Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: How I Stole Tokens with One OAuth Misstep
════════════════════════
𐀪 Author: Ibtissam hammadi
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 21:07:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #hacking #web_security #tech
Medium
How I Stole Tokens with One OAuth Misstep
“It was 2 AM, my fifth coffee deep when I almost dismissed the bug that would leak thousands of tokens. All because of one misconfigured…
41 views
Daily Writeups
⤷ Title: How I Visualized Data with Amazon QuickSight | NextWork AWS Beginner Project
════════════════════════
𐀪 Author: Angie
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 21:30:00 GMT
════════════════════════
⌗ Tags: #cloud #infosec #cloud_computing #blogging #aws
Medium
How I Visualized Data with Amazon QuickSight | NextWork AWS Beginner Project
DevOps + Cloud Security Blog Series by Angie
35 views
Daily Writeups
⤷ Title: Exfiltrating Whatsapp messages via whatsapp-mcp
════════════════════════
𐀪 Author: Arpit Kubadia
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 22:41:49 GMT
════════════════════════
⌗ Tags: #mcp_server #cybersecurity #privacy #ai
Medium
Exfiltrating Whatsapp messages via whatsapp-mcp
A while back I came across the Whatsapp MCP server that allowed you to send and receive messages from Whatsapp using an MCP server that you…
44 views
Daily Writeups
⤷ Title: NGINX Log Analizi ile Güvenlik Tehditlerinin Tespiti ve Trafik Gözlem
════════════════════════
𐀪 Author: Mustafa Caliskan
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 22:30:07 GMT
════════════════════════
⌗ Tags: #siber_guvenlik #cybersecurity #nginx
Medium
NGINX Log Analizi ile Güvenlik Tehditlerinin Tespiti ve Trafik Gözlem
Modern web altyapılarında yalnızca uygulamanın sorunsuz çalışması değil, arka planda akan trafiğin doğru analiz edilmesi de kritik bir…
30 views
Daily Writeups
⤷ Title: Highest paying jobs in cyber security
════════════════════════
𐀪 Author: Chandanjana
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 21:02:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyberattack #cybercrime #job_in_cybersecurity #cyber_security_awareness
Medium
Highest paying jobs in cyber security
Because technology companies are now utilizing resources to create secure data storage systems, cybersecurity capabilities are often in…
28 views
Daily Writeups
⤷ Title: Nmap Basic Port Scans — TryHackMe
════════════════════════
𐀪 Author: sercan timocin
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 22:58:34 GMT
════════════════════════
⌗ Tags: #nmap #tryhackme #penetration_testing #network_security #pentesting
Medium
Nmap Basic Port Scans — TryHackMe
Task 1: Introduction
36 views
Daily Writeups
⤷ Title: STEEL MOUNTAIN WALKTHROUGH : TRYHACKME
════════════════════════
𐀪 Author: rizzziom
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 22:31:15 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #penetration_testing #ctf_writeup #ctf
Medium
STEEL MOUNTAIN WALKTHROUGH : TRYHACKME
Writeup for Steel Mountain CTF.
35 views
Daily Writeups
⤷ Title: Voleur HTB Walkthrough
════════════════════════
𐀪 Author: Ibrahim Isiaq Bolaji
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 21:17:22 GMT
════════════════════════
⌗ Tags: #hackthebox #htb #hackthebox_walkthrough #htb_writeup #hackthebox_writeup
Medium
Voleur HTB Walkthrough
Welcome to my Medium page. If you are new here, don’t forget to follow me and subscribe to my YouTube channel.
