Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: RPCMon: RPC Monitor tool based on Event Tracing for Windows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 11 May 2025 00:00:42 +0000
════════════════════════
⌗ Tags: #Network Defense #RPC Monitor tool #RPCMon
Penetration Testing Tools
RPCMon: RPC Monitor tool based on Event Tracing for Windows
RPCMon is a GUI tool for scanning RPC communication through Event Tracing for Windows (ETW). It was built like Procmon
21 views
Daily Writeups
⤷ Title: GoExec: Next-Gen Remote Execution Tool Boosts OPSEC for Windows Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 00:07:35 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity #DCOM #GoExec #OPSEC #Remote Execution #RPC #SCMR #Task Scheduler #windows #WMI
Penetration Testing Tools
GoExec: Next-Gen Remote Execution Tool Boosts OPSEC for Windows Attacks
GoExec is a new tool for Windows remote execution, offering significant OPSEC improvements and leveraging RPC, Task Scheduler, DCOM, and WMI for stealthy operations.
40 views
Daily Writeups
⤷ Title: COMmander: Unmasking Hidden Threats in Windows with Deep RPC/COM Monitoring
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 16 Jul 2025 03:11:02 +0000
════════════════════════
⌗ Tags: #Open Source Tool #COM #cybersecurity #ETW #Low_Level Monitoring #malware analysis #RPC #security tool #Threat Detection #Windows Security
Penetration Testing Tools
COMmander: Unmasking Hidden Threats in Windows with Deep RPC/COM Monitoring
COMmander is a lightweight, practical tool that monitors deep-seated RPC and COM activities in Windows, designed to detect subtle, invisible threats that bypass traditional security.
21 views
Daily Writeups
⤷ Title: Evilent PoC Exposes Windows Event Log Vulnerability, Leaking NetNTLMv2 Credentials via SMB Share
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 31 Jul 2025 00:05:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #credential leak #cybersecurity #Event Log #Evilent #NetNTLMv2 #NTLM Coercion #PoC #RPC #SMB #windows
Penetration Testing Tools
Evilent PoC Exposes Windows Event Log Vulnerability, Leaking NetNTLMv2 Credentials via SMB Share
Evilent, a new PoC tool, exploits the Windows Event Log service to coerce connections to an attacker-controlled SMB share, potentially leaking NetNTLMvLMv2 credentials from antivirus scans.
16 views
Daily Writeups
⤷ Title: EPM Poisoning (CVE-2025-49760): New Windows RPC Exploit Hijacks Services, Allowing Full Active Directory Compromise, PoC Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 00:01:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #active directory #Credential Theft #CVE_2025_49760 #cybersecurity #EPM Poisoning #RPC_Racer #SafeBreach #Vulnerability #Windows RPC
Daily CyberSecurity
EPM Poisoning (CVE-2025-49760): New Windows RPC Exploit Hijacks Services, Allowing Full Active Directory Compromise, PoC Releases
A new "EPM Poisoning" attack technique exploits a Windows RPC flaw (CVE-2025-49760) to hijack services, enabling unprivileged users to steal machine credentials and compromise Active Directory.
9 views
Daily Writeups
⤷ Title: our Windows System Is Not Safe: New ‘EPM Poisoning’ Attack Hijacks RPC Protocol
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 02:15:51 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #DEF CON #EPM Poisoning #RPC #SafeBreach #vulnerability #windows
Penetration Testing Tools
our Windows System Is Not Safe: New 'EPM Poisoning' Attack Hijacks RPC Protocol
A new "EPM poisoning" attack bypasses Windows security by hijacking the RPC protocol, allowing an unprivileged user to escalate privileges and steal NTLM hashes.
16 views
Daily Writeups
⤷ Title: Apache bRPC Flaw (CVE-2025-54472) Allows Remote Denial-of-Service Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 02:53:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache bRPC #C++ #CVE_2025_54472 #Denial of Service #dos #Memory Overflow #Redis #RPC Framework #Vulnerability
Daily CyberSecurity
Apache bRPC Flaw (CVE-2025-54472) Allows Remote Denial-of-Service Attack
A critical flaw in Apache bRPC's Redis parser (CVE-2025-54472) allows unauthenticated remote attackers to crash services via a memory allocation bug. Update to 1.14.1 immediately!
15 views
Daily Writeups
⤷ Title: RPC Investigator: advanced discovery and analysis interface to Windows RPC endpoints
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Oct 2025 08:46:52 +0000
════════════════════════
⌗ Tags: #Open Source Tool #RPC Investigator #Windows RPC endpoints
Penetration Testing Tools
RPC Investigator: advanced discovery and analysis interface to Windows RPC endpoints
RPC Investigator (RPCI) is a .NET/C# Windows Forms UI application that provides an advanced discovery and analysis interface to Windows RPC endpoints
32 views
Daily Writeups
⤷ Title: COMmander: Lightweight C# Tool Boosts Defensive RPC/COM Telemetry
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 10:15:28 +0000
════════════════════════
⌗ Tags: #Open Source Tool #C++ #COM #Commander #cyber defense #ETW #RPC #security tool #Telemetry #Threat Detection #windows
Penetration Testing Tools
COMmander: Lightweight C# Tool Boosts Defensive RPC/COM Telemetry
COMmander is a new, lightweight C# tool that leverages the Windows RPC ETW provider to enrich defensive telemetry, enabling granular detection of RPC/COM events.
