Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The Power of Who and Why: How Two Simple Questions Can Increase Your Kids’ Media Savvy
════════════════════════
𐀪 Author: Savvy Cyber Kids
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:16:34 GMT
════════════════════════
⌗ Tags: #media #children #cybersecurity #parenting #privacy
Medium
The Power of Who and Why: How Two Simple Questions Can Increase Your Kids’ Media Savvy
By Tylar Bloch
22 views
Daily Writeups
⤷ Title: How soon is too soon for social media
════════════════════════
𐀪 Author: Savvy Cyber Kids
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:16:14 GMT
════════════════════════
⌗ Tags: #privacy #social_media #children #cybersecurity #parenting
Medium
How soon is too soon for social media
By Jacob Aldrich
17 views
Daily Writeups
⤷ Title: Building a Biblical Future in the Digital Age
════════════════════════
𐀪 Author: Rockefeller Kennedy
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:15:01 GMT
════════════════════════
⌗ Tags: #spirituality #cybersecurity #christianity #technology #artificial_intelligence
Medium
Building a Biblical Future in the Digital Age
I am Rockefeller Kennedy, Publisher of Christian Futurism on Substack
34 views
Daily Writeups
⤷ Title: Threat Hunting with VirusTotal & Shodan
════════════════════════
𐀪 Author: Ashe Herrick
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:10:23 GMT
════════════════════════
⌗ Tags: #virustotal #cybersecurity #information_technology #shodan
Medium
Threat Hunting with VirusTotal & Shodan
Introduction
32 views
Daily Writeups
⤷ Title: Empire-Breakout CTF — Full Walkthrough (VulnHub)
════════════════════════
𐀪 Author: Basit Olasubomi Balogun
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:01:41 GMT
════════════════════════
⌗ Tags: #vulnhub #cybersecurity #penetration_testing #ethical_hacking #ctf
Medium
Empire-Breakout CTF — Full Walkthrough (VulnHub)
In this post, I document the step-by-step compromise of the Breakout CTF from VulnHub. This machine covers a mix of Samba enumeration…
44 views
Daily Writeups
⤷ Title: Hack TheBox Walkthrough: Fawn
════════════════════════
𐀪 Author: Eliyauergas
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:50:24 GMT
════════════════════════
⌗ Tags: #hackthebox_walkthrough #hackthebox_writeup
Medium
Hack TheBox Walkthrough: Fawn
Step 1: Basic Information & Knowledge Questions
44 views
Daily Writeups
⤷ Title: HACKVISER — WEB UYGULAMA GÜVENLİĞİ
════════════════════════
𐀪 Author: Yusuf Tayip Yıldırım
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:02:42 GMT
════════════════════════
⌗ Tags: #hackviser #sql_injection #web3 #web_penetration_testing #sql
Medium
HACKVISER — WEB UYGULAMA GÜVENLİĞİ
SQL INJECTION
49 views
Daily Writeups
⤷ Title: Critical Laravel Vulnerability: 260,000+ APP_KEYs Leaked, Enabling Remote Code Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:18:08 +0000
════════════════════════
⌗ Tags: #Vulnerability #APP_KEY #CVE_2024_55556 #cybersecurity #data leak #Github #Laravel #PHP #RCE #vulnerability #web security
Penetration Testing Tools
Critical Laravel Vulnerability: 260,000+ APP_KEYs Leaked, Enabling Remote Code Execution
Over 260,000 Laravel APP_KEYs have been exposed on GitHub, creating a critical RCE vulnerability (CVE-2024-55556) in potentially 600+ web apps. Rotate keys now!
44 views
Daily Writeups
⤷ Title: Critical FortiWeb SQL Injection (CVE-2025-25257) Allows Remote Code Execution, PoC Published
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:13:45 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_25257 #cybersecurity #Fortinet #FortiWeb #Patch #RCE #security update #SQL injection #vulnerability
Penetration Testing Tools
Critical FortiWeb SQL Injection (CVE-2025-25257) Allows Remote Code Execution, PoC Published
Fortinet has patched CVE-2025-25257, a critical SQL injection vulnerability in FortiWeb (CVSS 9.6) allowing unauthenticated RCE. Update your systems now to prevent exploitation.
