Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 23 Mar 2023 12:41:37 GMT
———————————————
✏️Title: Hiding in Plain Sight: A Guide to Keeping Your API Keys Safe
———————————————
📎Link: https://medium.com/p/2fba0373d7a8
———————————————
Tags: #configuration_management #api_security #google_secret_manager #authentication #google_cloud_platform

Medium

Hiding in Plain Sight: A Guide to Keeping Your API Keys Safe

API keys are essential for securing access to APIs and ensuring that unauthorized parties cannot reach your sensitive data. API keys are…

5 views14:01

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 10 Aug 2023 17:54:11 GMT
———————————————
✏️Title: Site Takeover via SCCM’s AdminService API
———————————————
📎Link: https://medium.com/p/d932e22b2bf
———————————————
Tags: #penetration_testing #research #red_teaming #sccm #configuration_management

Medium

Site Takeover via SCCM’s AdminService API

tl:dr: The SCCM AdminService API is vulnerable to NTLM relaying and can be abused for SCCM site takeover.

13 views20:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Thu, 05 Oct 2023 09:16:40 GMT
———————————————
✏️Title: Part04 — Splunk B-Tool
———————————————
📎Link: https://medium.com/p/ce8091038703
———————————————
Tags: #hacking_tools #cybersecurity #splunk #configuration

Medium

Part04 — Splunk B-Tool

Somеtimеs, figuring out which rulе Splunk follows can fееl likе finding a nееdlе in a haystack, еspеcially in a big Splunk sеtup. That’s…

10 views11:02

Daily Writeups

⤷ Title: Fortigate Nedir? | Kurulum ve Temel Ayarlar
════════════════════════
𐀪 Author: Saltık Buğrahan Kızıltaş
════════════════════════
ⴵ Time: Sat, 22 Feb 2025 14:50:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #fortinet #configuration #firewall #fortigate

Medium

Fortigate Nedir? | Kurulum ve Temel Ayarlar

Merhabalar, Techcareer tarafından düzenlenen Siber Güvenlik 101 Bootcamp kapsamında yer alan Ağ Güvenliği eğitimi sırasında edindiğim…

13 views15:04

Daily Writeups

⤷ Title: Konfigurasi ACL di Cisco Packet Tracer
════════════════════════
𐀪 Author: NafyCat69
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 15:48:11 GMT
════════════════════════
⌗ Tags: #networking #configuration #cybersecurity

Medium

Konfigurasi ACL di Cisco Packet Tracer

Requirement :
1. Pengetahuan Mengenai ACL
2. Pengetahuan Mengenai Static Routing
3. Cisco Packet Tracer Pastinya

17 views16:04

Daily Writeups

⤷ Title: RBASH configuration
════════════════════════
𐀪 Author: Nibbabob
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 10:14:29 GMT
════════════════════════
⌗ Tags: #bash #configuration #cybersecurity #linux

Medium

RBASH configuration

I had a hard time finding any good resources on rbash configuration, so I thought I’d post about it, to possibly help others like me :)

17 views11:04

Daily Writeups

⤷ Title: BloodHound Configuration
════════════════════════
𐀪 Author: Dante
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 11:51:27 GMT
════════════════════════
⌗ Tags: #bloodhound #infosec #red_team_tools #active_directory #configuration

Medium

BloodHound Configuration

What is BloodHound?

15 views13:04

Daily Writeups

⤷ Title: Secrets Management in .NET Projects: What You’re Doing Wrong
════════════════════════
𐀪 Author: Kittikawin L.
════════════════════════
ⴵ Time: Mon, 23 Jun 2025 09:51:16 GMT
════════════════════════
⌗ Tags: #dotnet #application_security #configuration_management #csharp #software_engineering

Medium

Secrets Management in .NET Projects: What You’re Doing Wrong

Protect API keys and configs in .NET.

8 views23:10

Daily Writeups

⤷ Title: Lenovo Vantage Flaws Allow Local Privilege Escalation on PCs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:11:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Configuration File Manipulation #cybersecurity #Lenovo Commercial Vantage #Lenovo Vantage #privilege escalation #Registry Hijack #sql injection #Vulnerability

Daily CyberSecurity

Lenovo Vantage Flaws Allow Local Privilege Escalation on PCs

Lenovo issued patches for three vulnerabilities in Lenovo Vantage (CVE-2025-6230, CVE-2025-6231, CVE-2025-6232) allowing local privilege escalation on PCs. Update immediately.