23 views
Daily Writeups
⤷ Title: FusterCluck PoC: Script Exploits RPC to Achieve Lateral Movement in Failover Clusters
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 08:23:48 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Cluster API #Failover Cluster #FusterCluck #Lateral Movement #PoC #Red Team #RPC #Windows Security
Penetration Testing Tools
FusterCluck PoC: Script Exploits RPC to Achieve Lateral Movement in Failover Clusters
FusterCluck PoC exploits the Windows Cluster API over RPC to migrate cluster groups and achieve lateral movement across all nodes of a failover cluster.
31 views
Daily Writeups
⤷ Title: Unpatched RasMan Zero-Day Allows Local System Takeover via DoS Crash and RPC Spoofing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 03:50:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #Windows #0patch #CVE_2025_59230 #DoS #Local System #privilege escalation #RasMan #RPC Spoofing #Windows Vulnerability #zero_day
Penetration Testing Tools
Unpatched RasMan Zero-Day Allows Local System Takeover via DoS Crash and RPC Spoofing
The 0patch team has reported that while analyzing CVE-2025-59230 in the Windows Remote Access Connection Manager (RasMan)—a flaw
24 views
Daily Writeups
⤷ Title: CVE-2025-60021: Apache bRPC Flaw Opens Door to Remote Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 02:58:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache bRPC #CVE_2025_60021 #Cyber Security #DevSecOps #Heap Profiler #Industrial Software #Patch Alert #remote command injection #RPC Framework
Daily CyberSecurity
CVE-2025-60021: Apache bRPC Flaw Opens Door to Remote Command Injection
Apache has issued an important fix for bRPC, its industrial-grade C++ RPC framework used to power some of the world’s most demanding systems. The vulnerability, tracked as CVE-2025-60021, is…
24 views
Daily Writeups
⤷ Title: BlueHammer: Researcher Drops Functional 0-Day Exploit Targeting Windows Defender
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:46:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #0_day #BlueHammer #BlueHammer Exploit #cybersecurity #infosec #LPE #Microsoft #NTFS Junctions #privilege escalation #RPC Hijacking #TOCTOU #Windows Defender
Daily CyberSecurity
BlueHammer: Researcher Drops Functional 0-Day Exploit Targeting Windows Defender
BlueHammer is a functional 0-day exploit targeting Windows Defender’s update engine to achieve SYSTEM privileges. Here is how the unpatched LPE works.
8 views
Daily Writeups
⤷ Title: The Unpatched Pivot: New RPC Flaw Opens Doors for Windows Privilege Escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 12:29:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cybersecurity #infosec #kaspersky #LPE #Microsoft #OS Architecture #PhantomRPC #privilege escalation #RPC #SeImpersonatePrivilege #Windows Security
Daily CyberSecurity
The Unpatched Pivot: New RPC Flaw Opens Doors for Windows Privilege Escalation
Kaspersky reveals PhantomRPC, a novel Windows architectural flaw enabling LPE to SYSTEM. Microsoft denies a patch. Monitor SeImpersonatePrivilege now.
19 views
Daily Writeups
⤷ Title: The “Unpatchable” Ghost: How PhantomRPC Turns Windows Architecture Against Itself for SYSTEM Control
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 15:14:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #Black Hat Asia 2026 #CVE_2026_26183 #Infosec #Kaspersky Lab #Microsoft #PhantomRPC #privilege escalation #RPC #SYSTEM Access #Windows Security #Windows Server 2025
Penetration Testing Tools
The "Unpatchable" Ghost: How PhantomRPC Turns Windows Architecture Against Itself for SYSTEM Control
Security researchers at Kaspersky Lab have identified a surreptitious methodology within Windows to obtain absolute systemic hegemony—a vulnerability
15 views
Daily Writeups
⤷ Title: Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 12:03:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Thrift #C++ #CVE_2026_41603 #cybersecurity #go #infosec #java #memory corruption #mitm #Node.js #RPC Security #swift
Daily CyberSecurity
Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws
Apache Thrift fixes critical cross-language vulnerabilities (MitM, memory corruption, DoS). Secure your Java, Go, and C++ stacks by upgrading to version 0.23.0.
10 views
Daily Writeups
⤷ Title: RPC (Remote Procedure Call) Protocol .
════════════════════════
𐀪 Author: Ashraf Mohammed
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 07:47:01 GMT
════════════════════════
⌗ Tags: #windows_post_exploitation #rpc #cybersecurity #penetration_testing #smb
Medium
RPC (Remote Procedure Call) Protocol 📡 .
RPC is the invisible backbone of Windows networking. Every time you manage a [remote] computer — services, registry, users, printers…
28 views