25 views
Daily Writeups
⤷ Title: GPUHammer: New NVIDIA Vulnerability Threatens AI Models with Data Corruption
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:11:23 +0000
════════════════════════
⌗ Tags: #Vulnerability
Penetration Testing Tools
GPUHammer: New NVIDIA Vulnerability Threatens AI Models with Data Corruption
NVIDIA warns of GPUHammer, a new RowHammer-style attack on GPUs that corrupts data and severely degrades AI model accuracy, urging ECC memory activation.
20 views
Daily Writeups
⤷ Title: $40 Million Crypto Heist: GMX Hacker Returns Funds for $5M Bounty, Dodges Legal Battle
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:08:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #blockchain #Bounty #cryptocurrency #cybercrime #DeFi #exploit #GMX #hack #Restitution
Penetration Testing Tools
$40 Million Crypto Heist: GMX Hacker Returns Funds for $5M Bounty, Dodges Legal Battle
A hacker returned $40.5 million of $42 million stolen from DeFi exchange GMX in exchange for a $5 million bounty, avoiding immediate prosecution.
17 views
Daily Writeups
⤷ Title: Windows 11 Gets “Quick Machine Recovery”: Microsoft’s New AI-Powered Auto-Fix for Boot Failures
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:05:06 +0000
════════════════════════
⌗ Tags: #Windows #Auto_recovery #Microsoft #QMR #Quick Machine Recovery #Tech Update #Windows 11 #Windows Recovery Environment #WinRE
Penetration Testing Tools
Windows 11 Gets "Quick Machine Recovery": Microsoft's New AI-Powered Auto-Fix for Boot Failures
Microsoft's new Quick Machine Recovery (QMR) for Windows 11 automates boot failure fixes via cloud and autonomous repair, offering a lifeline for unbootable PCs.
13 views
Daily Writeups
⤷ Title: Warning: “Free VPN for PC” on GitHub is a Trap for Lumma Stealer Spyware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:02:25 +0000
════════════════════════
⌗ Tags: #Malware #cybercrime #cybersecurity #Github #Info_stealer #Lumma Stealer #malware #Spyware #Threat Alert #VPN
Penetration Testing Tools
Warning: "Free VPN for PC" on GitHub is a Trap for Lumma Stealer Spyware
Cybercriminals are using GitHub to spread Lumma Stealer spyware disguised as "Free VPN for PC" and "Minecraft Skin." Be wary of unverified downloads!
14 views
Daily Writeups
⤷ Title: iOS 26 Beta 3: Apple Adds RCS Support, But Encryption Still Missing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:00:28 +0000
════════════════════════
⌗ Tags: #Apple #Android #cybersecurity #Encryption #end_to_end encryption #google #iOS 26 #Messages App #privacy #RCS #Rich Communication Services #Universal Profile 3.0
Penetration Testing Tools
iOS 26 Beta 3: Apple Adds RCS Support, But Encryption Still Missing
iOS 26 Beta 3 integrates RCS support but lacks end-to-end encryption for messages, leaving them exposed. Full encryption (RCS Universal Profile 3.0) is expected in future updates.
16 views
Daily Writeups
⤷ Title: Cursor AI IDE Hacked: Fraudulent Extension Steals $500K in Crypto from Russian Developer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:13:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto theft #cryptocurrency #Cursor AI #Extension #Infostealer #kaspersky #malware #Open VSX #PureLogs #ScreenConnect #Solidity #supply chain attack #visual studio code #VS Code
Daily CyberSecurity
Cursor AI IDE Hacked: Fraudulent Extension Steals $500K in Crypto from Russian Developer
A Russian crypto developer lost $500K after installing a fraudulent "Solidity Language" extension for Cursor AI IDE from Open VSX, which deployed malware for remote access and data theft.
