Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Zero-Click to Root: CISA Flags Active Exploits in Apple iOS and TP-Link Routers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:16:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Command Injection #CVE_2023_33538 #CVE_2025_43200 #cybersecurity #iCloud Link #ios #KEV Catalog #rce #Remote Code Execution #spyware #TP_Link #Vulnerability #zero_day
Daily CyberSecurity
Zero-Click to Root: CISA Flags Active Exploits in Apple iOS and TP-Link Routers
CISA adds two actively exploited zero-days to KEV: an iOS zero-click flaw used by spyware (CVE-2025-43200) and a command injection in TP-Link routers
15 views
Daily Writeups
⤷ Title: OneLogin AD Connector Flaw Exposes Credentials & Allows Account Impersonation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:16:04 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Account Impersonation #active directory #AD #AWS #cybersecurity #IAM #Identity and Access Management #OneLogin #S3 bucket #SpecterOps #Vulnerability
Daily CyberSecurity
OneLogin AD Connector Flaw Exposes Credentials & Allows Account Impersonation
A critical flaw in OneLogin's AD Connector exposed API keys, allowing attackers to impersonate users across organizations via unclaimed S3 buckets and forged JWT tokens.
21 views
Daily Writeups
⤷ Title: PoCGen: AI Tool Automates Exploit Generation for npm Vulnerabilities with LLMs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:12:42 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cybersecurity #Dynamic Analysis #Exploit Generation #large language model #LLM #npm #PoC #PoCGen #proof_of_concept #Security Research #Static Analysis #University of Stuttgart #Vulnerability
Daily CyberSecurity
PoCGen: AI Tool Automates Exploit Generation for npm Vulnerabilities with LLMs
PoCGen is a new AI tool using LLMs, static, and dynamic analysis to automate PoC exploit generation for npm vulnerabilities, achieving high success rates at low cost.
15 views
Daily Writeups
⤷ Title: Zyxel Firewalls Under Attack via Critical CVE-2023-28771
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:09:29 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #CVE_2023_28771 #cybersecurity #firewall #GreyNoise #Mirai botnet #rce #Remote Code Execution #UDP Port 500 #Vulnerability #Zyxel
Daily CyberSecurity
Zyxel Firewalls Under Attack via Critical CVE-2023-28771
Zyxel firewalls are under a coordinated attack exploiting critical RCE flaw CVE-2023-28771 (CVSS 9.8) via UDP port 500, likely by Mirai botnets. Patch immediately
21 views
Daily Writeups
⤷ Title: Hackers Leak 7.4 Million Paraguayan Citizen Records, Demand $1 Per Person Ransom
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:08:12 +0000
════════════════════════
⌗ Tags: #Data Leak #cyberattack #Cybercrime #dark web #Data Breach #Espionage #Government Hack #Lumma Stealer #national security #Paraguay #PII #ransomware #Resecurity
Daily CyberSecurity
Hackers Leak 7.4 Million Paraguayan Citizen Records, Demand $1 Per Person Ransom
Hackers leaked 7.4 million Paraguayan citizen records on the dark web, demanding a $7.4M ransom. The breach likely stems from infostealer malware, sparking national security concerns.
12 views
Daily Writeups
⤷ Title: GrayAlpha’s Expanding Arsenal: FIN7-Aligned Threat Actor Deploys Custom Loaders to Spread NetSupport RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:02:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #7_Zip #Cybercrime #cybersecurity #Fake Browser Updates #FIN7 #GrayAlpha #Insikt Group #NetSupport RAT #powershell #ransomware #Recorded Future #TAG_124 #TDS
Daily CyberSecurity
GrayAlpha’s Expanding Arsenal: FIN7-Aligned Threat Actor Deploys Custom Loaders to Spread NetSupport RAT
GrayAlpha, linked to FIN7, escalates tactics with fake browser/7-Zip updates and TAG-124 TDS, spreading NetSupport RAT in a multi-pronged infection campaign.
13 views
Daily Writeups
⤷ Title: Langflow Under Attacks: CVE-2025-3248 Exploited to Deliver Stealthy Flodrix Botnet
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 22:35:52 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #AI Applications #botnet #CVE_2025_3248 #cybersecurity #ddos #Flodrix #Langflow #open_source #rce #Remote Code Execution #shodan #Trend Micro #Vulnerability
Daily CyberSecurity
Langflow Under Attacks: CVE-2025-3248 Exploited to Deliver Stealthy Flodrix Botnet
A critical RCE flaw (CVE-2025-3248) in Langflow is being actively exploited to deploy the stealthy Flodrix botnet for reconnaissance and diverse DDoS attacks on AI app servers.
16 views
Daily Writeups
⤷ Title: Cómo Usar Subfinder para Bug Bounty: Guía Completa con Ejemplos y Tips Avanzados
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:01:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #bug_bounty #penetration_testing #infosec
Medium
Cómo Usar Subfinder para Bug Bounty: Guía Completa con Ejemplos y Tips Avanzados
Descubre cómo usar Subfinder para enumerar subdominios en Bug Bounty. Guía práctica, ejemplos, APIs y automatización.
