Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Wed, 02 Aug 2023 04:41:09 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Red Team Shenanigans: Stealing Logon Credentials Without Touching LSASS
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/1a73e1cfda3b
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #evasion #lsass #active_directory #red_team #penetration_testing
Medium
Red Team Shenanigans: Stealing Logon Credentials Without Touching LSASS
In this blog, we’ll familiarize ourselves with some interesting methods via which we can obtain credentials for logged-on users. It’s…
15 views
Daily Writeups
β€· Title: POSTDump: perform minidump of LSASS process using few technics to avoid detection
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 03 Feb 2025 01:45:51 +0000
════════════════════════
βŒ— Tags: #Ethical Hacking #LSASS process #MiniDump #POSTDump
Penetration Testing Tools
POSTDump: perform minidump of LSASS process using few technics to avoid detection
POSTDump is an another tool to perform minidump of LSASS process using few techniques to avoid detection.
19 views
Daily Writeups
β€· Title: Protecting Cached Credentials with Advanced Auditing
════════════════════════
π€ͺ Author: Horizon Secured
════════════════════════
β΄΅ Time: Wed, 19 Feb 2025 11:25:58 GMT
════════════════════════
βŒ— Tags: #windows_security #lsass #advanced_auditing #windows #cybersecurity
Medium
Protecting Cached Credentials with Advanced Auditing
Keep your cached credentials safe from attackers! In this guide, learn how to set up Windows Advanced Auditing to detect unauthorized…
31 views
Daily Writeups
β€· Title: Intrusion Detection With Splunk (Real-world Scenario)
════════════════════════
π€ͺ Author: M_ΨΉtt@
════════════════════════
β΄΅ Time: Mon, 21 Apr 2025 23:20:07 GMT
════════════════════════
βŒ— Tags: #lsass #dumping #splunk_enterprise #splunk #cybersecurity
Medium
Intrusion Detection With Splunk (Real-world Scenario)
Hello again πŸ˜€! In this article, We will answer a set of questions from a real scenario using SPL in Splunk. There are five questions in…
21 views
Daily Writeups
β€· Title: ComDotNetExploit: PoC for Windows PPL Bypass via COM-to-.NET
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sun, 25 May 2025 01:30:03 +0000
════════════════════════
βŒ— Tags: #Ethical Hacking #.NET #code injection #COM #cybersecurity #exploit #LSASS #PPL #reflection #Windows Security
Penetration Testing Tools
ComDotNetExploit: PoC for Windows PPL Bypass via COM-to-.NET
ComDotNetExploit is a C++ PoC demonstrating PPL bypass in Windows using COM-to-.NET redirection and reflection for code injection.
26 views
Daily Writeups
β€· Title: Mimikatz Cheatsheetβ€Šβ€”β€ŠPractical Credential Dumping Guide from Labs & Real-World Scenarios
════════════════════════
π€ͺ Author: Mohamed Ashraf
════════════════════════
β΄΅ Time: Fri, 04 Jul 2025 13:58:55 GMT
════════════════════════
βŒ— Tags: #penetration_testing #lsass #red_team #cybersecurity #mimikatz
Medium
Mimikatz Cheatsheet β€” Practical Credential Dumping Guide from Labs & Real-World Scenarios
@Mx0o14
28 views
Daily Writeups
β€· Title: NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 21 Jul 2025 00:29:01 +0000
════════════════════════
βŒ— Tags: #Open Source Tool #credential dumping #cybersecurity #Evasion #LSASS #Mimikatz #NativeDump #Offensive Security #pypykatz #Red Team #Windows Security
Penetration Testing Tools
NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs
NativeDump is a new tool for stealthy LSASS process dumping using only NTAPIs, bypassing EDRs to extract credentials for tools like Mimikatz or Pypykatz.
