Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Nali: offline tool for querying IP geographic information and CDN provider
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:11:14 +0000
════════════════════════
⌗ Tags: #OSINT _ Open Source Intelligence #querying IP geographic information
Penetration Testing Tools
Nali: offline tool for querying IP geographic information and CDN provider
I want to query the IP geographic information and CDN service provider on the terminal, then found the Nali tool.
29 views
Daily Writeups
⤷ Title: Varalyze: The All-in-One Threat Intelligence Suite Revolutionizing Security Triage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:08:34 +0000
════════════════════════
⌗ Tags: #Data Forensics #Network Defense #API #cybersecurity #Incident Response #python #Security Automation #Security Tools #threat analysis #threat intelligence #Varalyze
Penetration Testing Tools
Varalyze: The All-in-One Threat Intelligence Suite Revolutionizing Security Triage
Varalyze is a new threat intelligence tool suite that automates data gathering, correlation, and reporting from various sources, streamlining security event triaging for defensive teams.
21 views
Daily Writeups
⤷ Title: Apache Traffic Server Flaws Allow Access Bypass & Remote DoS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:42:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #access control bypass #Apache Traffic Server #ATS #cybersecurity #Denial of Service #dos #ESI Plugin #PROXY Protocol
Daily CyberSecurity
Apache Traffic Server Flaws Allow Access Bypass & Remote DoS
Two critical flaws in Apache Traffic Server (CVE-2025-31698, CVE-2025-49763) allow IP-based ACL bypass and remote DoS via ESI plugin.
18 views
Daily Writeups
⤷ Title: Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:39:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Linux #Local Privilege Escalation #LPE #PAM #pam_namespace #Pluggable Authentication Modules #privilege escalation #race condition #Symlink Attack
Daily CyberSecurity
Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux
A high-severity flaw (CVE-2025-6020) in Linux PAM's pam_namespace allows unprivileged users to gain root via symlink attacks and race conditions.
24 views
Daily Writeups
⤷ Title: Tor Meets Docker: Sophisticated Crypto-Mining Campaign Hijacks Misconfigured APIs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:35:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anonymity #Cloud Security #Cryptojacking #cryptomining #cybersecurity #docker #Docker Remote API #threat actor #Tor network #Trend Micro #XMRig
Daily CyberSecurity
Tor Meets Docker: Sophisticated Crypto-Mining Campaign Hijacks Misconfigured APIs
Trend Micro uncovers a new attack method using misconfigured Docker Remote APIs and the Tor network to stealthily deploy cryptominers and establish persistent access.
18 views
Daily Writeups
⤷ Title: MySQL Servers Under Attack: Threat Actors Exploiting UDFs to Inject Gh0stRAT, XWorm & Zoho Agents
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:30:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASEC #cyberattack #cybersecurity #database security #Gh0stRAT #HpLoader #mysql #Remote Access Trojan #UDF #User Defined Functions #XWorm #Zoho ManageEngine
Daily CyberSecurity
MySQL Servers Under Attack: Threat Actors Exploiting UDFs to Inject Gh0stRAT, XWorm & Zoho Agents
Threat actors are actively compromising poorly managed MySQL servers, using UDFs to inject Gh0stRAT, XWorm, HpLoader, and legitimate Zoho agents for full system control and data theft.
18 views
Daily Writeups
⤷ Title: SSRF Flaw (CVE-2025-6087) in OpenNext for Cloudflare Allows Unauthenticated Content Proxying
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:27:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloudflare #CVE_2025_6087 #cybersecurity #Image Proxy #Next.js #OpenNext #Server_Side Request Forgery #ssrf #Vulnerability #Web Security
Daily CyberSecurity
SSRF Flaw (CVE-2025-6087) in OpenNext for Cloudflare Allows Unauthenticated Content Proxying
A critical SSRF flaw (CVE-2025-6087) in @opennextjs/cloudflare allows unauthenticated users to proxy arbitrary remote content via /_next/image endpoint.
