Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.53K subscribers

2 photos

130K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.53K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Wed, 02 Aug 2023 04:41:09 GMT
———————————————
✏️Title: Red Team Shenanigans: Stealing Logon Credentials Without Touching LSASS
———————————————
📎Link: https://medium.com/p/1a73e1cfda3b
———————————————
Tags: #evasion #lsass #active_directory #red_team #penetration_testing

Red Team Shenanigans: Stealing Logon Credentials Without Touching LSASS

In this blog, we’ll familiarize ourselves with some interesting methods via which we can obtain credentials for logged-on users. It’s…

15 views05:02

⤷ Title: POSTDump: perform minidump of LSASS process using few technics to avoid detection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 03 Feb 2025 01:45:51 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #LSASS process #MiniDump #POSTDump

Penetration Testing Tools

POSTDump: perform minidump of LSASS process using few technics to avoid detection

POSTDump is an another tool to perform minidump of LSASS process using few techniques to avoid detection.

19 views03:05

⤷ Title: Protecting Cached Credentials with Advanced Auditing
════════════════════════
𐀪 Author: Horizon Secured
════════════════════════
ⴵ Time: Wed, 19 Feb 2025 11:25:58 GMT
════════════════════════
⌗ Tags: #windows_security #lsass #advanced_auditing #windows #cybersecurity

Protecting Cached Credentials with Advanced Auditing

Keep your cached credentials safe from attackers! In this guide, learn how to set up Windows Advanced Auditing to detect unauthorized…

31 views13:04

⤷ Title: Intrusion Detection With Splunk (Real-world Scenario)
════════════════════════
𐀪 Author: M_عtt@
════════════════════════
ⴵ Time: Mon, 21 Apr 2025 23:20:07 GMT
════════════════════════
⌗ Tags: #lsass #dumping #splunk_enterprise #splunk #cybersecurity

Intrusion Detection With Splunk (Real-world Scenario)

Hello again 😀! In this article, We will answer a set of questions from a real scenario using SPL in Splunk. There are five questions in…

21 views00:04

⤷ Title: ComDotNetExploit: PoC for Windows PPL Bypass via COM-to-.NET
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 25 May 2025 01:30:03 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #.NET #code injection #COM #cybersecurity #exploit #LSASS #PPL #reflection #Windows Security

Penetration Testing Tools

ComDotNetExploit: PoC for Windows PPL Bypass via COM-to-.NET

ComDotNetExploit is a C++ PoC demonstrating PPL bypass in Windows using COM-to-.NET redirection and reflection for code injection.

26 views02:03

⤷ Title: Mimikatz Cheatsheet — Practical Credential Dumping Guide from Labs & Real-World Scenarios
════════════════════════
𐀪 Author: Mohamed Ashraf
════════════════════════
ⴵ Time: Fri, 04 Jul 2025 13:58:55 GMT
════════════════════════
⌗ Tags: #penetration_testing #lsass #red_team #cybersecurity #mimikatz

Mimikatz Cheatsheet — Practical Credential Dumping Guide from Labs & Real-World Scenarios

28 views15:04

⤷ Title: NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:29:01 +0000
════════════════════════
⌗ Tags: #Open Source Tool #credential dumping #cybersecurity #Evasion #LSASS #Mimikatz #NativeDump #Offensive Security #pypykatz #Red Team #Windows Security

Penetration Testing Tools

NativeDump: Stealthy LSASS Dumping Tool Bypasses EDRs Using Only NTAPIs

NativeDump is a new tool for stealthy LSASS process dumping using only NTAPIs, bypassing EDRs to extract credentials for tools like Mimikatz or Pypykatz.

41 views01:03

⤷ Title: HTB_Academy: Extracting Passwords from Windows Systems Part 2:Attacking LSASS
════════════════════════
𐀪 Author: Babatunde Ojo
════════════════════════
ⴵ Time: Wed, 15 Oct 2025 18:09:04 GMT
════════════════════════
⌗ Tags: #windows #htb #hacking #passwords #lsass

HTB_Academy: Extracting Passwords from Windows Systems Part 2:Attacking LSASS

LSASS is a core Windows process responsible for enforcing security policies, handling user authentication, and storing sensitive credential…

13 views20:04

⤷ Title: LSASS-Free Larceny: Extracting NTLMv1 Hashes with DumpGuard BOF
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 04:51:09 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BOF #credential dumping #Cybersecurity 2026 #DumpGuard #Havoc C2 #LSASS #NTLMv1 #red teaming #Remote Credential Guard #Windows Security

