Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: The Double-Edged Sword: Navigating the Intersection of Cybersecurity and Generative AI
════════════════════════
𐀪 Author: Akshat Ratanpal
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 03:32:29 GMT
════════════════════════
⌗ Tags: #information_security #ai #genai #cybersecurity
Medium
The Double-Edged Sword: Navigating the Intersection of Cybersecurity and Generative AI
The CISO’s Dilemma: Embracing AI While Bracing for Impact
15 views
Daily Writeups
⤷ Title: Implementasi Sederhana Snort untuk Deteksi Serangan XSS melalui payload
════════════════════════
𐀪 Author: Eilinafta Gita
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 03:17:27 GMT
════════════════════════
⌗ Tags: #ids_ips #cybersecurity #snort #ubuntu_20_04
Medium
Implementasi Sederhana Snort untuk Deteksi Serangan XSS melalui payload
Serangan XSS (Cross-Site Scripting) masih jadi salah satu vektor yang sering dipakai untuk menyisipkan skrip berbahaya ke halaman web…
21 views
Daily Writeups
⤷ Title: AppSec IR Writeup | TryHackMe
════════════════════════
𐀪 Author: Samuel McLamb
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 03:16:22 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cybercrime #cybersecurity #cyberattack #cyber
Medium
AppSec IR Writeup | TryHackMe
Table of Contents:
18 views
Daily Writeups
⤷ Title: Locked Out of the Future:
════════════════════════
𐀪 Author: Thomas Holt Russell, III
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 02:46:23 GMT
════════════════════════
⌗ Tags: #future_of_work #artificial_intelligence #cybersecurity #stem #education
Medium
Locked Out of the Future:
How Systemic Barriers and Apathy Are Leaving Black Students Behind in the Age of AI
18 views
Daily Writeups
⤷ Title: 5 Reasons MySQL Is No Longer Worth Using in 2025
════════════════════════
𐀪 Author: Rizqi Mulki
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 02:43:51 GMT
════════════════════════
⌗ Tags: #postgresql #cybersecurity #high_performance #information_technology #mysql
Medium
5 Reasons MySQL Is No Longer Worth Using in 2025
The database landscape has fundamentally shifted, and MySQL is being left behind. What was once the go-to choice for developers worldwide…
22 views
Daily Writeups
⤷ Title: Someone Actually Plagiarized Me
════════════════════════
𐀪 Author: Rich
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 02:46:20 GMT
════════════════════════
⌗ Tags: #copypaste #tryhackme_writeup #tryhackme_walkthrough #plagiarism #tryhackme
Medium
Someone Actually Plagiarized Me
Background
27 views
Daily Writeups
⤷ Title: Jangow: 1.0.1 — vulnhub
════════════════════════
𐀪 Author: satoshi_nakamura
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 03:22:13 GMT
════════════════════════
⌗ Tags: #vulnhub #jangow
Medium
Jangow: 1.0.1 — vulnhub
kt adonwload file ova nya dulu dan import di virtualbox atau vmware (atau hypervisor lainnya)
45 views
Daily Writeups
⤷ Title: SQL Injection — Retrieval of Hidden Data (Gabungan Burp Suite + XAMPP/phpMyAdmin + PortSwigger)
════════════════════════
𐀪 Author: Ressa_agustika
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 03:01:11 GMT
════════════════════════
⌗ Tags: #sql_injection #portswigger #burpsuite #xampp
Medium
SQL Injection — Retrieval of Hidden Data (Gabungan Burp Suite + XAMPP/phpMyAdmin + PortSwigger)
1. Ringkasan & Tujua
73 views
Daily Writeups
⤷ Title: 40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 10:30:00 +0530
════════════════════════
⌗ Tags: No_Tags
57 views
Daily Writeups
⤷ Title: Daily CyberSecurity Launches CVE Watchtower: Live Intelligence for a Faster Response
════════════════════════
𐀪 Author: ddos-admin
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 04:50:30 +0000
════════════════════════
⌗ Tags: #Announcement #CVE #CVE Watchtower
Daily CyberSecurity
Daily CyberSecurity Launches CVE Watchtower: Live Intelligence for a Faster Response
Introducing CVE Watchtower: your go-to service for real-time intelligence on security vulnerabilities in the cybersecurity landscape.
44 views
Daily Writeups
⤷ Title: Unmasking the DarkCloud: A New Stealer Is Hiding Malware in JPG Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 03:20:14 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #DarkCloud Stealer #Infostealer #malware #phishing #Process injection #steganography
Daily CyberSecurity
Unmasking the DarkCloud: A New Stealer Is Hiding Malware in JPG Files
A new report reveals a multi-stage phishing campaign distributing DarkCloud Stealer. The malware hides its loader in a JPG file and injects code into MSBuild.exe for stealth.