21 views
Daily Writeups
⤷ Title: Elastic Uncovers Stealthy Campaign Using GHOSTPULSE and ARECHCLIENT2 Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:22:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arechclient2 #ClickFix #cybersecurity #Elastic Security Labs #GHOSTPULSE #Infostealer #malware #phishing #rat #Remote Access Trojan #SecTopRAT #social engineering
Daily CyberSecurity
Elastic Uncovers Stealthy Campaign Using GHOSTPULSE and ARECHCLIENT2 Malware
Elastic uncovers a sophisticated ClickFix campaign deploying the GHOSTPULSE loader to deliver ARECHCLIENT2 malware, leveraging social engineering for credential theft and remote access.
15 views
Daily Writeups
⤷ Title: Ransomware Gang Qilin Rises Amid Collapse of Major Gangs Like RansomHub and LockBit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:19:57 +0000
════════════════════════
⌗ Tags: #Malware #BlackLock #cyberattack #Cybercrime #Cybereason #DragonForce #Everest #LockBit #Qilin #RaaS #RansomHub #ransomware #Ransomware_as_a_Service
Daily CyberSecurity
Ransomware Gang Qilin Rises Amid Collapse of Major Gangs Like RansomHub and LockBit
Qilin ransomware is rapidly dominating the RaaS landscape, as rivals like RansomHub and LockBit face collapse, internal chaos, and public defacements by "XOXO from Prague."
20 views
Daily Writeups
⤷ Title: Critical Auth Bypass Vulnerability (CVE-2025-51381) Found in KAON KCM3100 Gateways
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:12:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2025_51381 #cybersecurity #IoT security #KAON #KCM3100 #network_security #Vulnerability #Wi_Fi Gateway
Daily CyberSecurity
Critical Auth Bypass Vulnerability (CVE-2025-51381) Found in KAON KCM3100 Gateways
A critical flaw (CVE-2025-51381) in KAON KCM3100 Wi-Fi gateways allows local attackers to bypass authentication. Update firmware to version 1.4.8 immediately.
19 views
Daily Writeups
⤷ Title: Invoice to Infection: Sorillus RAT Campaign Strikes European Organizations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:06:16 +0000
════════════════════════
⌗ Tags: #Malware #cyberattack #cybersecurity #Europe #MaaS #Mediafire #Ngrok #OneDrive #Orange Cyberdefense #phishing #rat #Remote Access Trojan #SambaSpy #Sorillus
Daily CyberSecurity
Invoice to Infection: Sorillus RAT Campaign Strikes European Organizations
A new wave of invoice-themed phishing emails is distributing the Sorillus RAT across Europe, leveraging legitimate platforms like OneDrive and Ngrok for stealthy delivery.
14 views
Daily Writeups
⤷ Title: XDSpy Resurfaces: Stealthy Cyber-Espionage Campaign Targets Governments with Obscure Windows LNK Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:00:11 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #cyber_espionage #Eastern Europe #HarfangLab #LNK Vulnerability #malware #russia #Windows Security #XDigo #XDSpy #ZDI_CAN_25373
Daily CyberSecurity
XDSpy Resurfaces: Stealthy Cyber-Espionage Campaign Targets Governments with Obscure Windows LNK Flaw
XDSpy, a covert cyber-espionage group, is back with a sophisticated campaign targeting governments, leveraging an obscure Windows LNK file parsing flaw and new XDigo malware
22 views
Daily Writeups
⤷ Title: Network Protocols 101: Categories, Types, and Common Ports Explained
════════════════════════
𐀪 Author: BlueTeam Bytes
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:53:32 GMT
════════════════════════
⌗ Tags: #networking #cybersecurity #computer_science #technology
Medium
Network Protocols 101: Categories, Types, and Common Ports Explained
In today’s connected world, every device you use relies on invisible rules to talk to each other seamlessly. These rules are known as…
19 views
Daily Writeups
⤷ Title: ⚠️ The Hidden Dangers of Using Public Wi-Fi: What You Need to Know
════════════════════════
