Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Build your own bug bounty recon tool
════════════════════════
𐀪 Author: Marília Rocha
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 21:53:55 GMT
════════════════════════
⌗ Tags: #recon #bug_bounty #bug_hunter #reconnaissance #bug_bounty_tips
Medium
Build your own bug bounty recon tool
Recon is one of the most important steps when you’re looking for vulnerabilities. I use several tools in my workflow to speed things up…
27 views
Daily Writeups
⤷ Title: TryHackMe — El Bandito
════════════════════════
𐀪 Author: omni
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 22:35:50 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #hacking #cybersecurity #tryhackme
Medium
TryHackMe — El Bandito
Reconnaissance
24 views
Daily Writeups
⤷ Title: Baby-VulnLab Write-Up
════════════════════════
𐀪 Author: t0x1k
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 22:39:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #penetration_testing
Medium
Baby-VulnLab Write-Up
This is my journey through all the easy machines on Vulnlab and it starts with Baby. I did them in order as they sit on the discord, so I…
24 views
Daily Writeups
⤷ Title: ️ Buffer Overflow — A Tale of Treacherous Memory
════════════════════════
𐀪 Author: Emma Lateyron
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 22:33:07 GMT
════════════════════════
⌗ Tags: #memory_management #buffer_overflow #cybersecurity
Medium
🛡️ Buffer Overflow — A Tale of Treacherous Memory
Hear Ye! Hear Ye! A Bug Most Vile: The Buffer Overflow
16 views
Daily Writeups
⤷ Title: Spam Season Is Here: Real-World Lessons for Smashing Online Pests
════════════════════════
𐀪 Author: Dan Christ
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 22:12:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #phishing_awareness #online_safety #ai #tech_tips
Medium
Spam Season Is Here: Real-World Lessons for Smashing Online Pests
My lawn looks like it has rained every day for the last three months. I may have cut more weeds today than grass, and the fungi in the…
15 views
Daily Writeups
⤷ Title: Gap Analysis of Vendor Privacy and Security Policy
════════════════════════
𐀪 Author: Sharaden Cole
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 22:11:08 GMT
════════════════════════
⌗ Tags: #risk_management #grc #information_security #cybersecurity #gap_analysis
Medium
Gap Analysis of Vendor Privacy and Security Policy
This project performs a gap analysis on Best Buy’s Information Security Policy. The objective was to ensure alignment with PCI DSS 4.0
18 views
Daily Writeups
⤷ Title: Elastic Stack SIEM Home Lab using Kali Linux
════════════════════════
𐀪 Author: Sharaden Cole
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 21:48:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #vmware #elastic_stack #linux #siem
Medium
Elastic Stack SIEM Home Lab using Kali Linux
This lab provides hands-on experience with security monitoring and incident response.
25 views
Daily Writeups
⤷ Title: Insufficient Access Controls in GraphQL Enables Unauthorized User Enumeration
════════════════════════
𐀪 Author: Bassemwanies
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 21:32:52 GMT
════════════════════════
⌗ Tags: #graphql #cybersecurity #bug_bounty_writeup #bug_bounty_hunting #bug_hunting
Medium
🔓Insufficient Access Controls in GraphQL Enables Unauthorized User Enumeration
قَالَ اللَّهُ تَعَالَى: {يَرْفَعِ اللَّهُ الَّذِينَ آمَنُوا مِنكُمْ وَالَّذِينَ أُوتُوا الْعِلْمَ دَرَجَاتٍ ۚ وَاللَّهُ بِمَا تَعْمَلُونَ…
38 views
Daily Writeups
⤷ Title: TryHackMe | Stealth Walkthrough
════════════════════════
𐀪 Author: Babatunde Ojo
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 22:59:23 GMT
════════════════════════
⌗ Tags: #servers #privilege_escalation #tryhackme #windows #powershell_script
Medium
TryHackMe | Stealth Walkthrough
Start the VM by clicking the Start Machine button at the top right of the task and visit MACHINE_IP:8080 to pwn the machine. You can…
37 views
Daily Writeups
⤷ Title: ExpressVPN Fixes RDP Leak: Real IP Addresses Exposed Due to Debugging Code Oversight
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 00:51:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Debugging Code #ExpressVPN #IP Leak #privacy #RDP #Remote Desktop Protocol #VPN #vulnerability
Penetration Testing Tools
ExpressVPN Fixes RDP Leak: Real IP Addresses Exposed Due to Debugging Code Oversight
ExpressVPN patched a critical Windows client flaw (v12.97-12.101.0.2-beta) that exposed users' real IP addresses by allowing RDP traffic to bypass the VPN tunnel. Update immediately!
34 views
Daily Writeups
⤷ Title: CoinDCX Hacked for $44 Million in Crypto: Internal Account Breached, User Funds Safe
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 00:44:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #blockchain #CoinDCX #Crypto Theft #cryptocurrency #cyberattack #Exchange #hack #India #security incident
Penetration Testing Tools
CoinDCX Hacked for $44 Million in Crypto: Internal Account Breached, User Funds Safe
Indian crypto exchange CoinDCX suffered a $44 million cyberattack on an internal operational account. User funds are confirmed safe, and the company will cover all losses.
