnerability
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/6d345f5dba0d
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #groovy_script #external_pentesting #jenkins #rce
Medium
Enabled Sign Up on Jenkins leading to Groovy Script Remote Code Execution Vulnerability
Summary : Found a Jenkins instance with Signup enabled , bypass the restrictions by signing up with corporate email account as there was…
6 views
Daily Writeups
β€· Title: Gone Phishing: Installing GoPhish and Creating a Campaign
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Thu, 13 Feb 2025 16:50:07 +0000
════════════════════════
βŒ— Tags: #External/Internal #How_To #Informational #Nick Caswell #Phishing #Red Team #Red Team Tools #Social Engineering #GoPhish #Mail Security #Phishing Campaign
Black Hills Information Security, Inc.
Gone Phishing: Installing GoPhish and Creating a Campaign - Black Hills Information Security, Inc.
GoPhish provides a nice platform for creating and running phishing campaigns. This blog will guide you through installing GoPhish and creating a campaign. 
38 views
Daily Writeups
β€· Title: Why Your Org Needs a Penetration Test Program
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Mon, 10 Mar 2025 15:30:05 +0000
════════════════════════
βŒ— Tags: #Corey Ham #External/Internal #GRC #Red Team #Webcast Wrap_Up #Kelli Tarala #penetration testing #pentest
Black Hills Information Security, Inc.
Why Your Org Needs a Penetration Test Program - Black Hills Information Security, Inc.
This webcast originally aired on February 27, 2025. Join us for a very special free one-hour Black Hills Information Security webcast with Corey Ham & Kelli Tarala on why your […]
34 views
Daily Writeups
β€· Title: Introducing Orbit 
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Thu, 13 Mar 2025 14:00:22 +0000
════════════════════════
βŒ— Tags: #External/Internal #Informational #Ralph May #Recon #Red Team #Red Team Tools #CPT #External Attack Surface #Nuclei #Orbit #Scanning
Black Hills Information Security
Introducing Orbit  - Black Hills Information Security
When I set out to build Orbit, I knew that the interface had to be intuitive and accessible, but more importantly, the application had to solve a real problem. And here’s the challenge we faced...
35 views
Daily Writeups
β€· Title: Configuring Azure AD as a Key Manager in WSO2 API Manager
════════════════════════
π€ͺ Author: Dilan Lasantha
════════════════════════
β΄΅ Time: Mon, 17 Mar 2025 15:05:00 GMT
════════════════════════
βŒ— Tags: #external_key_manager #api_security #azure_active_directory #wso2 #wso2_api_manager
Medium
Configuring Azure AD as a Key Manager in WSO2 API Manager
Integrating Azure Active Directory (Azure AD) as a Key Manager in WSO2 API Manager (WSO2 APIM) allows organizations to utilize Microsoft’s…
44 views
Daily Writeups
β€· Title: The Hidden Cyber Threats Lurking in Your Digital Footprintβ€Šβ€”β€ŠHow External Attack Surface…
════════════════════════
π€ͺ Author: Cytrusst
════════════════════════
β΄΅ Time: Thu, 27 Mar 2025 09:37:52 GMT
════════════════════════
βŒ— Tags: #external_attack_surface #attack_surface_management #cyber_security_solutions #asm #cybersecurity
Medium
The Hidden Cyber Threats Lurking in Your Digital Footprint β€” How External Attack Surface Management Can Save Your Business
A cybersecurity insider’s guide to protecting your digital ecosystem with Cytrusst the Breach You Never Saw Coming
24 views
Daily Writeups
β€· Title: Go-Spoof: A Tool for Cyber Deception
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Thu, 27 Mar 2025 14:00:00 +0000
════════════════════════
βŒ— Tags: #Ben Bowman #Blue Team #Blue Team Tools #External/Internal #Web App #Cyber Deception #Deceptive Tooling #Go_Spoof
Black Hills Information Security, Inc.