𐀪 Author: Mustafa ahmed
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:39:08 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
⚠️ The Hidden Dangers of Using Public Wi-Fi: What You Need to Know
Public Wi-Fi is everywhere — in cafes, airports, malls, and hotels. It’s convenient, fast, and free. But behind the ease lies a serious cybersecurity risk that most people don’t even think about…
18 views
Daily Writeups
⤷ Title: How I Hosted a Website on Amazon S3! | NextWork Cloud Project
════════════════════════
𐀪 Author: Angie
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:06:10 GMT
════════════════════════
⌗ Tags: #cloud #cybersecurity #cloud_security #blogging #aws
Medium
How I Hosted a Website on Amazon S3! | NextWork Cloud Project
DevOps + Cloud Security Blog Series by Angie
19 views
Daily Writeups
⤷ Title: Smart Reasons to Hire a Los Angeles Managed IT Service Provider in 2025
════════════════════════
𐀪 Author: AI Managed IT Services
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 23:56:02 GMT
════════════════════════
⌗ Tags: #cyber_insurance #it_services #ai_managed_it #managed_it_services #cybersecurity
Medium
Smart Reasons to Hire a Los Angeles Managed IT Service Provider in 2025
If “one minute equals money,” consider this: unplanned downtime now costs smaller firms about $427 per minute. For growth-minded companies…
18 views
Daily Writeups
⤷ Title: Windows Memory Forensics — Zeus Banking Trojan Dump
════════════════════════
𐀪 Author: Dhruv Saikia
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 23:55:51 GMT
════════════════════════
⌗ Tags: #memory_forensics #cybersecurity #forensics #memory_analysis
Medium
Windows Memory Forensics — Zeus Banking Trojan Dump
Introduction
21 views
Daily Writeups
⤷ Title: Two IT Careers That Stood the Test of Time
════════════════════════
𐀪 Author: DuckWrites
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 23:54:54 GMT
════════════════════════
⌗ Tags: #professional_development #data_driven #it_career #database_security #cybersecurity
Medium
Two IT Careers That Stood the Test of Time
My time at HP marked a before-and-after in my professional life. I had the privilege of working with brilliant minds in both Puerto Rico…
17 views
Daily Writeups
⤷ Title: Reverse Engineering the Digital Battlefield: Unmasking Cyberwarfare Malware Like Stuxnet and…
════════════════════════
𐀪 Author: A-STAR7_DOCTOR
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 23:50:00 GMT
════════════════════════
⌗ Tags: #technology #future #data_science #programming #cybersecurity
Medium
Reverse Engineering the Digital Battlefield: Unmasking Cyberwarfare Malware Like Stuxnet and NotPetya
By Aditiya Widodo Putra, Cybersecurity & Blockchain Consultant
20 views
Daily Writeups
⤷ Title: Chrome Zero-Day Vulnerability (CVE‑2025‑4664): What You Need to Know and How to Stay Safe
════════════════════════
𐀪 Author: ruchir ganatra
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 23:45:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #zero_day #ai #cyberwar #zerotrust_security
Medium
🚨 Chrome Zero-Day Vulnerability (CVE‑2025‑4664): What You Need to Know and How to Stay Safe
⚠️ On June 5, 2025, Google confirmed a critical zero-day vulnerability in Chrome that could let attackers hijack your device just by…
20 views
Daily Writeups
⤷ Title: Building HavenAI: A Local-First AI Security Tool That Respects Privacy
════════════════════════
𐀪 Author: Teshera Kimbrough
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 23:39:50 GMT
════════════════════════
⌗ Tags: #streamlit #machine_learning #ai_security #cybersecurity #privacy
Medium
Building HavenAI: A Local-First AI Security Tool That Respects Privacy
When I set out to build HavenAI Secure, I wasn’t just creating another AI demo. I was solving a real problem I’d felt firsthand in security…
22 views