19 views
Daily Writeups
⤷ Title: CVE-2025-5821: Critical Authentication Bypass in WordPress Case Theme User Plugin Exploited in the Wild
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 02:35:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #admin account takeover #Authentication Bypass #Case Theme User #CVE_2025_5821 #CVSS 9.8 #cybersecurity #hacker attacks #Wordfence #WordPress Vulnerability
Daily CyberSecurity
CVE-2025-5821: Critical Authentication Bypass in WordPress Case Theme User Plugin Exploited in the Wild
A critical flaw in the Case Theme User WordPress plugin (CVSS 9.8) allows unauthenticated attackers to hijack admin accounts. The vulnerability is under active exploitation.
21 views
Daily Writeups
⤷ Title: HijackLoader: The Stealthy Malware Loader Powering Modern Cyberattacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 02:00:32 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #cybersecurity #evasion techniques #HijackLoader #Lumma Stealer #MaaS #malware loader #Malware_as_a_Service #Seqrite #threat intelligence
Daily CyberSecurity
HijackLoader: The Stealthy Malware Loader Powering Modern Cyberattacks
A new report reveals HijackLoader, a Malware-as-a-Service loader. It uses advanced evasion and anti-analysis techniques to deliver stealers and other payloads.
30 views
Daily Writeups
⤷ Title: Maranhão Stealer: A New Malware Hijacks Gamers’ PCs Through Pirated Games
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 01:53:31 +0000
════════════════════════
⌗ Tags: #Malware #Cybercrime #Cyble #gaming community #Infostealer #malware #Maranhão Stealer #pirated software #Reflective DLL Injection
Daily CyberSecurity
Maranhão Stealer: A New Malware Hijacks Gamers' PCs Through Pirated Games
A new report reveals Maranhão Stealer, a new malware targeting the gaming community through pirated software and cheats. It steals crypto, credentials, and data.
21 views
Daily Writeups
⤷ Title: Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 01:40:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@PreAuthorize #Authorization Bypass #CVE_2025_41248 #CVE_2025_41249 #method security #Spring Framework #Spring Security #Vulnerability
Daily CyberSecurity
Spring Framework and Spring Security Vulnerabilities Expose Authorization Bypass Risks (CVE-2025-41248 & CVE-2025-41249)
Two medium-severity flaws in Spring Security and the Spring Framework allow authorization bypasses in applications that use method-level security on generic types.
19 views
Daily Writeups
⤷ Title: PoC Published: Linux Kernel 0-Click RCE Vulnerability Found in ksmbd
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 00:15:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #0_click #CVE_2023_4130 #CVE_2023_52440 #cyber attack #Exploit #ksmbd #Linux Kernel #rce #smb #Vulnerability
Daily CyberSecurity
PoC Published: Linux Kernel 0-Click RCE Vulnerability Found in ksmbd
A new report details a 0-click RCE exploit chain in the Linux kernel's ksmbd module that allows an authenticated user to gain root access. A PoC has been published.
15 views
Daily Writeups
⤷ Title: Kimsuky Group Weaponizes AI Deepfakes in New Spear-Phishing Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 00:10:09 +0000
════════════════════════
⌗ Tags: #Cyber Security #AI deepfake #ChatGPT #Cyber Warfare #cyber_espionage #Genians Security Center #Kimsuky #North Korean hackers #spear_phishing
Daily CyberSecurity
Kimsuky Group Weaponizes AI Deepfakes in New Spear-Phishing Campaign
North Korean threat group Kimsuky is using AI-generated deepfakes in a new spear-phishing campaign, signaling a new frontier in cyber warfare.
17 views
Daily Writeups
⤷ Title: Yurei: The New Ransomware Group Using Open-Source Code to Target Businesses
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 00:06:38 +0000
════════════════════════
⌗ Tags: #Malware #Check Point Research #Cybercrime #Double Extortion #go #open_source malware #Prince ransomware #Yurei ransomware
Daily CyberSecurity
Yurei: The New Ransomware Group Using Open-Source Code to Target Businesses
A new ransomware group, Yurei, is using open-source malware to attack businesses in Asia and Africa. The group is using a double-extortion model to pressure victims.
14 views
Daily Writeups
⤷ Title: A Digital Trojan Horse: A New Campaign Is Using SEO to Deliver Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 00:01:20 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese_speaking users #Cybercrime #FortiGuard Labs #Hiddengh0st #malware #phishing #SEO Poisoning #Winos
Daily CyberSecurity
A Digital Trojan Horse: A New Campaign Is Using SEO to Deliver Malware
A new report reveals a malware campaign using SEO poisoning to target Chinese-speaking users. Attackers use fake software sites to deliver Hiddengh0st and Winos.
16 views
Daily Writeups
⤷ Title: Web shell upload via path traversal (Portswigger Lab Walkthrough)
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 04:53:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #portswigger #bug_bounty #web_app_security #hacking
Medium
Web shell upload via path traversal (Portswigger Lab Walkthrough)
From Upload Form to Shell
18 views
Daily Writeups
⤷ Title: TO BECOME A SOC EXPERT(DAY-4)
════════════════════════
𐀪 Author: vulnhunter
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 04:50:37 GMT
════════════════════════
⌗ Tags: #technology #social_media #bug_bounty #ethical_hacking #cybersecurity
Medium
TO BECOME A SOC EXPERT(DAY-4)
Day 4: Incident Response (IR) Workflow
20 views