Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Step-by-Step Guide to Acquiring X
════════════════════════
𐀪 Author: $X (X Community)
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:14:51 GMT
════════════════════════
⌗ Tags: #crypto_guide #ethereum #xs #x_community
Medium
Step-by-Step Guide to Acquiring X
An easy guide to securing X.
37 views
Daily Writeups
⤷ Title: Harden-Runner: EDR for CI/CD Stops Supply Chain Attacks Cold
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:06:03 +0000
════════════════════════
⌗ Tags: #Open Source Tool #CI/CD #Continuous Delivery #Continuous Integration #cybersecurity #EDR #Endpoint Detection and Response #GitHub Actions #Harden_Runner #security #StepSecurity #supply chain attack
Penetration Testing Tools
Harden-Runner: EDR for CI/CD Stops Supply Chain Attacks Cold
StepSecurity's "Harden-Runner" is a CI/CD security agent functioning as an EDR for runners, preventing exfiltration, detecting tampering, and securing over a million workflow runs weekly.
36 views
Daily Writeups
⤷ Title: Fedora Delays 32-bit Support End: Community Outcry Saves Gaming & Legacy Apps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:34:17 +0000
════════════════════════
⌗ Tags: #Linux #32_bit Support #Bazzite #Community Debate #Fedora Linux #gaming #Linux distribution #Multilib #open source #Wayland #X.org #Xlibre
Penetration Testing Tools
Fedora Delays 32-bit Support End: Community Outcry Saves Gaming & Legacy Apps
Fedora Linux rejected a proposal to end 32-bit support, delaying the removal of multilib due to community backlash, especially from the gaming sector, and dismissing the Xlibre proposal.
26 views
Daily Writeups
⤷ Title: AI Chatbots Are Leading Users to Phishing Sites: New Report Reveals Dangerous “AI Search Poisoning” Threat
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:31:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Chatbots #Brand Impersonation #cybersecurity #google #LLM #Netcraft #OpenAI #phishing #Scam #Search Poisoning #Social Engineering
Penetration Testing Tools
AI Chatbots Are Leading Users to Phishing Sites: New Report Reveals Dangerous "AI Search Poisoning" Threat
AI chatbots frequently suggest incorrect or fake websites for major brands, creating a new "AI search poisoning" threat where attackers can register these domains for phishing scams.
21 views
Daily Writeups
⤷ Title: CISA Warns: TeleMessage TM SGNL Actively Exploited for Data Leaks, Patch by July 22
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:28:08 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2025_48927 #CVE_2025_48928 #cybersecurity #data leak #Exploited in Wild #Government #Heap Dump #Memory Dump #Spring Boot Actuator #TeleMessage TM SGNL #vulnerability
Penetration Testing Tools
CISA Warns: TeleMessage TM SGNL Actively Exploited for Data Leaks, Patch by July 22
CISA warns of active exploitation of TeleMessage TM SGNL (CVE-2025-48927, CVE-2025-48928), exposing memory dumps & passwords. Federal agencies must patch or cease use by July 22.
19 views
Daily Writeups
⤷ Title: Global E-commerce Fraud Ring Uncovered: Fake Apple, Nordstrom, Brooks Brothers Sites Steal Credit Cards
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:26:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apple #Brooks Brothers #China #Credit Card Theft #E_commerce Fraud #Mexico #Nordstrom #Online Scams #phishing #Retail #Silent Push
Penetration Testing Tools
Global E-commerce Fraud Ring Uncovered: Fake Apple, Nordstrom, Brooks Brothers Sites Steal Credit Cards
A global e-commerce fraud campaign uses thousands of fake retail websites mimicking Apple, Nordstrom, and more, to steal credit card data, with roots tied to Chinese developers.
14 views
Daily Writeups
⤷ Title: Urgent Cisco ISE/ISE-PIC Alert: Critical RCE Flaw (CVSS 10.0) Allow Unauthenticated Root Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:23:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cisco #CVE_2025_20309 #CVSS 10.0 #cybersecurity #Identity Services Engine #ISE #ISE_PIC #RCE #remote code execution #Root Privileges #Unauthenticated #vulnerability
Penetration Testing Tools
Urgent Cisco ISE/ISE-PIC Alert: Critical RCE Flaw (CVSS 10.0) Allow Unauthenticated Root Access
Cisco warns of a critical flaw (CVE-2025-20309, CVSS 10.0) in ISE and ISE-PIC allowing unauthenticated remote root code execution. Apply patches immediately.
17 views
Daily Writeups
⤷ Title: Catwatchful Spyware Hacked: Critical Flaw Exposes 62,000 User Logins & Victim Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:17:01 +0000
════════════════════════
⌗ Tags: #Data Leak #Android #API Misconfiguration #Catwatchful #cybersecurity #data breach #Eric Daigle #firebase #Personal Information #Spyware #stalkerware
Penetration Testing Tools
Catwatchful Spyware Hacked: Critical Flaw Exposes 62,000 User Logins & Victim Data
A critical flaw in Android spyware Catwatchful exposed 62,000 user logins and data from 26,000 victim devices, including the admin's info, due to API misconfiguration.
17 views
Daily Writeups
⤷ Title: Chinese Student Jailed for Smishing: Operated Covert “SMS Blaster” in Car for Mass Phishing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:14:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #Data Theft #DCPCU #Fraud #mobile security #phishing #Rogue Cell Tower #Smishing #SMS Blaster #UK police
Penetration Testing Tools
Chinese Student Jailed for Smishing: Operated Covert "SMS Blaster" in Car for Mass Phishing
A Chinese student was jailed in London for running a smishing campaign with an "SMS Blaster" hidden in his car, spoofing texts to steal data.
