Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Cyber Security Patch Management: Keeping Systems Up-to-Date
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:50:43 GMT
════════════════════════
⌗ Tags: #systemupdate #it_security #cybersecurity #vulnerability_management #patch_management
Medium
Cyber Security Patch Management: Keeping Systems Up-to-Date
In today's dynamic digital landscape, where cyber threats constantly evolve and proliferate, maintaining a robust cybersecurity posture is…
17 views
Daily Writeups
⤷ Title: Cyber Security Vulnerability Scanning: Identifying Weak Points
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:48:51 GMT
════════════════════════
⌗ Tags: #cybersecurity #risk_assessment #vulnerability_scanning #network_security #weak_points
Medium
Cyber Security Vulnerability Scanning: Identifying Weak Points
In the dynamic realm of digital operations, ensuring robust cyber security stands as a paramount concern for organizations across all…
18 views
Daily Writeups
⤷ Title: Cyber Security Pen Testing: Simulating Real-World Attacks
════════════════════════
𐀪 Author: Cyber Security Research
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:46:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #attack_simulation #security_testing #pentesting
Medium
Cyber Security Pen Testing: Simulating Real-World Attacks
In today's interconnected digital landscape, organizations face an ever-evolving array of cyber threats that can compromise sensitive data…
20 views
Daily Writeups
⤷ Title: Pen Testing Your Mobile Application (and Its API)
════════════════════════
𐀪 Author: Cyberoptic Security
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:26:15 GMT
════════════════════════
⌗ Tags: #pentesting #cyber #mobile_app_development #cybersecurity #penetration_testing
Medium
Pen Testing Your Mobile Application (and Its API)
Mobile apps are everywhere. Whether it’s a banking app, a fitness tracker, or a marketplace for local goods, almost every New Zealand…
19 views
Daily Writeups
⤷ Title: Host & Network Penetration Testing: Exploitation — CTF 1
════════════════════════
𐀪 Author: Mohamed amine Gabsi
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 22:08:21 GMT
════════════════════════
⌗ Tags: #penetration_testing #ejpt #exploitation #cybersecurity #ctf
Medium
Host & Network Penetration Testing: Exploitation — CTF 1
I had a lot of fun doing this CTF so I wanted to write a writeup.
15 views
Daily Writeups
⤷ Title: Detecting Web Shells | Tryhackme
════════════════════════
𐀪 Author: Aaron
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:35:11 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #cybersecurity
Medium
Detecting Web Shells | Tryhackme
Explore web shell detection by analyzing logs, file systems, and network traffic.
15 views
Daily Writeups
⤷ Title: WordPress Exploit — Alemha Watermarker 1.3.1 (Stored XSS Vulnerability) Write Up
════════════════════════
𐀪 Author: hazmatmonstarrr
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:23:55 GMT
════════════════════════
⌗ Tags: #wordpress_plugins #web_exploitation #writeup #ethical_hacking
Medium
WordPress Exploit — Alemha Watermarker 1.3.1 (Stored XSS Vulnerability) Write Up
As part of a college project, I successfully exploited a Stored XSS vulnerability when I downloaded and activated the plugin “Alemha…
18 views
Daily Writeups
⤷ Title: Free Cybersecurity Roadmap for Beginners (2025)
════════════════════════
𐀪 Author: Ghulam Mohiuddin
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:11:42 GMT
════════════════════════
⌗ Tags: #cybersecurity_awareness #ethical_hacking #cybersecurity #cybersecurity_roadmap