24 views
Daily Writeups
⤷ Title: SilverFox Unleashes Massive Malware Campaign: 2,800+ Domains Target Chinese-Speaking Users Worldwide
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 00:41:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BOTNET #China #cybercrime #cybersecurity #Data Exfiltration #malware #phishing #SilverFox #windows
Penetration Testing Tools
SilverFox Unleashes Massive Malware Campaign: 2,800+ Domains Target Chinese-Speaking Users Worldwide
The Chinese SilverFox group launched an expansive malware campaign with over 2,800 domains, targeting Chinese-speaking users worldwide with fake sites to exfiltrate data.
16 views
Daily Writeups
⤷ Title: Qtap: See Through Encrypted Linux Traffic with eBPF for Unparalleled Observability and Security Auditing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 00:32:55 +0000
════════════════════════
⌗ Tags: #Open Source Tool #API Development #cybersecurity #Debugging #eBPF #Linux Kernel #Network Observability #Qtap #Security Auditing #TLS/SSL #Traffic Interception
Penetration Testing Tools
Qtap: See Through Encrypted Linux Traffic with eBPF for Unparalleled Observability and Security Auditing
Qtap is an eBPF agent that captures pre-encrypted Linux kernel traffic, offering full visibility into TLS/SSL data with minimal overhead for security auditing, debugging, and API development.
21 views
Daily Writeups
⤷ Title: Scanception: New QR Code Phishing Campaign Bypasses Security to Harvest Credentials on Mobile
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 00:25:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Harvesting #cybersecurity #Mobile Devices #PDF Lures #phishing #QR Code Phishing #Quishing #Scanception #Social Engineering
Penetration Testing Tools
Scanception: New QR Code Phishing Campaign Bypasses Security to Harvest Credentials on Mobile
Cyble's "Scanception" uses QR codes in PDF lures to bypass enterprise security, shifting attacks to mobile devices to harvest credentials via AITM phishing pages.
16 views
Daily Writeups
⤷ Title: Pavel Durov Warns: New Extortion Wave Targets Telegram Users for Digital Assets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 00:02:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Blackmail #cybersecurity #Digital Assets #Extortion #Online Safety #Pavel Durov #Scams #Telegram #Telegram Security
Penetration Testing Tools
Pavel Durov Warns: New Extortion Wave Targets Telegram Users for Digital Assets
Telegram founder Pavel Durov warns of a new extortion wave on the platform, where fraudsters are demanding rare digital assets like usernames and gifts from users.
18 views
Daily Writeups
⤷ Title: APT41’s New Frontier: Chinese Cyberespionage Group Targets African Governments
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 23:42:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Africa #APT41 #China #Cobalt Strike #Cyberespionage #Government IT #Impacket #kaspersky #Lateral Movement #Threat Group
Penetration Testing Tools
APT41's New Frontier: Chinese Cyberespionage Group Targets African Governments
Kaspersky uncovers a new APT41 cyberespionage campaign targeting African government IT services, showcasing the Chinese group's full TTPs and a strategic geographic pivot.
14 views
Daily Writeups
⤷ Title: Silent Scourge: Over 3,500 Websites Infected by New Covert Browser Cryptominer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 23:37:46 +0000
════════════════════════
⌗ Tags: #Malware #Browser Hijacking #Coinhive #cryptomining #cybersecurity #JavaScript #malware #supply chain attack #web security
Penetration Testing Tools
Silent Scourge: Over 3,500 Websites Infected by New Covert Browser Cryptominer
A new covert cryptomining campaign has compromised over 3,500 websites, silently hijacking visitors' browser resources to mine crypto with virtually no detection.
14 views
Daily Writeups
⤷ Title: Snake Keylogger Strikes Turkish Aerospace & Defense, Evades Detection with Stealthy Tactics
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 23:34:18 +0000
════════════════════════
⌗ Tags: #Malware #Aerospace #cyberattack #Data Theft #Defense Industry #Infostealer #malware #phishing #Snake Keylogger #Turkey #TUSAŞ
Penetration Testing Tools
Snake Keylogger Strikes Turkish Aerospace & Defense, Evades Detection with Stealthy Tactics
Turkish experts uncover a large-scale phishing campaign targeting aerospace and defense firms with Snake Keylogger, disguised as TUSAŞ documents, evading detection.
19 views
Daily Writeups
⤷ Title: UNG0002: Stealthy South Asian APT Group Unleashes New Malware in Broad Cyberespionage Campaigns Across Asia
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 23:20:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #China #Cyberespionage #DLL Sideloading #Hong Kong #malware #Pakistan #Shadow RAT #South Asia #UNG0002
Penetration Testing Tools
UNG0002: Stealthy South Asian APT Group Unleashes New Malware in Broad Cyberespionage Campaigns Across Asia
Seqrite Labs exposes UNG0002, a technically adept South Asian APT group using sophisticated social engineering and DLL sideloading to conduct multi-stage cyberespionage campaigns across Asia.
13 views
Daily Writeups
⤷ Title: Security Misconfiguration (OWASP A05): Hacking and Bug Bounty Guide
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 00:01:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #penetration_testing #bug_bounty #web_development
Medium
Security Misconfiguration (OWASP A05): Hacking and Bug Bounty Guide
Discover how security misconfigurations expose systems and data. Exploit and protect with this guide!
21 views
Daily Writeups
⤷ Title: CVE-2025–37103: The Silent Killer Vulnerability in Your Network
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 23:39:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #application_security #ai #networking
Medium
CVE-2025–37103: The Silent Killer Vulnerability in Your Network
Two clicks away from total control — HPE’s critical flaw leaves networks wide open.
18 views