Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.55K subscribers

2 photos

130K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.55K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Mon, 02 Oct 2023 09:28:00 GMT
———————————————
✏️Title: Intro to Syscalls & Windows internals for malware development Pt.1
———————————————
📎Link: https://medium.com/p/b5bb0cd90c52
———————————————
Tags: #cybersecurity #penetration_testing #windows_internals #malware #red_team

Intro to Syscalls & Windows internals for malware development Pt.1

Hello Everyone, over the years I’ve written many articles/summaries that for some reason I kept to myself and didn’t think to share them…

45 views11:02

🔖New Writeup❗️
———————————————
🗓Date: Wed, 25 Dec 2024 10:14:32 GMT
———————————————
✏️Title: Creación de proceso en Windows
———————————————
📎Link: https://medium.com/p/d3c412cb07fd
———————————————
Tags: #windows_internals #windows #research #malware #hacking

Creación de proceso en Windows

En este articulo hablaremos de los componentes clave que se involucran en la creación de procesos de la familia de funciones de…

21 views11:18

⤷ Title: Ghostly Reflective PE Loader — how to make a remote process inject a PE in itself
════════════════════════
𐀪 Author: Sohail Saha
════════════════════════
ⴵ Time: Tue, 11 Mar 2025 18:26:53 GMT
════════════════════════
⌗ Tags: #windows_internals #windows #malware #penetration_testing #red_team

Ghostly Reflective PE Loader — how to make a remote process inject a PE in itself

How to combine reflective DLL injection with Ghostly hollowing to make a remote process inject a PE in itself.

34 views20:04

⤷ Title: Understanding Windows Internals: An Introduction
════════════════════════
𐀪 Author: Allow
════════════════════════
ⴵ Time: Wed, 02 Apr 2025 15:28:29 GMT
════════════════════════
⌗ Tags: #windows_internals #cybersecurity #malware_development #malware #malware_analysis

Understanding Windows Internals: An Introduction

Tags: #WindowsInternals #WindowsDevelopment #ReverseEngineering #OperatingSystems

30 views16:05

⤷ Title: What the Heck Is the Windows NT Kernel?
════════════════════════
𐀪 Author: Raven Rover
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 15:44:25 GMT
════════════════════════
⌗ Tags: #windows_kernel #windows #linux_kernel #windows_internals #cybersecurity

🧠 What the Heck Is the Windows NT Kernel?

The Core of Windows — Explained for Cyber Curious Minds

26 views16:04

⤷ Title: Windows API-Part I: Because Buttons Don’t Click Themselves.
════════════════════════
𐀪 Author: Sankadlikhit
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 20:43:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #info #winapi #red_team #windows_internals

Windows API-Part I: Because Buttons Don’t Click Themselves.

In the world of Windows, Commander (Bill Gates) doesn’t let programs talk directly to the operating system. Instead, there’s a messenger…

15 views21:04

⤷ Title: My notes on “Windows Security Internals — A Deep Dive into Windows Authentication, Authorization…
════════════════════════
𐀪 Author: Feghouli Hamza
════════════════════════
ⴵ Time: Sun, 27 Jul 2025 14:14:11 GMT
════════════════════════
⌗ Tags: #windows #os_internals #security_research #windows_internals #cybersecurity

My notes on “Windows Security Internals — A Deep Dive into Windows Authentication, Authorization…

The Windows Kernel Executive :

18 views15:04

⤷ Title: Evading ETW Techniques ( written in C):
════════════════════════
𐀪 Author: Zanebilal
════════════════════════
ⴵ Time: Fri, 03 Oct 2025 18:41:39 GMT
════════════════════════
⌗ Tags: #etw #evasion #windows_internals #cybersecurity

Evading ETW Techniques ( written in C):

before we begin : the code discussed in this blog is evaluable in my GitHub repo : https://github.com/Zanebilal/ETW-Evasion