Medium
Free Cybersecurity Roadmap for Beginners (2025)
Learn Ethical Hacking Step‑by‑Step with TryHackMe
21 views
Daily Writeups
⤷ Title: CESS Airdrop Join DeShare to Earn CESS Tokens
════════════════════════
𐀪 Author: Cess Network
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 23:12:32 GMT
════════════════════════
⌗ Tags: #cess_network #airdrop #web3 #crypto #xs
Medium
CESS Airdrop 🚀 Join DeShare to Earn CESS Tokens
Over 2 million wallets have already joined the Cess DeShare campaign, racing to collect points before the final snapshot. If you want to…
24 views
Daily Writeups
⤷ Title: ProtectMyTooling: Multi-Packer wrapper letting us daisy-chain various packers, obfuscators
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:29:52 +0000
════════════════════════
⌗ Tags: #Open Source Tool #ProtectMyTooling
Penetration Testing Tools
ProtectMyTooling: Multi-Packer wrapper letting us daisy-chain various packers, obfuscators
script wraps around a multitude of packers, protectors, obfuscators, shellcode loaders, encoders, and generators to produce complex protected Red Team
22 views
Daily Writeups
⤷ Title: Critical Flaw (CVE-2025-22470, CVSS 9.8) in SATO Industrial Label Printers Allow Remote Root Takeover
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:44:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_22469 #CVE_2025_22470 #cybersecurity #file upload #Industrial Printers #rce #SATO Corporation #Vulnerability
Daily CyberSecurity
Critical Flaw (CVE-2025-22470, CVSS 9.8) in SATO Industrial Label Printers Allow Remote Root Takeover
JPCERT/CC warns of critical flaws (CVSS 9.8) in SATO industrial label printers that allow unauthenticated remote attackers to upload malicious Lua scripts for root access.
24 views
Daily Writeups
⤷ Title: CISA Warns of “ToolShell”: Critical Exploit Chain Hits SharePoint Servers, Bypasses Authentication
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:42:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #cybersecurity #Exploit Chain #rce #Sharepoint #ToolShell #Vulnerability #webshell #zero_day
Daily CyberSecurity
CISA Warns of "ToolShell": Critical Exploit Chain Hits SharePoint Servers, Bypasses Authentication
CISA issues an urgent warning about "ToolShell," a sophisticated exploit chain targeting SharePoint servers with multiple vulnerabilities to install webshells and steal crypto keys.
15 views
Daily Writeups
⤷ Title: CVE-2025-52709: Critical PHP Object Injection Flaw in Everest Forms Plugin Affects 100,000+ Sites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:40:56 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_52709 #cybersecurity #Everest Forms #PHP Object Injection #rce #Vulnerability #wordpress
Daily CyberSecurity
CVE-2025-52709: Critical PHP Object Injection Flaw in Everest Forms Plugin Affects 100,000+ Sites
A critical PHP object injection flaw (CVE-2025-52709, CVSS 9.8) in Everest Forms allows RCE when an admin views form submissions on PHP versions below 7.1. Update to v3.2.3 immediately.
16 views
Daily Writeups
⤷ Title: NVIDIA: “No Backdoors, No Kill Switches,” Rejecting Calls for Government Hardware Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:36:47 +0000
════════════════════════
⌗ Tags: #Malware #backdoor #Clipper Chip #cybersecurity #GPU #Hardware Integrity #Kill Switch #nvidia #Policy #Tech News
Daily CyberSecurity
NVIDIA: "No Backdoors, No Kill Switches," Rejecting Calls for Government Hardware Controls
NVIDIA states its GPUs have no backdoors or kill switches, arguing such controls are a security risk and would be a "gift to hackers," referencing the failed Clipper Chip.