Go-Spoof: A Tool for Cyber Deception - Black Hills Information Security, Inc.
Go-Spoof brings an old tool to a new language. The Golang rewrite [of Portspoof] provides similar efficiency and all the same features of the previous tool but with easier setup and useability.
❀1
34 views
Daily Writeups
β€· Title: What is External Penetration Testing?
════════════════════════
π€ͺ Author: Craw Cyber Security
════════════════════════
β΄΅ Time: Thu, 24 Apr 2025 10:35:31 GMT
════════════════════════
βŒ— Tags: #what_external_penetration #penetration_testing #penetration_testing_firm #external_penetration_test #penetration_testing_guide
Medium
What is External Penetration Testing?
In today’s interconnected world, your organization’s digital presence extends far beyond the walls of your physical office. Websites, cloud…
54 views
Daily Writeups
β€· Title: Apple Overhauls EU App Store Policy: New Fees & Open External Purchases After €500M Fine
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 27 Jun 2025 08:06:23 +0000
════════════════════════
βŒ— Tags: #Technology #App Store #Apple #Core Technology Fee #CTC #ctf #Developer Policy #Digital Markets Act #DMA #EU #European Union #External Purchases #Fees
Daily CyberSecurity
Apple Overhauls EU App Store Policy: New Fees & Open External Purchases After €500M Fine
Apple revised EU App Store policies, allowing external purchases and new fees (initial acquisition, service, CTC) after a €500M fine. Developers can now direct users to outside payment channels.
19 views
Daily Writeups
β€· Title: Getting Started with NetExec: Streamlining Network Discovery and Access
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Wed, 09 Jul 2025 14:00:00 +0000
════════════════════════
βŒ— Tags: #Dale Hobbs #External/Internal #How_To #Informational #Password Spray #Red Team #Red Team Tools #Active Directory Enumeration #Authentication Testing #Blue Team Defense #CrackMapExec Alternative #Credential Spraying #Lateral Movement #Netexec #Network Discovery #NTLM Authentication #Pass_the_Hash (PTH) #Pass_the_Ticket (PTT) #SMB Enumeration
Black Hills Information Security, Inc.
Getting Started with NetExec: Streamlining Network Discovery and Access - Black Hills Information Security, Inc.
One tool that I can't live without when performing a penetration test in an Active Directory environment is called NetExec. Being able to efficiently authenticate against multiple systems in the network is crucial, and NetExec is an incredibly powerful tool…
57 views
Daily Writeups
β€· Title: Abusing Active Directory Certificate Services (Part 2)
════════════════════════
π€ͺ Author: Kassie Kimball
════════════════════════
β΄΅ Time: Thu, 12 Oct 2023 15:44:18 +0000
════════════════════════
βŒ— Tags: #Alyssa Snow #Blue Team #External/Internal #How_To #Informational #Red Team #Red Team Tools #Active Directory #exploit
Black Hills Information Security, Inc.
Abusing Active Directory Certificate Services (Part 2) - Black Hills Information Security, Inc.
Misconfigurations in Active Directory Certificate Services (ADCS) can introduce critical vulnerabilities into an Enterprise Active Directory environment, such as paths of escalation from low privileged accounts to domain administrator.
15 views
Daily Writeups
β€· Title: Abusing Active Directory Certificate Services (Part 1)
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Thu, 05 Oct 2023 16:00:00 +0000
════════════════════════
βŒ— Tags: #Alyssa Snow #Blue Team #External/Internal #How_To #Informational #Red Team #Red Team Tools #Active Directory #exploit
Black Hills Information Security, Inc.
Abusing Active Directory Certificate Services (Part 1) - Black Hills Information Security, Inc.
Active Directory Certificate Services (ADCS) is used for public key infrastructure in an Active Directory environment. ADCS is widely used in enterprise Active Directory environments for managing certificates for systems, users, applications, and more.
