Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: Master CISSP Exam 2025: The Ultimate Guide to Becoming a Certified Information Systems Security…
════════════════════════
𐀪 Author: Daywalkernyc
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 05:36:53 GMT
════════════════════════
⌗ Tags: #cissp #cybersecurity #udemy #security #ethical_hacking
Medium
Master CISSP Exam 2025: The Ultimate Guide to Becoming a Certified Information Systems Security…
In today’s digital-first world, cybersecurity is no longer optional — it’s essential. Organizations across the globe are facing relentless…
35 views
Daily Writeups
⤷ Title: bkcrack: Crack legacy zip encryption
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 08:19:28 +0000
════════════════════════
⌗ Tags: #Open Source Tool
Penetration Testing Tools
bkcrack: Crack legacy zip encryption
bkcrack is a command-line tool which implements crack legacy zip encryption with Biham and Kocher's known plaintext attack.
29 views
Daily Writeups
⤷ Title: AzureGoat: Damn Vulnerable Azure Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 08:15:45 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AzureGoat #Damn Vulnerable Azure Infrastructure
Penetration Testing Tools
AzureGoat: Damn Vulnerable Azure Infrastructure
Damn Vulnerable Azure Infrastructure is a vulnerable by design infrastructure on Azure featuring the OWASP Top 10 web app security risks
21 views
Daily Writeups
⤷ Title: Fake Antivirus Targets Russian Businesses: Inside a New Android Espionage Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 08:04:44 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #cybercrime #cybersecurity #Data Theft #Doctor Web #Espionage #GuardCB #Russia #Surveillance
Penetration Testing Tools
Fake Antivirus Targets Russian Businesses: Inside a New Android Espionage Campaign
A new report uncovers Android.Backdoor.916.origin, a sophisticated trojan disguised as an antivirus app that targets employees of Russian businesses for data theft.
11 views
Daily Writeups
⤷ Title: Lumma Unleashed: Inside the Vast Ecosystem Powering the World’s Top Infostealer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 08:01:17 +0000
════════════════════════
⌗ Tags: #Malware #cybercrime #cybersecurity #Data Theft #hacking #Lumma Stealer #Malware_as_a_Service #threat intelligence #Underground Forums
Penetration Testing Tools
Lumma Unleashed: Inside the Vast Ecosystem Powering the World’s Top Infostealer
A new report uncovers the vast, resilient ecosystem behind Lumma Stealer, revealing how affiliates use a web of tools and services to diversify attacks and evade takedowns.
7 views
Daily Writeups
⤷ Title: Bidding War: A New Firm Is Offering a Record $20 Million for Zero-Day Exploits
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:59:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #advanced security solutions #bug bounty #cybercrime #cybersecurity #exploit #hacking #vulnerability #zero_day
Penetration Testing Tools
Bidding War: A New Firm Is Offering a Record $20 Million for Zero-Day Exploits
A new company in the UAE is shaking up the vulnerability market, offering up to $20M for zero-day smartphone exploits in a secretive and unprecedented move.
8 views
Daily Writeups
⤷ Title: Microsoft Restricts China’s Access to Vulnerability Data After Suspected Leaks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:56:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Microsoft #China #Cyber Espionage #cybersecurity #MAPP #security policy #SharePoint #vulnerability
Penetration Testing Tools
Microsoft Restricts China's Access to Vulnerability Data After Suspected Leaks
Microsoft has restricted Chinese companies' access to its MAPP vulnerability program after a SharePoint attack raised suspicions of leaked information and misuse.
8 views
Daily Writeups
⤷ Title: Alarming Report: The Simple Attack That’s Breaching Half of Corporate Networks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:54:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #credential abuse #cyber attack #cybersecurity #data breach #enterprise security #password guessing #Picus Security #threat intelligence
Penetration Testing Tools
Alarming Report: The Simple Attack That's Breaching Half of Corporate Networks
A new report reveals that password-guessing attacks now succeed in 46% of cases, highlighting how weak passwords and legacy systems are the top threats to corporate networks.
16 views
Daily Writeups
⤷ Title: From Nuggets to Breaches: A Hacker Exposes Critical Flaws in McDonald’s Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:51:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #BobDaHacker #bug bounty #cybercrime #cybersecurity #enterprise security #hacking #McDonald's #Responsible Disclosure #vulnerability
Penetration Testing Tools
From Nuggets to Breaches: A Hacker Exposes Critical Flaws in McDonald's Systems
A hacker's quest for free nuggets revealed dozens of critical vulnerabilities in McDonald's corporate systems, exposing major security flaws and a lack of bug bounty program.
8 views
Daily Writeups
⤷ Title: Total Takeover: The Attack That Seizes Your Active Directory With Default Settings
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:48:19 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Directory #cybersecurity #Domain Admin #MITM6 #NTLM Relay #privilege escalation #vulnerability #Windows Security
Penetration Testing Tools
Total Takeover: The Attack That Seizes Your Active Directory With Default Settings
A dangerous attack combines MITM6 and NTLM Relay to exploit default Windows and Active Directory settings, allowing attackers to seize full domain control.