41 views
Daily Writeups
β€· Title: HTB_Academy: Extracting Passwords from Windows Systems Part 2:Attacking LSASS
════════════════════════
π€ͺ Author: Babatunde Ojo
════════════════════════
β΄΅ Time: Wed, 15 Oct 2025 18:09:04 GMT
════════════════════════
βŒ— Tags: #windows #htb #hacking #passwords #lsass
Medium
HTB_Academy: Extracting Passwords from Windows Systems Part 2:Attacking LSASS
LSASS is a core Windows process responsible for enforcing security policies, handling user authentication, and storing sensitive credential…
13 views
Daily Writeups
β€· Title: LSASS-Free Larceny: Extracting NTLMv1 Hashes with DumpGuard BOF
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 12 Jan 2026 04:51:09 +0000
════════════════════════
βŒ— Tags: #Open Source Tool #BOF #credential dumping #Cybersecurity 2026 #DumpGuard #Havoc C2 #LSASS #NTLMv1 #red teaming #Remote Credential Guard #Windows Security
Information Security News
LSASS-Free Larceny: Extracting NTLMv1 Hashes with DumpGuard BOF
DumpGuard BOF Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems. This repository contains a Beacon Object File (BOF) implementation of…
36 views
Daily Writeups
β€· Title: Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 14 Jan 2026 00:11:47 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Agere Soft Modem #CISA #CVE_2026_20805 #LSASS #Microsoft #Office Vulnerability #Patch Tuesday #Secure Boot #Windows Security #zero_day
Daily CyberSecurity
Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days
Microsoft Jan 2026 Patch Tuesday fixes 114 flaws, including 3 zero-days. CVE-2026-20805 is actively exploited. Update Windows & Office immediately.
26 views
Daily Writeups
β€· Title: Microsoft’s 2026 Kickoff: 110+ Patches Fix Active Zero-Days and Office Flaws
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 15 Jan 2026 08:24:36 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Windows #CVE_2026_20805 #cybersecurity #Infosec News #LSASS #Microsoft #Office 2026 #Patch Tuesday #RCE #Secure Boot #Windows 11 #zero_day
Penetration Testing Tools
Microsoft's 2026 Kickoff: 110+ Patches Fix Active Zero-Days and Office Flaws
Microsoft has inaugurated its first Patch Tuesday of 2026, disseminating a comprehensive suite of mandatory security remediations for
11 views
Daily Writeups
β€· Title: Screaming at the Kernel: How GhostKatz Uses β€œVulnerable Drivers” to Dump Credentials via Physical Memory
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 05 Feb 2026 04:00:10 +0000
════════════════════════
βŒ— Tags: #Open Source Tool #Aggressor Script #BYOVD #Cobalt Strike #credential exfiltration #Erik Esquivel #GhostKatz #Julian PeΓ±a #kernel exploitation #LSASS dump #MmMapIoSpace #red team tools #Tech News 2026
Information Security News
Screaming at the Kernel: How GhostKatz Uses β€œVulnerable Drivers” to Dump Credentials via Physical Memory
Security researcher Julian PeΓ±a has unveiled GhostKatz, a formidable new utility engineered to exfiltrate credentials from the LSASS process by directly accessing a computer’s physical memor…
19 views
Daily Writeups
β€· Title: Targeting the Grid: ESET Unmasks β€œDynoWiper” After Destructive Strike on Polish Energy Sector
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 05 Feb 2026 03:50:20 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Active Directory GPO #Critical Infrastructure #cyber sabotage #data wiper #DynoWiper #ESET research #LSASS memory dump #Poland energy sector #rsocx #Rubeus #Sandworm #Tech News 2026 #ZOV wiper
Penetration Testing Tools
Targeting the Grid: ESET Unmasks "DynoWiper" After Destructive Strike on Polish Energy Sector
ESET has disclosed the intricate technical specifications of an incursion involving a nascent data-obliteration utility designated as DynoWiper.
26 views
Daily Writeups
β€· Title: Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Mon, 23 Feb 2026 03:04:12 +0000
════════════════════════
βŒ— Tags: #Open Source Tool #BOF #Cloud SSO #Cobalt Strike #Credential Guard #DPAPI #Kerberos #LSA Whisperer #LsaCallAuthenticationPackage #LSASS #Pentesting #PPL #red teaming #SpecterOps #Windows Security
Penetration Testing Tools
Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS
Interact with Kerberos and DPAPI without opening an LSASS handle. LSA Whisperer BOF uses official APIs to bypass PPL and Credential Guard during red teaming.
23 views
Daily Writeups
β€· Title: Attacking LSASS: HackTheBox Walkthrough | Peneteration Tester Path
════════════════════════
π€ͺ Author: zerodaystudios
════════════════════════
β΄΅ Time: Thu, 26 Feb 2026 03:41:00 GMT
════════════════════════
βŒ— Tags: #penetration_testing #hacking #lsass #ethical_hacking #windows
Medium
Attacking LSASS: HackTheBox Walkthrough | Peneteration Tester Path
Step 1: Creating an LSASS Memory Dump (Task Manager Method)
20 views