15 views
Daily Writeups
⤷ Title: CVE-2025-53833 (CVSS 10): Critical SSTI Flaw in LaRecipe Threatens Millions of Laravel Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 02:01:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_53833 #cybersecurity #Laravel #LaRecipe #php #rce #Remote Code Execution #Server Side Template Injection #ssti #Vulnerability #web framework
Daily CyberSecurity
CVE-2025-53833 (CVSS 10): Critical SSTI Flaw in LaRecipe Threatens Millions of Laravel Apps
A critical SSTI flaw (CVE-2025-53833, CVSS 10.0) in LaRecipe allows unauthenticated RCE on affected servers via template injection. Update to v2.8.1 immediately!
15 views
Daily Writeups
⤷ Title: Google Confirms Major OS Merger: Android & ChromeOS to Become a Single Unified Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 01:53:48 +0000
════════════════════════
⌗ Tags: #Android #android #chromebooks #ChromeOS #Cross_Platform #google #Operating System #OS Merger #Sameer Samat #tablets #Tech News #Unification
Daily CyberSecurity
Google Confirms Major OS Merger: Android & ChromeOS to Become a Single Unified Platform
Google officially confirmed plans to unify Android and ChromeOS into a single platform, aiming for seamless cross-device experiences and streamlined development for its AI-driven future.
11 views
Daily Writeups
⤷ Title: CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:55:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_47812 #cybersecurity #Exploited in Wild #FTP Server #Huntress #Lua #Null Byte Injection #rce #Remote Code Execution #Vulnerability #Wing FTP Server
Daily CyberSecurity
CISA Warns of Active Exploitation of Wing FTP Server Flaw (CVE-2025-47812), CVSS 10
CISA adds critical Wing FTP Server RCE flaw (CVE-2025-47812, CVSS 10.0) to KEV. Actively exploited via null byte and Lua code injection; patch to 7.4.4 immediately!
12 views
Daily Writeups
⤷ Title: ImageMagick Flaw (CVE-2025-53101): Stack Buffer Overflow Allows Potential Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:38:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_53101 #cybersecurity #Image Manipulation #ImageMagick #memory corruption #open_source #rce #Remote Code Execution #Stack Buffer Overflow #Vulnerability
Daily CyberSecurity
ImageMagick Flaw (CVE-2025-53101): Stack Buffer Overflow Allows Potential Remote Code Execution
A flaw (CVE-2025-53101) in ImageMagick allows stack buffer overflows via filename templates, risking memory corruption and remote code execution. Patch now!
10 views
Daily Writeups
⤷ Title: XORIndex: North Korea’s Evolving Supply Chain Malware Targets npm Ecosystem Again
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:26:06 +0000
════════════════════════
⌗ Tags: #Malware #APT #BeaverTail #Contagious Interview #cryptocurrency #cybersecurity #HexEval #Infostealer #InvisibleFerret #malware #North Korea #npm #Socket #supply chain attack #XORIndex
Daily CyberSecurity
XORIndex: North Korea’s Evolving Supply Chain Malware Targets npm Ecosystem Again
North Korean APTs are using XORIndex malware in a new npm supply chain attack, infiltrating developers via 67 malicious packages to steal crypto wallets and credentials.
13 views
Daily Writeups
⤷ Title: HazyBeacon: Novel Backdoor Uses AWS Lambda for Stealthy C2, Targets Govts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:12:47 +0000
════════════════════════
⌗ Tags: #Malware #AWS Lambda #backdoor #C2 #Cloud Security #Command and Control #Cyberespionage #cybersecurity #DLL Sideloading #HazyBeacon #Unit 42
Daily CyberSecurity
HazyBeacon: Novel Backdoor Uses AWS Lambda for Stealthy C2, Targets Govts
Unit 42 uncovers HazyBeacon, a novel backdoor using AWS Lambda URLs for stealthy C2. It's deployed via DLL sideloading, targeting Southeast Asian govts for trade documents.
7 views