Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Fri, 15 Sep 2023 14:10:53 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: THMβ€Šβ€”β€ŠDav | 85/100
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/c19985790219
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #pentesting #webdav #ctf_writeup #tryhackme
Medium
THM β€” Dav | 85/100
Howdy! Back today with CTF writeup 85 out of a planned 100. Today I’m working on the machine Dav from TryHackMe. This was a fun box that…
10 views
Daily Writeups
β€· Title: TryHackMe Dav CTF WriteUp
════════════════════════
π€ͺ Author: Adnan Kutay YΓΌksel
════════════════════════
β΄΅ Time: Thu, 06 Feb 2025 09:49:33 GMT
════════════════════════
βŒ— Tags: #tryhackme #webdav_vulnerability #default_password #tryhackme_writeup #reverse_shell
Medium
TryHackMe Dav CTF WriteUp
πŸ“Œ Hello Cybersecurity Enthusiasts
38 views
Daily Writeups
β€· Title: TryHackMe Dav CTF WriteUp Rehberi
════════════════════════
π€ͺ Author: Adnan Kutay YΓΌksel
════════════════════════
β΄΅ Time: Thu, 06 Feb 2025 09:49:33 GMT
════════════════════════
βŒ— Tags: #tryhackme #tryhackme_rehber #webdav_zafiyeti #varsayΔ±lan_parola #reverse_shell
Medium
TryHackMe Dav CTF WriteUp Rehberi
πŸ“Œ Merhaba Siber GΓΌvenlik MeraklΔ±larΔ±
33 views
Daily Writeups
β€· Title: Host & Network Penetration Testing: System-Host Based Attacks CTF 1
════════════════════════
π€ͺ Author: Aditya Deshpande
════════════════════════
β΄΅ Time: Fri, 14 Feb 2025 23:03:34 GMT
════════════════════════
βŒ— Tags: #ethical_hacking #ctf_writeup #webdav #ejptv2 #cybersecurity
Medium
Host & Network Penetration Testing: System-Host Based Attacks CTF 1
Hello hackers!
32 views
Daily Writeups
β€· Title: SocGholish Reloaded: Darktrace Uncovers Ransomware-Primed Loader Campaign
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 05 May 2025 00:10:31 +0000
════════════════════════
βŒ— Tags: #Malware #Credential Theft #Darktrace #JavaScript malware #Keitaro TDS #malware loader #NTLM Hashing #ransomware #SCF Exploits #WebDAV
Daily CyberSecurity
SocGholish Reloaded: Darktrace Uncovers Ransomware-Primed Loader Campaign
Darktrace uncovers a SocGholish campaign using obfuscated loaders and legacy Windows exploits to harvest NTLM hashes and deliver ransomware payloads.
12 views
Daily Writeups
β€· Title: Stealth Falcon Exploits New Zero-Day (CVE-2025-33053) in Sophisticated Cyberespionage Campaign
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 10 Jun 2025 22:18:01 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Vulnerability Report #Africa #APT #Check Point Research #CVE_2025_33053 #Cyberespionage #cybersecurity #Defense Industry #Horus Agent #malware #Microsoft Windows #Middle East #Mythic C2 #Stealth Falcon #WebDAV #zero_day
Daily CyberSecurity
Stealth Falcon Exploits New Zero-Day (CVE-2025-33053) in Sophisticated Cyberespionage Campaign
Stealth Falcon APT is exploiting a Windows WebDAV zero-day (CVE-2025-33053) in a sophisticated cyberespionage campaign targeting defense entities in the Middle East & Africa.
18 views
Daily Writeups
β€· Title: Microsoft’s June 2025 Patch Tuesday: 2 Zero-Days, 69 Vulnerabilities Patched!
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 10 Jun 2025 22:04:26 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #cybersecurity #EoP #Microsoft #Patch Tuesday #rce #security update #SMB Client #Vulnerability #WebDAV #Windows Security #zero_day
Daily CyberSecurity
Microsoft's June 2025 Patch Tuesday: 2 Zero-Days, 69 Vulnerabilities Patched!
Microsoft's June 2025 Patch Tuesday fixes 69 vulnerabilities, including two exploited zero-days in WebDAV and Windows SMB Client. Patch immediately!
16 views
Daily Writeups
β€· Title: How One PHP File Can Hack a Server: WebDAV File Upload to RCE
════════════════════════
π€ͺ Author: Sai Krishna
════════════════════════
β΄΅ Time: Sun, 20 Jul 2025 10:43:52 GMT
════════════════════════
βŒ— Tags: #file_upload_vulnerability #webdav #rce_vulnerability #php_file_upload #rce
Medium
How One PHP File Can Hack a Server: WebDAV File Upload to RCE
In this blog, we’ll demonstrate how a simple file upload vulnerability can open the door to full Remote Code Execution (RCE)β€Šβ€”β€Šturning a…
64 views
Daily Writeups
β€· Title: GOLD BLADE Unleashes RedLoader with Novel Attack Chain: LNK Files + WebDAV + DLL Sideloading Evades Detection
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 31 Jul 2025 00:15:51 +0000
════════════════════════
βŒ— Tags: #Malware #cybersecurity #DLL Sideloading #evasion #GOLD BLADE #LNK File #malware #RedLoader #Sophos #threat actor #WebDAV
Daily CyberSecurity
GOLD BLADE Unleashes RedLoader with Novel Attack Chain: LNK Files + WebDAV + DLL Sideloading Evades Detection
Sophos uncovers a new infection chain for GOLD BLADE's RedLoader malware, combining LNK files, WebDAV, and DLL sideloading to bypass defenses and deploy payloads stealthily.