25 views
Daily Writeups
⤷ Title: Forminator WordPress Plugin Flaw (CVE-2025-6463, CVSS 8.8): Unauthenticated Arbitrary File Deletion Leads to Site Takeover
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:11:14 +0000
════════════════════════
⌗ Tags: #Vulnerability #Arbitrary File Deletion #CVE_2025_6463 #cybersecurity #Forminator #Plugin #RCE #remote code execution #Site Takeover #vulnerability #Wordfence #WordPress
Penetration Testing Tools
Forminator WordPress Plugin Flaw (CVE-2025-6463, CVSS 8.8): Unauthenticated Arbitrary File Deletion Leads to Site Takeover
A critical flaw (CVE-2025-6463, CVSS 8.8) in Forminator WordPress plugin allows unauthenticated arbitrary file deletion, leading to site takeover.
22 views
Daily Writeups
⤷ Title: Exposed WordPress XML-RPC on akcmv.gov.lv: Brute Force and DDoS Risks
════════════════════════
𐀪 Author: Gouri Sankar A
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:29:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #infosec #bug_bounty #cybersecurity #bug_bounty_tips
Medium
Exposed WordPress XML-RPC on akcmv.gov.lv: Brute Force and DDoS Risks
By Gouri Sankar
51 views
Daily Writeups
⤷ Title: RFD Vulnerability Hunting
════════════════════════
𐀪 Author: AbhirupKonwar
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:16:19 GMT
════════════════════════
⌗ Tags: #vulnerability #bug_bounty #bug_bounty_tips #pentesting #ethical_hacking
Medium
RFD Vulnerability Hunting
Reflected File Download Bug Hunting & Pentesting
25 views
Daily Writeups
⤷ Title: Hunting SSRF in a Single Page Application (SPA) — A Bug Bounty Breakdown
════════════════════════
𐀪 Author: Jabaribrown
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:53:39 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #web_security #bug_bounty #ctf_writeup
Medium
🚛 Hunting SSRF in a Single Page Application (SPA) — A Bug Bounty Breakdown
I recently dove into a lab challenge that looked pretty quiet on the surface — but with some methodical digging, a little Burp Suite, and…
55 views
Daily Writeups
⤷ Title: From LFI to RCE via File Uploads — A Complete Step-by-Step Guide ️
════════════════════════
𐀪 Author: Zoningxtr
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:02:05 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #cybersecurity #web_development
Medium
💥 From LFI to RCE via File Uploads — A Complete Step-by-Step Guide 🧠🗂️
In the world of web hacking, Local File Inclusion (LFI) becomes way more dangerous when combined with another common feature: file uploads…
👏1
36 views
Daily Writeups
⤷ Title: $1,000 Bounty: Stored XSS in Trix Editor v2.1.1 via Malicious Paste Payload
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:57:39 GMT
════════════════════════
⌗ Tags: #xss_attack #technology #bug_bounty #penetration_testing #tips
Medium
$1,000 Bounty: Stored XSS in Trix Editor v2.1.1 via Malicious Paste Payload
How an overlooked sanitization flaw in Trix Editor enabled persistent XSS attacks with a simple copy-paste — and earned a $1,000 reward
34 views
Daily Writeups
⤷ Title: Types of Computer Viruses: Understanding the Hidden Threats in Your System.
════════════════════════
𐀪 Author: Arun Adhikari
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:51:09 GMT
════════════════════════
⌗ Tags: #computer_science #virus #cybersecurity
Medium
Types of Computer Viruses: Understanding the Hidden Threats in Your System.
Every time you open an email or plug in a USB drive, your computer could be exposed to a digital disease. Sounds scary? Let’s break it…
20 views
Daily Writeups
⤷ Title: “SOC vs AI Malware? It’s Not a Fair Fight”
════════════════════════
𐀪 Author: Sneha Rani
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:46:51 GMT
════════════════════════
⌗ Tags: #ai_malware_analysis #soc #cybersecurity #llm_security #devsecops
Medium
“SOC vs AI Malware? It’s Not a Fair Fight”
You think your Security Operations Center (SOC) is ready for anything?
22 views
Daily Writeups
⤷ Title: Kali Linux Alətləri ilə Tanışlıq — Spiderfoot Nədir?
════════════════════════
𐀪 Author: Aghabala Guluzade
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:46:25 GMT
════════════════════════
⌗ Tags: #kalilinux_tools #cybersecurity #osint #social_engineering #spiderfoot
Medium
Kali Linux Alətləri ilə Tanışlıq — Spiderfoot Nədir?
🔧 Alət: Spiderfoot
🗂 Kateqoriya: Reconnaissance / Host Information / Spiderfoot
18 views
Daily Writeups
⤷ Title: Cybersecurity Projects: A Practical Journey
════════════════════════
𐀪 Author: Jeetpatel
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:36:55 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
🔐Cybersecurity Projects: A Practical Journey🚀
In my recent learning journey into the world of cybersecurity, I had the opportunity to develop and implement several foundational tools…
22 views
Daily Writeups
⤷ Title: Cybersecurity Learning Journey
════════════════════════
𐀪 Author: Neelpatel
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:36:22 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
Cybersecurity Learning Journey 🔐
Over the past few weeks, I’ve had the opportunity to dive deep into hands-on cybersecurity projects, transforming theoretical knowledge…
16 views
Daily Writeups
⤷ Title: Advancements in Quantum Computing–a Challenge or Opportunity for Cybersecurity?
════════════════════════
𐀪 Author: Poddar Group of Institutions
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:29:32 GMT
════════════════════════
⌗ Tags: #opportunity #quantum_computing #advancement #cybersecurity
Medium
Advancements in Quantum Computing–a Challenge or Opportunity for Cybersecurity?
Cybersecurity stands as one of the foundational pillars of the digital world, protecting sensitive information, communications, and…
23 views