46 views
Daily Writeups
⤷ Title: The API Supply Chain: Your Biggest Security Risk Might Not Be Your Own Code
════════════════════════
𐀪 Author: Akansha Shukla
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 22:55:55 GMT
════════════════════════
⌗ Tags: #third_party_api #supply_chain #vendor_security #owasp_api_security_top_10 #api_security
Medium
The API Supply Chain: Your Biggest Security Risk Might Not Be Your Own Code
Today’s applications are not monolithic islands; they are complex ecosystems built on a foundation of third-party APIs. We rely on external services for everything: processing payments, validating…
50 views
Daily Writeups
⤷ Title: Malicious Firefox Extensions Unmasked: Fake Games, VPNs, & Calendar Tools Hijack Traffic, Steal Crypto & OAuth Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:29:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Affiliate Hijacking #Browser Extensions #cryptocurrency #cybersecurity #firefox #malware #OAuth Theft #phishing #Scams #Socket #threat intelligence #vpn
Daily CyberSecurity
Malicious Firefox Extensions Unmasked: Fake Games, VPNs, & Calendar Tools Hijack Traffic, Steal Crypto & OAuth Tokens
Socket uncovers a sprawling network of malicious Firefox extensions, masquerading as games, VPNs, and tools, to hijack affiliate links, steal OAuth tokens, and reroute traffic.
40 views
Daily Writeups
⤷ Title: Nobitex Hack Unveils Iran’s Crypto Blueprint: Sanctions Evasion & Surveillance Defiance Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:26:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Blockchain #Crypto Exchange #cryptocurrency #cyberattack #geopolitics #hack #Iran #Nobitex #Predatory Sparrow #Sanctions Evasion #TRM Labs
Daily CyberSecurity
Nobitex Hack Unveils Iran's Crypto Blueprint: Sanctions Evasion & Surveillance Defiance Exposed
TRM Labs' analysis of the Nobitex hack reveals Iran's crypto exchange was engineered for sanctions evasion, featuring deep fiat integration and blockchain obfuscation to defy surveillance.
27 views
Daily Writeups
⤷ Title: IBM X-Force Uncovers Azure Arc Flaws: Hybrid-Cloud Tool Becomes Stealthy RCE & Privilege Escalation Vector
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:19:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Azure Arc #cybersecurity #DPAPI_NG #Hardcoded Secrets #hybrid cloud #IBM X_Force #Microsoft Azure #persistence #privilege escalation #rce #Remote Code Execution #Service Principal #supply chain attack
Daily CyberSecurity
IBM X-Force Uncovers Azure Arc Flaws: Hybrid-Cloud Tool Becomes Stealthy RCE & Privilege Escalation Vector
IBM X-Force reveals Azure Arc can be exploited for RCE and privilege escalation via hardcoded secrets, recoverable credentials, and overscoped roles, turning it into a stealthy threat vector.
30 views
Daily Writeups
⤷ Title: “NightEagle” APT Group Soars Over China’s Critical Tech: Zero-Days, Exchange Exploits, and Tailored Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:12:19 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #APT_Q_95 #china #chisel #Cyberespionage #cybersecurity #Exchange Zero_Day #Fileless Malware #Microsoft Exchange #NightEagle #QiAnXin
Daily CyberSecurity
“NightEagle” APT Group Soars Over China’s Critical Tech: Zero-Days, Exchange Exploits, and Tailored Espionage
NightEagle APT (APT-Q-95) is exploiting an unknown Exchange zero-day to target China's strategic industries, using fileless malware and exfiltrating machineKey for remote email access.
32 views
Daily Writeups
⤷ Title: SHELLTER Evasion Framework Abused: Elite v11.0 Packages LUMMA, RHADAMANTHYS, ARECHCLIENT2 Infostealers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:07:26 +0000
════════════════════════
⌗ Tags: #Malware #Arechclient2 #cybersecurity #Elastic Security Labs #Evasion Framework #Infostealer #Lumma #malware #polymorphic #Red Team tool #Rhadamanthys #shellter
Daily CyberSecurity
SHELLTER Evasion Framework Abused: Elite v11.0 Packages LUMMA, RHADAMANTHYS, ARECHCLIENT2 Infostealers
Elastic Security Labs reveals SHELLTER Elite v11.0 is being abused to deploy LUMMA, RHADAMANTHYS, and ARECHCLIENT2 infostealers, leveraging advanced evasion techniques to bypass AV/EDR
32 views
Daily Writeups
⤷ Title: Linux Privilege Escalation (CVE-2025-6019): Root Access Via udisksd & libblockdev, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:00:20 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability Report #CVE_2025_6019 #cybersecurity #libblockdev #PAM #privilege escalation #proof_of_concept #root access #sudo #udisksd #Vulnerability
Daily CyberSecurity
Linux Privilege Escalation (CVE-2025-6019): Root Access Via udisksd & libblockdev, PoC Available
A critical Linux flaw (CVE-2025-6019) in udisksd/libblockdev allows local privilege escalation to root. PoC available. Update now to secure your system!
