Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Opossum Attack: New TLS Flaw Injects Malicious Data Into Encrypted Sessions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:23:25 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Encryption #ftp #HTTP #man_in_the_middle #Opossum #POP3 #security flaw #SMTP #TLS #vulnerability
Penetration Testing Tools
Opossum Attack: New TLS Flaw Injects Malicious Data Into Encrypted Sessions
A new TLS vulnerability, "Opossum," allows attackers to inject malicious messages into encrypted sessions by desynchronizing client and server views.
14 views
Daily Writeups
⤷ Title: Suricata 8.0 Unleashed: Faster, Safer Network Defense with Rust & New Protocols
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:21:51 +0000
════════════════════════
⌗ Tags: #Open Source Tool #detection #firewall #IDS #IPS #Lua #network protocols #network security #open source #performance #Rust #Suricata
Penetration Testing Tools
Suricata 8.0 Unleashed: Faster, Safer Network Defense with Rust & New Protocols
Suricata 8.0 is here! This major update brings enhanced performance, Rust rewrites for security, new protocol support, and an experimental firewall mode to network defense.
18 views
Daily Writeups
⤷ Title: ChatGPT Leaks Windows Keys, Including Wells Fargo License, Via Clever “Game” Prompt
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:17:59 +0000
════════════════════════
⌗ Tags: #Data Leak #AI #ChatGPT #cybersecurity #data leak #LLM #product keys #Prompt Engineering #security #vulnerability #Wells Fargo #Windows keys
Penetration Testing Tools
ChatGPT Leaks Windows Keys, Including Wells Fargo License, Via Clever "Game" Prompt
ChatGPT 4.0 was tricked into revealing valid Windows product keys, including an enterprise license from Wells Fargo, using a simple "guessing game" prompt.
18 views
Daily Writeups
⤷ Title: Gold Melody Unleashed: New Stealthy Attacks Exploit Leaked ASP.NET Keys
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:15:24 +0000
════════════════════════
⌗ Tags: #Malware #ASP.NET #cyberattack #cybersecurity #Gold Melody #IIS #machine keys #memory_only attack #Prophet Spider #UNC961 #ViewState
Penetration Testing Tools
Gold Melody Unleashed: New Stealthy Attacks Exploit Leaked ASP.NET Keys
Gold Melody (Prophet Spider) is exploiting leaked ASP.NET machine keys to launch stealthy, memory-only attacks on global corporate systems.
19 views
Daily Writeups
⤷ Title: GMX Hacked: $40M Stolen in Major DeFi Cyber Heist
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:13:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #blockchain #crypto hack #cryptocurrency #cybersecurity #decentralized exchange #DeFi #Ethereum #GMX #Smart Contract #USDC
Penetration Testing Tools
GMX Hacked: $40M Stolen in Major DeFi Cyber Heist
Decentralized exchange GMX suffered a $40M cyber heist due to a system vulnerability. Funds were swiftly laundered, raising concerns over DeFi security.
15 views
Daily Writeups
⤷ Title: Android & Chrome Level Up Security with New Advanced Protection for High-Risk Users
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:09:52 +0000
════════════════════════
⌗ Tags: #Google #Advanced Protection #Android #chrome #cybersecurity #google #HTTPS #JavaScript #privacy #security features #site isolation #V8
Penetration Testing Tools
Android & Chrome Level Up Security with New Advanced Protection for High-Risk Users
Google rolls out Advanced Protection for Android 16 & Chrome 137+, offering enhanced security for high-risk users with enforced HTTPS, site isolation, and V8 engine mitigations.
16 views
Daily Writeups
⤷ Title: Microsoft Authenticator for iOS: Cloud Backups Arrive, Ditching Personal Accounts
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:08:03 +0000
════════════════════════
⌗ Tags: #Microsoft #Apple ID #backup #enterprise #icloud #ios #MFA #Microsoft Authenticator #security #TOTP
Penetration Testing Tools
Microsoft Authenticator for iOS: Cloud Backups Arrive, Ditching Personal Accounts
Microsoft Authenticator for iOS gets a new backup system in September, using iCloud instead of personal accounts to streamline TOTP code management.
15 views
Daily Writeups
⤷ Title: Windows 11 Gets Native App Removal: Bye-Bye Bloatware via Group Policy
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:06:02 +0000
════════════════════════
⌗ Tags: #Windows #app removal #Autopilot #bloatware #Group Policy #Insider Preview #Intune #IT Administration #Microsoft Store #PowerShell #Windows 11
Penetration Testing Tools
Windows 11 Gets Native App Removal: Bye-Bye Bloatware via Group Policy
Windows 11 now lets admins remove preinstalled Microsoft Store apps using Group Policy! Say goodbye to bloatware and streamline deployments.
12 views
Daily Writeups
⤷ Title: Critical NTFS Vulnerability (CVE-2025-49689) Uncovered: Local Attacker Can Gain SYSTEM Privileges in Windows 11
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:03:10 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #exploit #local attack #NTFS #Positive Technologies #privilege escalation #VHD #vulnerability #Windows 11 #zero_day
Penetration Testing Tools
Critical NTFS Vulnerability (CVE-2025-49689) Uncovered: Local Attacker Can Gain SYSTEM Privileges in Windows 11
A critical NTFS vulnerability (CVE-2025-49689) allows local attackers to escalate to SYSTEM privileges in Windows 11 using a crafted VHD. Avoid untrusted VHDs!