31 views
Daily Writeups
β€· Title: Detecting ADCS Privilege Escalation
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Wed, 23 Jul 2025 13:31:22 +0000
════════════════════════
βŒ— Tags: #Alyssa Snow #Blue Team #Blue Team Tools #External/Internal #How_To #Informational #Active Directory #ADCS
Black Hills Information Security, Inc.
Detecting ADCS Privilege Escalation - Black Hills Information Security, Inc.
Active Directory Certificate Services (ADCS) is used to manage certificates for systems, users, applications, and more in an enterprise environment. Misconfigurations in ADCS can introduce critical vulnerabilities into an enterprise Active Directory environment.
26 views
Daily Writeups
β€· Title: Apple Leverages Supreme Court Ruling to Fight App Store External Payment Links Mandate
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 25 Jul 2025 07:00:42 +0000
════════════════════════
βŒ— Tags: #Technology #Antitrust #App Store #Apple #Developers #Epic Games #External Payments #ios #Lawsuit #monopoly #Supreme Court
Daily CyberSecurity
Apple Leverages Supreme Court Ruling to Fight App Store External Payment Links Mandate
Apple is challenging a court order to allow external App Store payment links, citing a recent Supreme Court ruling to argue judicial overreach in its ongoing battle with Epic Games.
9 views
Daily Writeups
β€· Title: GoSpoof β€“ Turning Attacks into Intel 
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Wed, 29 Oct 2025 14:00:00 +0000
════════════════════════
βŒ— Tags: #Blue Team #Blue Team Tools #External/Internal #Informational #Intern #Web App #Cyber Deception #Deceptive Tooling #GoSpoof
Black Hills Information Security, Inc.
GoSpoof β€“ Turning Attacks into Intel  - Black Hills Information Security, Inc.
Imagine this: You’re an attacker ready to get their hands on valuable data that you can sell to afford going on a sweet vacation. You do your research, your recon, everything, ensuring that there’s no way this can go wrong. The day of the attack, you brew…
31 views
Daily Writeups
β€· Title: Why You Got Hacked – 2025 Super Edition
════════════════════════
π€ͺ Author: BHIS
════════════════════════
β΄΅ Time: Wed, 19 Nov 2025 17:50:39 +0000
════════════════════════
βŒ— Tags: #C2 #External/Internal #Finding #Informational #Jordan Drysdale #Web App #analysis #Report Findings
Black Hills Information Security, Inc.
Why You Got Hacked - 2025 Super Edition - Black Hills Information Security, Inc.
This article was written to provide readers with an overview of a selection of our pentest results from the last 15 months. This data was gathered toward the end of September 2025. Shockingly, the data does not differ much from our prior analyses conducted…
11 views
Daily Writeups
β€· Title: The Android Toll: Google to Charge $2.85 Per Install for External App Links
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 23 Dec 2025 02:41:08 +0000
════════════════════════
βŒ— Tags: #Technology #android #Antitrust #App Store Fees #Digital Markets Act #Epic Games #External Billing #Google Play Store #Judge James Donato #Mobile Gaming #Sideloading
Daily CyberSecurity
The Android Toll: Google to Charge $2.85 Per Install for External App Links
In the legal dispute between Epic and Google, U.S. judges have signaled a clear inclination to require Google to alter its existing Google Play Store bundled billing model. In essence, Google woul…
33 views
Daily Writeups
β€· Title: PNPT External Penetration Testing Cheat Sheet
════════════════════════
π€ͺ Author: jaejun835
════════════════════════
β΄΅ Time: Fri, 06 Mar 2026 03:21:58 GMT
════════════════════════
βŒ— Tags: #external_penetration #pnpt #cheatsheet #cybersecurity #hacking
Medium
PNPT External Penetration Testing Cheat Sheet
This is a cheat sheet for external penetration testing techniques used in TCM Security's PNPT (Practical Network Penetration Tester)…
15 views