Information Security News

LSASS-Free Larceny: Extracting NTLMv1 Hashes with DumpGuard BOF

DumpGuard BOF Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems. This repository contains a Beacon Object File (BOF) implementation of…

36 views06:03

⤷ Title: Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:11:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Agere Soft Modem #CISA #CVE_2026_20805 #LSASS #Microsoft #Office Vulnerability #Patch Tuesday #Secure Boot #Windows Security #zero_day

Daily CyberSecurity

Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days

Microsoft Jan 2026 Patch Tuesday fixes 114 flaws, including 3 zero-days. CVE-2026-20805 is actively exploited. Update Windows & Office immediately.

26 views02:06

⤷ Title: Microsoft’s 2026 Kickoff: 110+ Patches Fix Active Zero-Days and Office Flaws
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:24:36 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #CVE_2026_20805 #cybersecurity #Infosec News #LSASS #Microsoft #Office 2026 #Patch Tuesday #RCE #Secure Boot #Windows 11 #zero_day

Penetration Testing Tools

Microsoft's 2026 Kickoff: 110+ Patches Fix Active Zero-Days and Office Flaws

Microsoft has inaugurated its first Patch Tuesday of 2026, disseminating a comprehensive suite of mandatory security remediations for

11 views12:04

⤷ Title: Screaming at the Kernel: How GhostKatz Uses “Vulnerable Drivers” to Dump Credentials via Physical Memory
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 04:00:10 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Aggressor Script #BYOVD #Cobalt Strike #credential exfiltration #Erik Esquivel #GhostKatz #Julian Peña #kernel exploitation #LSASS dump #MmMapIoSpace #red team tools #Tech News 2026

Information Security News

Screaming at the Kernel: How GhostKatz Uses “Vulnerable Drivers” to Dump Credentials via Physical Memory

Security researcher Julian Peña has unveiled GhostKatz, a formidable new utility engineered to exfiltrate credentials from the LSASS process by directly accessing a computer’s physical memor…

19 views04:03

⤷ Title: Targeting the Grid: ESET Unmasks “DynoWiper” After Destructive Strike on Polish Energy Sector
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:50:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Active Directory GPO #Critical Infrastructure #cyber sabotage #data wiper #DynoWiper #ESET research #LSASS memory dump #Poland energy sector #rsocx #Rubeus #Sandworm #Tech News 2026 #ZOV wiper

Penetration Testing Tools

Targeting the Grid: ESET Unmasks "DynoWiper" After Destructive Strike on Polish Energy Sector

ESET has disclosed the intricate technical specifications of an incursion involving a nascent data-obliteration utility designated as DynoWiper.

26 views04:04

⤷ Title: Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:04:12 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BOF #Cloud SSO #Cobalt Strike #Credential Guard #DPAPI #Kerberos #LSA Whisperer #LsaCallAuthenticationPackage #LSASS #Pentesting #PPL #red teaming #SpecterOps #Windows Security

Penetration Testing Tools

Beyond the Memory: How LSA Whisperer BOF Bypasses PPL and Credential Guard Without Touching LSASS

Interact with Kerberos and DPAPI without opening an LSASS handle. LSA Whisperer BOF uses official APIs to bypass PPL and Credential Guard during red teaming.

23 views05:04

⤷ Title: Attacking LSASS: HackTheBox Walkthrough | Peneteration Tester Path
════════════════════════
𐀪 Author: zerodaystudios
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 03:41:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #lsass #ethical_hacking #windows

Attacking LSASS: HackTheBox Walkthrough | Peneteration Tester Path

Step 1: Creating an LSASS Memory Dump (Task Manager Method)

20 views05:03

⤷ Title: Beyond Email: Attackers Hijack Microsoft Teams External Access to Launch Deep Network Compromise
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:18:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CVE_2023_36036 #Cyber Security #Dumpit #External Access Configuration #Incident Response #infosec #Kerberoasting #LSASS Memory Dump #Microsoft Teams phishing #Rapid7 Labs #social engineering

Daily CyberSecurity

Beyond Email: Attackers Hijack Microsoft Teams External Access to Launch Deep Network Compromise

Rapid7 Labs exposes how attackers are abusing Microsoft Teams external access and Dumpit memory scrapers to breach corporate networks. Protect your team!

10 views07:03