10 views
Daily Writeups
β€· Title: Iran APT SpearSpecter Uses Weeks-Long WhatsApp Lures and Fileless TAMECAT Backdoor to Hit Defense
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 18 Nov 2025 00:30:42 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Malware #APT42 #Cloudflare C2 #fileless backdoor #IRGC_IO #SpearSpecter #TAMECAT #WebDAV Abuse #WhatsApp Espionage
Daily CyberSecurity
Iran APT SpearSpecter Uses Weeks-Long WhatsApp Lures and Fileless TAMECAT Backdoor to Hit Defense
Israel disclosed SpearSpecter: an IRGC-IO espionage campaign using weeks-long WhatsApp social engineering and search-ms/WebDAV abuse to deploy the fileless TAMECAT PowerShell backdoor with Discord/Telegram C2.
14 views
Daily Writeups
β€· Title: 8 Flaws: ASUS Routers Urgently Need Patch for Authentication Bypass (CVE-2025-59366, CVSS 9.4)
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 26 Nov 2025 00:20:08 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #AiCloud #ASUS router #Authentication Bypass #Command Injection #CVE_2025_59366 #router security #sql injection #WebDAV
Daily CyberSecurity
8 Flaws: ASUS Routers Urgently Need Patch for Authentication Bypass (CVE-2025-59366, CVSS 9.4)
ASUS fixes 8 severe router flaws, including a critical AiCloud authentication bypass (CVSS 9.4). Users must update firmware immediately to patch vulnerabilities.
13 views
Daily Writeups
β€· Title: β€œTryCloudflare” Abuse: AsyncRAT Exploits Free Tunnels to Build Stealthy WebDAV Network
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 13 Jan 2026 01:52:42 +0000
════════════════════════
βŒ— Tags: #Malware #AsyncRAT #cloudflare #Malware Analysis #phishing #Python Injection #Trend Micro #TryCloudflare #WebDAV
Daily CyberSecurity
"TryCloudflare" Abuse: AsyncRAT Exploits Free Tunnels to Build Stealthy WebDAV Network
New AsyncRAT campaign abuses free Cloudflare tunnels for stealthy malware delivery. Learn how phishing emails lead to WebDAV attacks & Python injection.
16 views
Daily Writeups
β€· Title: APT28 Weaponizes Office Flaw to Spy on NATO & Military
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 09 Feb 2026 00:06:35 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Malware #APT28 #BeardShell #CVE_2026_21509 #Fancy Bear #Filen.io #Military Espionage #NATO Targets #NotDoor #Trellix #WebDAV Exploit
Daily CyberSecurity
APT28 Weaponizes Office Flaw to Spy on NATO & Military
APT28 (Fancy Bear) weaponized CVE-2026-21509 in 24 hours to target NATO. New "BeardShell" and "NotDoor" malware steals emails. Patch Office now.
14 views
Daily Writeups
β€· Title: The Explorer Trap: How Hackers Turn Windows File Explorer into a Silent Portal for Remote Access Trojans
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 27 Feb 2026 04:17:44 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Async RAT #Cloudflare Tunnel #Cofense Intelligence #infosec #malware #rat #Remote Access Trojan #UNC Paths #WebDAV #Windows File Explorer #XWorm
Daily CyberSecurity
The Explorer Trap: How Hackers Turn Windows File Explorer into a Silent Portal for Remote Access Trojans
Cofense uncovers a stealthy campaign abusing legacy WebDAV in Windows File Explorer to bypass browsers and EDR, delivering XWorm and Async RAT via UNC paths.
28 views
Daily Writeups
β€· Title: Nginx 1.29.8 and FreeNginx Launch with Critical Security Shields
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 09 Apr 2026 08:33:14 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2026_27654 #CVE_2026_28753 #DNS PTR vulnerability #FreeNginx 1.29.7 #Mainline Branch #max_headers directive #nginx 1.29.8 #OpenSSL 4.0 #Server Security 2026 #WebDAV exploit
Penetration Testing Tools
Nginx 1.29.8 and FreeNginx Launch with Critical Security Shields
Within the nginx ecosystem, a dual release has emerged, impacting both the project’s primary development branch and its
21 views
Daily Writeups
β€· Title: A Quick Win: From WebDAV to Root
════════════════════════
π€ͺ Author: NullxCipher
════════════════════════
β΄΅ Time: Tue, 28 Apr 2026 20:11:43 GMT
════════════════════════
βŒ— Tags: #ctf_walkthrough #php_reverse_shell #tryhackme #thm_writeup #webdav
Medium
A Quick Win: From WebDAV to Root
I started with a simple target:
17 views