14 views
Daily Writeups
⤷ Title: Gemini App Unleashes Veo 3: Transform Photos into Videos Now
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:50:27 +0000
════════════════════════
⌗ Tags: #Technology #AI generative #AI video #Google AI Pro #Google AI Ultra #Google Gemini #Image to Video #Mobile App #SynthID #Veo 3 #watermark
Daily CyberSecurity
Gemini App Unleashes Veo 3: Transform Photos into Videos Now
Google Gemini app now features image-to-video generation powered by Veo 3! AI Ultra & Pro subscribers can turn photos into dynamic videos with sound and watermarks.
29 views
Daily Writeups
⤷ Title: Ubuntu 24.10 Reaches End of Life Today: Upgrade to Stay Secure!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:42:45 +0000
════════════════════════
⌗ Tags: #Linux #24.04 LTS #24.10 #25.04 #end_of_life #EOL #Oracular Oriole #Security Updates #Ubuntu #upgrade
Daily CyberSecurity
Ubuntu 24.10 Reaches End of Life Today: Upgrade to Stay Secure!
Ubuntu 24.10 "Oracular Oriole" reaches End of Life today, July 10, 2025. Upgrade to Ubuntu 25.04 or 24.04 LTS to ensure continued security and support!
20 views
Daily Writeups
⤷ Title: CTF Day(27)
════════════════════════
𐀪 Author: Ahmed Narmer
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 04:27:33 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_pen_testing #web_penetration_testing #cybersecurity #ctf
Medium
CTF Day(27)
picoCTF Web Exploitation: Power Cookie
19 views
Daily Writeups
⤷ Title: Why the FOFA dorking is so important
════════════════════════
𐀪 Author: Levi Ackerman
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:48:37 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty #cybersecurity #hacking #dorking
Medium
Why the FOFA dorking is so important
Fofa dorking is best to find the sensitive information
22 views
Daily Writeups
⤷ Title: Part 5: The Velvet Rope — Dynamic Authorization with SSO Groups
════════════════════════
𐀪 Author: Rohit Mittel
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 04:31:49 GMT
════════════════════════
⌗ Tags: #authentication #application_security #authorization #sso #oracle_apex
Medium
Part 5: The Velvet Rope — Dynamic Authorization with SSO Groups
Welcome to the final chapter of The APEX Gatekeeper series.
22 views
Daily Writeups
⤷ Title: “From Ping to Malware: How ICMP Becomes a Silent Backdoor”
════════════════════════
𐀪 Author: Shashank N
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 04:24:04 GMT
════════════════════════
⌗ Tags: #exfilteration #malware #hacking #llm #security
Medium
“From Ping to Malware: How ICMP Becomes a Silent Backdoor”
🎯 Exfiltration and Remote Command Execution Using ICMP: Covert Channels Explained
23 views
Daily Writeups
⤷ Title: Unveiling Uruguay’s Digital Underbelly
════════════════════════
𐀪 Author: ADanielHill
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 04:15:32 GMT
════════════════════════
⌗ Tags: #television #uruguay #tv_shows #darkweb #hacking
Medium
Unveiling Uruguay’s Digital Underbelly
Santo y Seña, Canal 4, Montevideo, Uruguay.
18 views
Daily Writeups
⤷ Title: Critical mcp-remote Vulnerability Enables Remote Code Execution — Impacts Over 437,000 Downloads
════════════════════════
𐀪 Author: Darshan
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 04:47:09 GMT
════════════════════════
⌗ Tags: #nodejs #cyber_security_awareness #news #rce #cybersecurity
Medium
Critical mcp-remote Vulnerability Enables Remote Code Execution — Impacts Over 437,000 Downloads
A newly disclosed vulnerability in the widely-used mcp-remote npm package has raised serious concerns across the developer and DevSecOps…
16 views
Daily Writeups
⤷ Title: Linux Reboot Commands Explained: A Practical Guide
════════════════════════
𐀪 Author: Quella
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 04:00:48 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity
Medium
Linux Reboot Commands Explained: A Practical Guide
Knowing how to properly reboot a Linux system is a critical part of system administration and maintenance. Whether you’re applying updates…
18 views
Daily Writeups
⤷ Title: Building Security Rules with Palo Alto Networks Predefined EDL (Blacklist)
════════════════════════
𐀪 Author: Damon Lin
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:44:50 GMT
════════════════════════
⌗ Tags: #cybersecurity #palo_alto_networks #palo_alto #firewall #ngfw
Medium
Building Security Rules with Palo Alto Networks Predefined EDL (Blacklist)
Introduction
19 views
Daily Writeups
⤷ Title: Campaign Analysis: Multi-stage delivery of Agent Tesla
════════════════════════
𐀪 Author: Suprim Devkota
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:41:13 GMT
════════════════════════
⌗ Tags: #reverse_engineering #malware_analysis #cybersecurity #phishing
Medium
Campaign Analysis: Multi-stage delivery of Agent Tesla
OVERVIEW & STRATEGIC IMPACT
22 views
Daily Writeups
⤷ Title: Why Are You Even Networking?
════════════════════════
𐀪 Author: Timsux Wales
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 03:26:54 GMT
════════════════════════
⌗ Tags: #timsux_wales #timsux #cybersecurity #networking #network
Medium
Why Are You Even Networking?
Exposing the hidden truths and smarter ways to network in the cybersecurity industry.
39 views