13 views
Daily Writeups
⤷ Title: BYOVD Attack: A New AV Killer Exploits a Legitimate Driver to Neutralize Defenses for MedusaLocker Ransomware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:31:56 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability Report #AV Killer #Brazil #BYOVD #cybersecurity #evasion #MedusaLocker #ransomware #ThrottleStop.sys #Windows Kernel
Daily CyberSecurity
BYOVD Attack: A New AV Killer Exploits a Legitimate Driver to Neutralize Defenses for MedusaLocker Ransomware
A recent incident response operation in Brazil has revealed a stealthy and destructive threat abusing the trusted architecture of the Windows kernel. In its latest analysis, Kaspersky Labs exposed…
18 views
Daily Writeups
⤷ Title: The WhatsApp Kill Switch: New npm Packages Use Developer’s Phone Number to Wipe Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:28:46 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Kill Switch #malware #npm #Remote Code Execution #supply chain attack #System Wipe #WhatsApp
Daily CyberSecurity
The WhatsApp Kill Switch: New npm Packages Use Developer’s Phone Number to Wipe Systems
Socket’s Threat Research Team has uncovered two malicious npm packages—naya-flore and nvlore-hsc—designed to target developers building WhatsApp integrations. Far from mere spyware or adware…
17 views
Daily Writeups
⤷ Title: CISA Alert: Critical Flaws in Tigo Energy Solar Devices Allow Remote Takeover of Solar Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:21:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Command Injection #Critical Infrastructure #CVE_2025_7768 #cybersecurity #Hard_coded Credentials #hardcoded credentials #ICS #IOT #Solar #Solar Systems #Tigo Energy #Vulnerability
Daily CyberSecurity
CISA Alert: Critical Flaws in Tigo Energy Solar Devices Allow Remote Takeover of Solar Systems
In a critical advisory issued by the Cybersecurity and Infrastructure Security Agency (CISA), newly discovered vulnerabilities in Tigo Energy’s Cloud Connect Advanced (CCA) device could allow atta…
14 views
Daily Writeups
⤷ Title: Cryptocurrency Scams: How Fake Binance Ads Steal Your Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:15:13 +0000
════════════════════════
⌗ Tags: #Malware #Binance #cryptocurrency #cybersecurity #facebook #Infostealer #malware #phishing
Daily CyberSecurity
Cryptocurrency Scams: How Fake Binance Ads Steal Your Data
AhnLab Security Intelligence Center (ASEC) has uncovered a sophisticated multi-stage malware campaign that targets cryptocurrency users through malicious Facebook ads. The campaign uses fake Binan…
8 views
Daily Writeups
⤷ Title: The Candiru Files: New Infrastructure Exposes Stealthy Surveillance Clusters in Hungary, Saudi Arabia, and Indonesia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:11:11 +0000
════════════════════════
⌗ Tags: #Malware #Candiru #cyber_espionage #DevilsTongue #Entity List #Hungary #Indonesia #Mercenary Spyware #Saudi Arabia #spyware
Daily CyberSecurity
The Candiru Files: New Infrastructure Exposes Stealthy Surveillance Clusters in Hungary, Saudi Arabia, and Indonesia
In a reminder of the persistent threat posed by commercial spyware vendors, Insikt Group has uncovered new operational infrastructure tied to Candiru—the shadowy Israeli mercenary spyware company …
10 views
Daily Writeups
⤷ Title: CERT-UA Exposes UAC-0099: New Backdoor Toolkit Targets Ukraine’s Defense with Phishing & Stealthy Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:06:41 +0000
════════════════════════
⌗ Tags: #Malware #CERT_UA #cyberattack #Defense Industry #DRAGSTARE #malware #MATCHBOIL #MATCHWOK #phishing #UAC_0099 #Ukraine
Daily CyberSecurity
CERT-UA Exposes UAC-0099: New Backdoor Toolkit Targets Ukraine’s Defense with Phishing & Stealthy Malware
In a concerning escalation of cyber aggression, Ukraine’s National Cyber Security Incidents Response Team (CERT-UA) has uncovered a sophisticated new campaign by the threat group UAC-0099 targetin…
16 views
Daily Writeups
⤷ Title: The AK47 Project: New Report Ties Storm-2603 to LockBit and Warlock Ransomware, SharePoint Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 00:00:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AK47 C2 #china #cybersecurity #LockBit #Project AK47 #ransomware #Sharepoint #Storm_2603 #Unit 42 #Warlock
Daily CyberSecurity
The AK47 Project: New Report Ties Storm-2603 to LockBit and Warlock Ransomware, SharePoint Exploits
In a revelation, Unit 42 has exposed a financially motivated cyber threat actor cluster, dubbed CL-CRI-1040, with dangerous ties to known ransomware operations and links to the Storm-2603 actor pr…
16 views