12 views20:04

⤷ Title: PE File Structure Explained : A Guide to for Reverse Engineers & Developers
════════════════════════
𐀪 Author: Shaheer Yasir
════════════════════════
ⴵ Time: Sun, 05 Oct 2025 09:44:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #reverse_engineering #offensive_security #windows_internals

PE File Structure Explained : A Guide to for Reverse Engineers & Developers

Hey there, I’m Shaheer Yasir, aka Maverick. The Portable Executable (PE) format is the standard file format for executables, object code…

19 views10:04

⤷ Title: Blocking EDRs traffic: C-Based Tools That Block EDR Network Traffic via Windows Firewall and WFP
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 08:07:20 +0000
════════════════════════
⌗ Tags: #Open Source Tool #EDR evasion #endpoint security #firewall rules #red team tools #WFP filters #Windows Defender Firewall #Windows Filtering Platform #Windows internals

Penetration Testing Tools

Blocking EDRs traffic: C-Based Tools That Block EDR Network Traffic via Windows Firewall and WFP

New C-based tools demonstrate how EDR network traffic can be blocked using Windows Defender Firewall and WFP without disabling security software.

33 views10:04

⤷ Title: Windows Internals (COM objects)
════════════════════════
𐀪 Author: Makarios Mamdouh
════════════════════════
ⴵ Time: Sun, 15 Mar 2026 09:53:28 GMT
════════════════════════
⌗ Tags: #incident_response #windows_internals #cybersecurity #hacking #com_objects

Windows Internals

What is COM objects?

30 views11:04

⤷ Title: TryHackMe — Windows Fundamentals (Part II) Writeup
════════════════════════
𐀪 Author: Manmath somure
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 13:34:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #windows_fundamentals #infosec #windows_internals #tryhackme

TryHackMe — Windows Fundamentals (Part II) Writeup

🧠 Introduction

63 views15:04

⤷ Title: Hunting for Module Stomping Targets
════════════════════════
𐀪 Author: Tom O'Neill
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 11:42:53 GMT
════════════════════════
⌗ Tags: #red_team #malware #hacking #cybersecurity #windows_internals

Hunting for Module Stomping Targets

Swapping Guesswork for Process-Specific Precision

9 views12:04

⤷ Title: The Single-Primitive Write: WriteProcessMemory’s Hidden Page Flip
════════════════════════
𐀪 Author: Tom O'Neill
════════════════════════
ⴵ Time: Sun, 21 Jun 2026 22:15:43 GMT
════════════════════════
⌗ Tags: #malware #windows_internals #ethical_hacking #cybersecurity #windows

The Single-Primitive Write: WriteProcessMemory’s Hidden Page Flip

Documenting Undocumented WriteProcessMemory Behavior

27 views00:03

⤷ Title: Beyond the APIs: A Windows Internals Deep Dive into Process Injection
════════════════════════
𐀪 Author: Ron Epstein
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 18:00:19 GMT
════════════════════════
⌗ Tags: #infosec #red_team #windows_internals #malware #cybersecurity

Beyond the APIs: A Windows Internals Deep Dive into Process Injection

A Windows internals deep dive into process injection. Explore VAD trees, page tables, and memory structures behind stealth execution.

11 views20:04

⤷ Title: Userland ALPC Enumeration: Dynamic & PPL-Aware Approach
════════════════════════
𐀪 Author: Talha Nazeef Ahmed
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 10:20:37 GMT
════════════════════════
⌗ Tags: #windows_internals #reverse_engineering #infosec #cybersecurity #malware_analysis

Userland ALPC Enumeration: Dynamic & PPL-Aware Approach

Walking through ALPC from userland: avoiding hardcoded object indices, resolving query hangs, handling PPL boundries & verifying via…

8 views12:04

⤷ Title: Introduction to Section Headers and Sections (PE) — NIR(10)
════════════════════════
𐀪 Author: NIRVANA
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 06:26:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #malware #hacking #malware_development #windows_internals

Introduction to Section Headers and Sections (PE) — NIR(10)

In our previous blog, we explored the Optional Header and Data Directory in detail. Now, it’s time to move forward and dive into Section…

16 views08:04