Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Based Malware is a Solved Problem. We’re Just Using the Wrong Approach
════════════════════════
𐀪 Author: Rijal s
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 22:13:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_architecture #zero_trust #technology
Medium
Based Malware is a Solved Problem. We’re Just Using the Wrong Approach
Why our reactive approach to cybersecurity is a losing battle, and a new proactive framework to win it
18 views
Daily Writeups
⤷ Title: The Nobitex Hack: Iran, Israel, and the Cyberwar Heating Up
════════════════════════
𐀪 Author: TheCyberSalad
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 21:46:47 GMT
════════════════════════
⌗ Tags: #news #cyberwar #nobitex #cybersecurity #cryptocurrency
Medium
The Nobitex Hack: Iran, Israel, and the Cyberwar Heating Up
Inntro
22 views
Daily Writeups
⤷ Title: Importance of cyber security
════════════════════════
𐀪 Author: Chandanjana
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 21:37:29 GMT
════════════════════════
⌗ Tags: #onlinecrimes #cybersecurity
Medium
Importance of cyber security
The majority of companies rely on IT infrastructure nowadays, thus people must understand the significance of cybersecurity in order to…
19 views
Daily Writeups
⤷ Title: The Quantum Revolution: How Tomorrow’s Computers Will Reshape Cryptocurrency
════════════════════════
𐀪 Author: Brendan on Blockchain
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 21:18:52 GMT
════════════════════════
⌗ Tags: #ethereum #bitcoin #quantum_computing #cybersecurity
Medium
The Quantum Revolution: How Tomorrow’s Computers Will Reshape Cryptocurrency
There’s been endless chatter about AI transforming everything, but I keep coming back to what I see as the next seismic shift brewing in…
28 views
Daily Writeups
⤷ Title: DREAMING WRITEUP : TRYHACKME
════════════════════════
𐀪 Author: rizzziom
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 22:32:38 GMT
════════════════════════
⌗ Tags: #tryhackme #penetration_testing #ctf_writeup #ctf #tryhackme_walkthrough
Medium
DREAMING WRITEUP : TRYHACKME
To access the machine, click on the link given below:
28 views
Daily Writeups
⤷ Title: Exploiting JBoss for Remote Code Execution (RCE) — A Step-by-Step Practical Walkthrough
════════════════════════
𐀪 Author: Klasster
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 22:49:50 GMT
════════════════════════
⌗ Tags: #jboss #vulnerability #red_team #rce
Medium
Exploiting JBoss for Remote Code Execution (RCE) — A Step-by-Step Practical Walkthrough
Introduction
❤1
29 views
Daily Writeups
⤷ Title: GhidraMCP: Revolutionizing Reverse Engineering by Connecting Ghidra to LLMs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:28:28 +0000
════════════════════════
⌗ Tags: #Reverse Engineering #AI #Artificial intelligence #cybersecurity #Ghidra #LLM #malware analysis #MCP #Model Context Protocol #reverse engineering #Software Analysis
Penetration Testing Tools
GhidraMCP: Revolutionizing Reverse Engineering by Connecting Ghidra to LLMs
GhidraMCP is an MCP server allowing LLMs to autonomously reverse engineer applications, exposing Ghidra's core functionality for AI-powered binary analysis.
❤1
29 views
Daily Writeups
⤷ Title: chain-bench: auditing your software supply chain stack for security compliance
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:03:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #auditing software supply chain #chain_bench
Penetration Testing Tools
chain-bench: auditing your software supply chain stack for security compliance
Chain-bench is an open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark
26 views
Daily Writeups
⤷ Title: Critical Versa Director Flaw: RCE Possible via HA Ports, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:40:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Enterprise Security #network_security #proof_of_concept #rce #Remote Code Execution #SD_WAN #Versa Director
Daily CyberSecurity
Critical Versa Director Flaw: RCE Possible via HA Ports, PoC Available
A critical flaw (CVE-2024-45208, CVSS 9.8) in Versa Director allows unauthenticated RCE via exposed HA ports. PoC code is public, demanding immediate hardening.
12 views
Daily Writeups
⤷ Title: Amatera Stealer Unveiled: Rebranded ACR Stealer Now More Evasive, Targeting Your Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:37:12 +0000
════════════════════════
⌗ Tags: #Malware #ACR Stealer #Amatera Stealer #ClearFake #ClickFix #cybersecurity #Infostealer #MaaS #malware #Malware_as_a_Service #NTSockets #Proofpoint #WoW64 syscalls
Daily CyberSecurity
Amatera Stealer Unveiled: Rebranded ACR Stealer Now More Evasive, Targeting Your Data
Amatera Stealer, a rebranded and enhanced version of ACR Stealer, uses advanced evasion tactics like NTSockets and WoW64 syscalls to steal data from browsers, crypto wallets, and apps.
18 views
Daily Writeups
⤷ Title: Banana Squad Strikes Again: 60+ GitHub Repositories Trojanized in New Software Supply Chain Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:33:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Banana Squad #cybersecurity #github #Infostealer #malware #Obfuscation #Python #ReversingLabs #Software Supply Chain #supply chain attack
Daily CyberSecurity
Banana Squad Strikes Again: 60+ GitHub Repositories Trojanized in New Software Supply Chain Attack
Banana Squad has compromised over 60 GitHub repos with malicious Python files, using UI quirks to hide malware and steal data from developers via a sophisticated supply chain attack.