15 views
Daily Writeups
⤷ Title: Reflected XSS Exposed: How a Simple Query Parameter Exposed Informatica’s
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 23:48:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #tips_and_tricks #bug_bounty #technology #hacking
Medium
Reflected XSS Exposed: How a Simple Query Parameter Exposed Informatica’s
Uncovering a Cross-Site Scripting flaw and how you can spot similar bugs using modern tools
17 views
Daily Writeups
⤷ Title: Fuzzing Hidden HTTP Methods for Admin Access
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 23:48:29 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #penetration_testing #technology #bug_bounty
Medium
Fuzzing Hidden HTTP Methods for Admin Access
How overlooked HTTP verbs can unlock sensitive functions and hidden admin panels
19 views
Daily Writeups
⤷ Title: “My Wardriving Setup: Laptop and TP-Link Adapter”
════════════════════════
𐀪 Author: Canonminibeast
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 23:27:23 GMT
════════════════════════
⌗ Tags: #hacking_tools #cybersecurity #wardriving #wifihacking #hacking
Medium
“My Wardriving Setup: Laptop and TP-Link Adapter”
hey hello
17 views
Daily Writeups
⤷ Title: ️‍♂️ From Curiosity to Creation: How We Built an OSINT Tool for Real-World Investigations
════════════════════════
𐀪 Author: Vinoth Dayalan
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 23:48:23 GMT
════════════════════════
⌗ Tags: #my_journey #npci #infosec #osint #cybersecurity
Medium
🕵️‍♂️ From Curiosity to Creation: How We Built an OSINT Tool for Real-World Investigations
From average CGPA to real-world impact — here’s how I went from student to solving actual digital intelligence problems.
23 views
Daily Writeups
⤷ Title: RedTeamGPT: How AI Is Revolutionizing Offensive Security & Red Team Operations
════════════════════════
𐀪 Author: Ekene Joseph
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 00:06:32 GMT
════════════════════════
⌗ Tags: #chatgpt #cybersecurity #penetration_testing #red_team #ethical_hacking
Medium
🚨 RedTeamGPT: How AI Is Revolutionizing Offensive Security & Red Team Operations
In today’s fast-evolving cyber landscape, RedTeamGPT is transforming the way security professionals simulate attacks, assess…
39 views
Daily Writeups
⤷ Title: Rethinking Hiring: Why Cybersecurity Leadership Starts with Talent
════════════════════════
𐀪 Author: Yaroslav
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 23:43:00 GMT
════════════════════════
⌗ Tags: #leadership #hr #cybersecurity #talent
Medium
Rethinking Hiring: Why Cybersecurity Leadership Starts with Talent
For years, the cybersecurity conversation has revolved around the latest threats, cutting-edge technologies, and intricate processes. But a…
17 views
Daily Writeups
⤷ Title: TShark: The Basics | TryHackMe
════════════════════════
𐀪 Author: Dhwanit Pandya
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 23:38:37 GMT
════════════════════════
⌗ Tags: #command_line_tools #packet_analysis #tshark #tryhackme #cybersecurity
Medium
TShark: The Basics | TryHackMe
Welcome to the TShark Room on Try Hack Me!
25 views
Daily Writeups
⤷ Title: Unit 42 Managed XSIAM by Palo Alto Networks: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 23:31:36 GMT
════════════════════════
⌗ Tags: #data_security #palo_alto_networks #cybersecurity #network_security #cloud_security
Medium
Unit 42 Managed XSIAM by Palo Alto Networks: A Comprehensive Guide
In today’s cyber landscape, where threats evolve faster than ever, organizations need more than just tools — they need expertise…
27 views
Daily Writeups
⤷ Title: Windows Hello Update: Microsoft Disables Facial Recognition in the Dark Due to Security Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 02:15:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Windows #Biometrics #Face ID #Facial Recognition #Infrared Camera #Microsoft #security flaw #spoofing #Vulnerability #Windows 10 #Windows 11 #Windows Hello
Daily CyberSecurity
Windows Hello Update: Microsoft Disables Facial Recognition in the Dark Due to Security Flaw
Microsoft disabled Windows Hello facial recognition in dark environments on Windows 10/11 due to a security flaw that could allow local spoofing attacks.
26 views
Daily Writeups
⤷ Title: TryHackMe: Light — Walkthrough
════════════════════════
𐀪 Author: 4A696E
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 01:38:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #injection #walkthrough #tryhackme #hacking
Medium
TryHackMe: Light — Walkthrough
In this walkthrough, I’ll be going through the process of exploiting a vulnerable database application in TryHackMe’s ‘Light!’ room.
18 views
Daily Writeups
⤷ Title: c2Pac: Using Named Pipes for C2 Operations
════════════════════════
𐀪 Author: Tom O'Neill
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 01:31:13 GMT
════════════════════════
⌗ Tags: #red_team #hacking #penetration_testing #cybersecurity
Medium
c2Pac: Using Named Pipes for C2 Operations
A proof-of-concept using Named Pipes as a covert C2 channel
15 views
Daily Writeups
⤷ Title: Tuesday Morning Threat Report: June 17, 2025
════════════════════════
𐀪 Author: Mark Maguire
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 01:16:17 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #cybersecurity
Medium
Tuesday Morning Threat Report: June 17, 2025
OpenAI bans ChatGPT accounts used by state-sponsored hackers and INTERPOL seizes 20,000+ malicious IP addresses
12 views
Daily Writeups
⤷ Title: WHY DIGITAL SECURITY SYSTEMS FAIL: AN ETHICAL HACKER’S PERSPECTIVE
════════════════════════
𐀪 Author: handev.code
════════════════════════
ⴵ Time: Tue, 17 Jun 2025 01:44:34 GMT
════════════════════════
⌗ Tags: #penetration_testing #digital_security #ethical_hacking #infosec #cybersecurity
Medium
WHY DIGITAL SECURITY SYSTEMS FAIL: AN ETHICAL HACKER’S PERSPECTIVE
My day-to-day job is breaking into systems — legally.  The longer I work in this field, the more I realize: many systems appear secure…
11 views