14 views
Daily Writeups
⤷ Title: Malicious Go Module Targets Solana Devs, Leaking Data to a “U.S.-Based” Server
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:44:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #blockchain #cybercrime #cybersecurity #Go #Infostealer #malware #npm #Solana #supply chain attack
Penetration Testing Tools
Malicious Go Module Targets Solana Devs, Leaking Data to a "U.S.-Based" Server
A new report uncovers a malicious Go module disguised as a Solana tool. It's secretly an infostealer that targets crypto developers and sends data to a US-based server.
5 views
Daily Writeups
⤷ Title: Danger: “Verified” Chrome VPN Extension Exposed as Screen-Capturing Spyware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:41:56 +0000
════════════════════════
⌗ Tags: #Data Leak #Chrome extension #cybercrime #cybersecurity #data leak #FreeVPN.One #privacy #Spyware #VPN
Penetration Testing Tools
Danger: "Verified" Chrome VPN Extension Exposed as Screen-Capturing Spyware
A popular Chrome VPN extension, FreeVPN.One, has been exposed as spyware that secretly captures user screenshots and logs visited websites.
3 views
Daily Writeups
⤷ Title: AI Bots Are Now Flooding the Web, Straining Servers and Skewing Analytics
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:39:36 +0000
════════════════════════
⌗ Tags: #Malware #AI #bot traffic #cybersecurity #Fastly #internet infrastructure #Technology #web performance #website security
Penetration Testing Tools
AI Bots Are Now Flooding the Web, Straining Servers and Skewing Analytics
A new report reveals AI bots are causing massive traffic spikes, straining web servers, and impacting site performance. Meta and OpenAI are leading the charge.
7 views
Daily Writeups
⤷ Title: The Dark Side of Automation: How a Website Builder Became a Phishing Machine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:37:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Automation #cybercrime #cybersecurity #Lovable #malware #phishing #Proofpoint #Tycoon #zgRAT
Penetration Testing Tools
The Dark Side of Automation: How a Website Builder Became a Phishing Machine
A new report reveals how the website automation platform Lovable is being abused for phishing, malware distribution, and data theft, lowering the bar for attackers.
23 views
Daily Writeups
⤷ Title: QuirkyLoader: The New A-List Malware Loader Hiding in Plain Sight
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:36:02 +0000
════════════════════════
⌗ Tags: #Malware #Agent Tesla #AsyncRAT #cybersecurity #FormBook #malware #QuirkyLoader #threat analysis
Penetration Testing Tools
QuirkyLoader: The New A-List Malware Loader Hiding in Plain Sight
New QuirkyLoader malware is distributing top threats like FormBook & Agent Tesla using sophisticated techniques including DLL side-loading & rare encryption. Learn more.
10 views
Daily Writeups
⤷ Title: ️ Part 1: AI-Driven Recon — Hunting Attack Surfaces at Machine Speed
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 08:26:14 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #ai #cybersecurity #infosec
Medium
🛰️ Part 1: AI-Driven Recon — Hunting Attack Surfaces at Machine Speed
🎬 The Opening Scene
7 views
Daily Writeups
⤷ Title: AI in Pentesting: How Attackers Use LLMs to Automate Recon & Payloads
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 08:19:18 GMT
════════════════════════
⌗ Tags: #infosec #information_security #bug_bounty #ai #cybersecurity
Medium
🤖 AI in Pentesting: How Attackers Use LLMs to Automate Recon & Payloads
🎬 The Hook
7 views
Daily Writeups
⤷ Title: ️‍♂️ Shadow API Red Team Playbook: Hunting Ghost Endpoints Like an Attacker
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 08:09:51 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #infosec #bug_bounty #ai
Medium
🕵️‍♂️ Shadow API Red Team Playbook: Hunting Ghost Endpoints Like an Attacker
“You don’t need to exploit a zero-day when the company left yesterday’s API online.”
9 views
Daily Writeups
⤷ Title: ️‍♂️ Shadow API Red Team Playbook (Deep Dive Edition)
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 08:03:09 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty #infosec #ai #cybersecurity
Medium
🕵️‍♂️ Shadow API Red Team Playbook (Deep Dive Edition)
🎯 The Premise
9 views
Daily Writeups
⤷ Title: Shadow APIs: The Attack Surface That CISOs Don’t See
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:55:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #information_security #ai #bug_bounty
Medium
Shadow APIs: The Attack Surface That CISOs Don’t See
“What you don’t know exists can still be breached.”
7 views
Daily Writeups
⤷ Title: From 403 to Foothold: Creative Ways Attackers Turn “Forbidden” into Access
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Sun, 24 Aug 2025 07:39:04 GMT
════════════════════════
⌗ Tags: #bug_bounty #ai #infosec #cybersecurity #information_security
Medium
🚪 From 403 to Foothold: Creative Ways Attackers Turn “Forbidden” into Access
*“A 403 isn’t a wall. It’s a sign that says: wrong door, but the building is real.”
10 views