17 views01:04

Daily Writeups

⤷ Title: 別只會上Patch：用全局思維管理資安攻擊表面
════════════════════════
𐀪 Author: Yoyo Lin
════════════════════════
ⴵ Time: Sun, 27 Jul 2025 03:33:46 GMT
════════════════════════
⌗ Tags: #patch_management #cyber_security_awareness #configuration_management #cybersecurity

Medium

別只會上Patch：用全局思維管理資安攻擊表面

以駭客的角度出發，先收攏攻擊表面。

25 views05:04

Daily Writeups

⤷ Title: From Vulnerability to Visibility: Managing Server Security with SecuMS and OmniGuard
════════════════════════
𐀪 Author: Ramadhana Khalaf Sandhyakala
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 22:52:39 GMT
════════════════════════
⌗ Tags: #configuration #cybersecurity #information_security

Medium

From Vulnerability to Visibility: Managing Server Security with SecuMS and OmniGuard

System Security Management through CCE-Based Vulnerability Assessment and Modular Server Hardening Mr. M. Iman Karmawijaya, CTO of LSWare…

19 views23:04

Daily Writeups

⤷ Title: Cyber Security Configuration Management: Maintaining Secure Settings
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:52:39 GMT
════════════════════════
⌗ Tags: #information_security #configuration_management #securitysettings #security_hardening #cybersecurity

Medium

Cyber Security Configuration Management: Maintaining Secure Settings

Cyber security configuration management is a foundational discipline for safeguarding digital assets by ensuring that all systems, devices…

15 views00:04

Daily Writeups

⤷ Title: Huawei Switch Temel Kurulum Rehberi (Sıfırdan Başlayanlar İçin)
════════════════════════
𐀪 Author: Emre Koç
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 16:40:16 GMT
════════════════════════
⌗ Tags: #huawei #cybersecurity #switch #configuration

Medium

🚀 Huawei Switch Temel Kurulum Rehberi (Sıfırdan Başlayanlar İçin)

Network dünyasına adım attığında karşına en sık çıkacak cihazlardan biri hiç şüphesiz switch’lerdir. Peki yepyeni bir Huawei switch eline…

16 views17:04

Daily Writeups

⤷ Title: Internal Errors Plague Cloud Giants: AWS, Azure, & Cloudflare Hit by Configuration Outages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 03:06:01 +0000
════════════════════════
⌗ Tags: #Technology #AWS #Cloud Outage #Cloud Resilience #Cloudflare #Configuration Error #DNS Failure #metadata #Microsoft Azure #Single Point of Failure

Penetration Testing Tools

Internal Errors Plague Cloud Giants: AWS, Azure, & Cloudflare Hit by Configuration Outages

Recent outages at AWS, Azure, and Cloudflare show that internal configuration errors, not attacks, are the new single point of failure in hyper-automated global cloud infrastructure.

26 views04:04

Daily Writeups

⤷ Title: Cloudflare Outage 2.0: Faulty React Patch Configuration Disrupts Major Websites
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 04:17:01 +0000
════════════════════════
⌗ Tags: #Technology #Cloudflare #Configuration Error #Internet Centralization #LinkedIn #Outage #React Server Components #WAF #Zoom

Penetration Testing Tools

Cloudflare Outage 2.0: Faulty React Patch Configuration Disrupts Major Websites

Cloudflare’s services suffered yet another disruption on Friday morning, rendering LinkedIn, Zoom, Downdetector, and a number of other

10 views06:04

Daily Writeups

⤷ Title: Critical Plesk Flaw (CVE-2025-66430) Risks Full Server Takeover via LPE and Apache Config Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 00:32:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Configuration Injection #CVE_2025_66430 #Local Privilege Escalation #LPE #Plesk #root access #Web Hosting

Daily CyberSecurity

Critical Plesk Flaw (CVE-2025-66430) Risks Full Server Takeover via LPE and Apache Config Injection

A critical LPE flaw (CVSS 9.1) in Plesk's Password-Protected Directories allows Apache configuration injection. Any Plesk user can execute root commands and achieve full server takeover. Update immediately.

24 views04:06

Daily Writeups

⤷ Title: Critical ScreenConnect Flaw (CVE-2025-14265) Risks Config Exposure & Untrusted Extension Installation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 03:06:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Configuration Data #ConnectWise #CVE_2025_14265 #MSP #on_premise #Remote Support #ScreenConnect #Untrusted Extensions

Daily CyberSecurity

Critical ScreenConnect Flaw (CVE-2025-14265) Risks Config Exposure & Untrusted Extension Installation

A critical ScreenConnect flaw (CVSS 9.1) allows authorized users to expose config data or force untrusted extension installs. On-premise users must upgrade to v25.8 immediately; cloud users are already patched.

20 views04:04

Daily Writeups

⤷ Title: Cybersecurity — Firewall Configuration Review: A Hands-On Example
════════════════════════
𐀪 Author: Rahul Singh Chauhan
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 13:25:23 GMT
════════════════════════
⌗ Tags: #firewall #penetration_testing #configuration_review #bug_bounty #cybersecurity

Medium

Cybersecurity — Firewall Configuration Review: A Hands-On Example

A guide on firewall Configuration review for your day to day pentests.

15 views14:04

About

Blog

Apps

Platform