9 views
Daily Writeups
⤷ Title: Russian APT UNC6293 Exploits Google Application-Specific Passwords to Hack Critics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:28:22 +0000
════════════════════════
⌗ Tags: #Cyber Security #Application_Specific Passwords #APT29 #ASP #Cyberespionage #Google Accounts #Google Threat Intelligence #phishing #Russian APT #social engineering #state_sponsored #UNC6293
Daily CyberSecurity
Russian APT UNC6293 Exploits Google Application-Specific Passwords to Hack Critics
A Russian state-sponsored APT, UNC6293 (likely APT29), is exploiting Google Application-Specific Passwords in a sophisticated phishing campaign targeting critics of Russia
16 views
Daily Writeups
⤷ Title: Stargazers Ghost Network: Minecraft Mods Used to Distribute Multi-Stage Stealers via GitHub
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:28:10 +0000
════════════════════════
⌗ Tags: #Malware #Check Point Research #cryptocurrency #cybersecurity #DaaS #gaming #github #Infostealer #MaaS #malware #Minecraft #Modding #rat #Remote Access Trojan #Stargazers Ghost Network
Daily CyberSecurity
Stargazers Ghost Network: Minecraft Mods Used to Distribute Multi-Stage Stealers via GitHub
A new report from Check Point Research exposes a sophisticated malware campaign that has weaponized the modding community of one of the world’s most popular games—Minecraft—to distribute a multi-s…
13 views
Daily Writeups
⤷ Title: PylangGhost: North Korean APT Deploys Python-Based RAT to Target Crypto Professionals
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:22:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #APT #Blockchain #Cisco Talos #cryptocurrency #cybersecurity #Famous Chollima #GolangGhost #Job Scam #North Korea #phishing #PylangGhost #rat #Remote Access Trojan #Wagemole
Daily CyberSecurity
PylangGhost: North Korean APT Deploys Python-Based RAT to Target Crypto Professionals
Recently, Cisco Talos unveiled a new Python-based remote access trojan (RAT) dubbed PylangGhost, used exclusively by a North Korean-aligned threat actor known as Famous Chollima (a.k.a. Wagemole).…
18 views
Daily Writeups
⤷ Title: Silver Fox APT: Chinese Threat Actor Deploys Trojanized Medical Software in Stealth Espionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:19:39 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #cyber_espionage #cybersecurity #DICOM Viewer #Gh0st RAT #healthcare #Japan #malware #Silver Fox #state_sponsored #Taiwan #Trojanized Software #ValleyRAT #Winos 4.0
Daily CyberSecurity
Silver Fox APT: Chinese Threat Actor Deploys Trojanized Medical Software in Stealth Espionage Campaign
A newly surfaced report from Picus has shed light on Silver Fox (a.k.a. Void Arachne or The Great Thief of Valley), a sophisticated China-based advanced persistent threat (APT) group responsible f…
12 views
Daily Writeups
⤷ Title: Critical Privilege Escalation Flaw in FreeIPA Threatens Linux Domain Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:12:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Domain Admin #FreeIPA #Identity Management #Kerberos #Linux Security #privilege escalation #redhat
Daily CyberSecurity
Critical Privilege Escalation Flaw in FreeIPA Threatens Linux Domain Security
A critical flaw (CVE-2025-4404, CVSS 9.1) in FreeIPA allows authenticated users to escalate privileges to domain admin via Kerberos impersonation.
13 views
Daily Writeups
⤷ Title: CISA Warning: Critical Flaw (CVE-2025-5310) Exposes Fueling Station Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:08:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Critical Infrastructure #CVE_2025_5310 #cybersecurity #Dover Fueling Solutions #Fuel Infrastructure #ICS #Operational Technology #OT #ProGauge MagLink #Vulnerability
Daily CyberSecurity
CISA Warning: Critical Flaw (CVE-2025-5310) Exposes Fueling Station Devices
CISA warns fuel infrastructure operators of a critical flaw (CVE-2025-5310) in Dover Fueling Solutions ProGauge MagLink devices, risking control
11 views
Daily Writeups
⤷ Title: ComfyUI Under Attack: “Pickai” C++ Backdoor Compromises 700+ AI Image Generation Servers Globally
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:00:36 +0000
════════════════════════
⌗ Tags: #Malware #AI #artificial intelligence #backdoor #ComfyUI #cybersecurity #image generation #Linux #malware #Pickai #supply chain attack #threat intelligence #XLab
Daily CyberSecurity
ComfyUI Under Attack: "Pickai" C++ Backdoor Compromises 700+ AI Image Generation Servers Globally
A C++ backdoor named Pickai is actively exploiting ComfyUI servers, compromising nearly 700 AI image generation hosts and posing a supply chain risk
15 views
Daily Writeups
⤷ Title: httpx para Bug Bounty: Guía Completa para Detectar Subdominios y Hosts Activos
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:01:35 GMT
════════════════════════
⌗ Tags: #penetration_testing #ethical_hacking #bug_bounty #infosec #cybersecurity
Medium
httpx para Bug Bounty: Guía Completa para Detectar Subdominios y Hosts Activos
Aprende a usar httpx para descubrir hosts HTTP activos en bug bounty. Guía práctica con comandos, ejemplos y consejos clave.
17 views
Daily Writeups
⤷ Title: Introductory Researching - TryHackME
════════════════════════
𐀪 Author: Gaurav Mukherjee
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:07:08 GMT
════════════════════════
⌗ Tags: #ctf #hacking #cybersecurity #tryhackme #research
Medium
Introductory Researching - TryHackME
Write-up for TryHackME’s Introductory Researching room
7 views
Daily Writeups
⤷ Title: Loud Audiences
════════════════════════
𐀪 Author: Jess Trochet
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:17:56 GMT
════════════════════════
⌗ Tags: #infosec #access_control #access_control_systems #identity_management
Medium
Loud Audiences
Building access management systems at scale can get as chaotic as a henhouse… but it doesn’t have to be.
10 views