24 views
Daily Writeups
⤷ Title: Why Parrot Security OS is the Go-To Choice for Ethical Hacking
════════════════════════
𐀪 Author: ThamizhElango Natarajan
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:31:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #parrotos #pentest #cybersecurity #linux
Medium
Why Parrot Security OS is the Go-To Choice for Ethical Hacking
Ethical hacking has become an essential discipline in cybersecurity, with organizations actively seeking skilled professionals to identify…
24 views
Daily Writeups
⤷ Title: Secure Wireless Access Points by Fortinet: A Comprehensive Guide
════════════════════════
𐀪 Author: Juara IT Solutions
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:02:55 GMT
════════════════════════
⌗ Tags: #ai #fortinet #cloud_security #cybersecurity #network_security
Medium
Secure Wireless Access Points by Fortinet: A Comprehensive Guide
In today’s connected enterprise environment, secure wireless access has become a business-critical necessity. Fortinet, a global leader in…
32 views
Daily Writeups
⤷ Title: SecOps in Action: GoPhish Sim #2
════════════════════════
𐀪 Author: TheMachine
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 22:49:34 GMT
════════════════════════
⌗ Tags: #gophish #n8n #phishing #cybersecurity
Medium
SecOps in Action: GoPhish Sim #2
Ever get an email that feels a bit… off, but can’t quite put your finger on why? Maybe it’s an urgent message from your boss, or your boss’s boss. The layout is familiar, the language is on point…
42 views
Daily Writeups
⤷ Title: BTL1 Blue Team Level 1, the blue team OSCP?
════════════════════════
𐀪 Author: Seccult
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 00:33:26 GMT
════════════════════════
⌗ Tags: #securityblueteam #tryhackme #oscp #soc_analyst #btl1
Medium
BTL1 Blue Team Level 1, the blue team OSCP?
I recently completed the BTL1 course material, and challenged, and passed the associated exam with a perfect 100%!
45 views
Daily Writeups
⤷ Title: Dari Twitter ke X: Evolusi Platform Mikroblogging yang Mengubah Dunia
════════════════════════
𐀪 Author: RUBY8000 TERBAEEEK
════════════════════════
ⴵ Time: Sun, 06 Jul 2025 23:42:47 GMT
════════════════════════
⌗ Tags: #twitter #xs #social_media
Medium
Dari Twitter ke X: Evolusi Platform Mikroblogging yang Mengubah Dunia
Twitter adalah salah satu platform media sosial paling berpengaruh dalam dua dekade terakhir. Dengan ikon burung biru yang khas dan batasan…
40 views
Daily Writeups
⤷ Title: ScriptCase Flaws (CVE-2025-47227/47228): Pre-Auth RCE & Admin Takeover Risk for Web Servers, PoC Published
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Jul 2025 02:49:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #cybersecurity #password reset #Production Environment #rce #Remote Code Execution #Scriptcase #Shell Injection #Synacktiv #Vulnerability
Daily CyberSecurity
ScriptCase Flaws (CVE-2025-47227/47228): Pre-Auth RCE & Admin Takeover Risk for Web Servers, PoC Published
Synacktiv unveils chained flaws in ScriptCase's prod console (CVE-2025-47227/47228) allowing pre-authenticated RCE via password reset & shell injection, risking web servers.
41 views