Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: RemoteMonologue: New Windows Technique Weaponizes DCOM for NTLM Credential Harvesting
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 29 Jun 2025 07:43:25 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Authentication Coercion #Credential Harvesting #cybersecurity #DCOM #Lateral Movement #NTLM #privilege escalation #RemoteMonologue #windows
Penetration Testing Tools
RemoteMonologue: New Windows Technique Weaponizes DCOM for NTLM Credential Harvesting
RemoteMonologue is a new Windows technique that uses DCOM to coerce NTLM authentications, enabling remote credential harvesting and privilege escalation for attackers.
37 views
Daily Writeups
⤷ Title: GoExec: Next-Gen Remote Execution Tool Boosts OPSEC for Windows Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:07:35 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity #DCOM #GoExec #OPSEC #Remote Execution #RPC #SCMR #Task Scheduler #windows #WMI
Penetration Testing Tools
GoExec: Next-Gen Remote Execution Tool Boosts OPSEC for Windows Attacks
GoExec is a new tool for Windows remote execution, offering significant OPSEC improvements and leveraging RPC, Task Scheduler, DCOM, and WMI for stealthy operations.
40 views
Daily Writeups
⤷ Title: BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:32:28 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BitlockMove #COM Hijacking #cybersecurity #DCOM #Defensive Telemetry #Lateral Movement #Proof of Concept #Red Team #Windows Security
Penetration Testing Tools
BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking
"BitlockMove" PoC demonstrates a novel lateral movement technique abusing BitLocker DCOM/COM hijacking to execute code in a logged-in user's session without credential theft.
49 views
Daily Writeups
⤷ Title: DCOMRunAs: Covert Technique for Remote Code Execution in a Logged-on Session
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:31:40 +0000
════════════════════════
⌗ Tags: #Open Source Tool #DCOM #DCOMRunAs #DLL hijacking #Lateral Movement #post_exploitation #remote code execution #Windows Security
Penetration Testing Tools
DCOMRunAs: Covert Technique for Remote Code Execution in a Logged-on Session
DCOMRunAs is a covert technique that exploits DCOM and DLL hijacking to execute payloads in the context of a remote, logged-on user's session without new process creation.
15 views
Daily Writeups
⤷ Title: Silent Pivot: Exploiting SpeechRuntimeMove for Stealthy Lateral Movement via DCOM
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:57:03 +0000
════════════════════════
⌗ Tags: #Open Source Tool #COM Hijacking #DCOM #DLL Sideloading #Lateral Movement #post_exploitation #red teaming #Remote Registry #SpeechRuntime #Windows Security
Penetration Testing Tools
Silent Pivot: Exploiting SpeechRuntimeMove for Stealthy Lateral Movement via DCOM
SpeechRuntimeMove abuses DCOM and COM hijacking to execute code in an active user's session, bypassing the need for a full system takeover.
46 views