Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: From Infostealer to Full RAT: Huntress Uncovers a Multi-Stage Malware Attack Deploying PureRAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:13:27 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #DLL Sideloading #Huntress #Infostealer #malware #persistence #PureRAT #PXA Stealer #rat #Remote Access Trojan
Daily CyberSecurity
From Infostealer to Full RAT: Huntress Uncovers a Multi-Stage Malware Attack Deploying PureRAT
Huntress details a multi-stage attack that uses DLL sideloading and obfuscated Python to deliver PureRAT, a commercial-grade remote access trojan linked to PXA Stealer.
17 views
Daily Writeups
⤷ Title: XCSSET macOS Malware Evolves: New Variant Targets Firefox, Hijacks Clipboard for Crypto Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:10:32 +0000
════════════════════════
⌗ Tags: #Malware #Clipboard Hijacking #Crypto theft #cybersecurity #data exfiltration #macOS Malware #supply chain attack #Xcode #XCSSET
Daily CyberSecurity
XCSSET macOS Malware Evolves: New Variant Targets Firefox, Hijacks Clipboard for Crypto Theft
A new XCSSET variant targets macOS developers by infecting Xcode projects. It now steals Firefox data, hijacks clipboards for crypto theft, and enhances its persistence.
16 views
Daily Writeups
⤷ Title: Morte Botnet Unveiled: A Rapidly Growing Loader-as-a-Service Campaign Exploiting Routers and Enterprise Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:05:46 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CloudSEK #Command Injection #cryptomining #Enterprise Security #IOT #Morte Botnet #SOHO Routers
Daily CyberSecurity
Morte Botnet Unveiled: A Rapidly Growing Loader-as-a-Service Campaign Exploiting Routers and Enterprise Apps
A new Morte botnet campaign is exploiting command injection flaws to hijack SOHO routers and enterprise apps. The Loader-as-a-Service model saw a 230% spike this summer.
14 views
Daily Writeups
⤷ Title: DLL Hijacking Flaw (CVE-2025-56383) Found in Notepad++, Allowing Arbitrary Code Execution, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:02:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Code Execution #CVE_2025_56383 #DLL hijacking #notepad++ #PoC #security #Vulnerability
17 views
Daily Writeups
⤷ Title: Russia-Linked COLDRIVER Group Expands Toolset, Using New Malware in ClickFix Espionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:00:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #BAITSWITCH #ClickFix #COLDRIVER #Espionage #russia #SIMPLEFIX #Star Blizzard #Zscaler
Daily CyberSecurity
Russia-Linked COLDRIVER Group Expands Toolset, Using New Malware in ClickFix Espionage Campaign
Russia-linked APT COLDRIVER is using a new multi-stage malware campaign (BAITSWITCH/SIMPLEFIX) with a ClickFix lure to target journalists and activists for espionage.
15 views
Daily Writeups
⤷ Title: HackTheBox - Nineveh
════════════════════════
𐀪 Author: jniket
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 01:31:06 GMT
════════════════════════
⌗ Tags: #linux #hacking #cybersecurity #penetration_testing #hackthebox
Medium
HackTheBox - Nineveh
Summary
10 views
Daily Writeups
⤷ Title: How I Cracked a CTF Challenge Using Only Pandas and Regex
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:17:45 GMT
════════════════════════
⌗ Tags: #hacking #pandas #automation #cybersecurity #ctf
Medium
How I Cracked a CTF Challenge Using Only Pandas and Regex
When Fancy Tools Fail, Sometimes Text Processing Is Enough
10 views
Daily Writeups
⤷ Title: OSINT: The Internet of Bodies — A Target Centric Approach
════════════════════════
𐀪 Author: VEEXH
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:08:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #shodan #osint #medical_devices #hacking
Medium
OSINT: The Internet of Bodies — A Target Centric Approach
TOPICS
13 views
Daily Writeups
⤷ Title: How a Deepfake Cyber Attack Cost a Small Business $45,000 in 2025
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:07:48 GMT
════════════════════════
⌗ Tags: #deepfakes #cybersecurity #hacking #artificial_intelligence #small_business
Medium
How a Deepfake Cyber Attack Cost a Small Business $45,000 in 2025
Deepfake scams, AI malware, and business email compromise are no longer sci-fi — they’re draining small businesses today.
17 views
Daily Writeups
⤷ Title: CyberDefenders: Lockdown Lab
════════════════════════
𐀪 Author: Rahaliashraf
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:02:09 GMT
════════════════════════
⌗ Tags: #incident_response #hacking #blue_team #cybersecurity #malware
Medium
CyberDefenders: Lockdown Lab
Forensic Deep Dive: Unraveling the Lockdown Intrusion at TechNova Systems
15 views
Daily Writeups
⤷ Title: Smarter Pentesting: How AI Shapes NucAIScan v1.2
════════════════════════
𐀪 Author: Onurcan Genç
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 01:37:32 GMT
════════════════════════
⌗ Tags: #nucleus #artificial_intelligence #cybersecurity #openai #pentesting
Medium
Smarter Pentesting: How AI Shapes NucAIScan v1.2
An AI-assisted pipeline that reduces 8,000+ templates into focused, actionable scans — faster and cleaner AppSec testing.
14 views
Daily Writeups
⤷ Title: Evaluating Potential Cybersecurity Threats of Advanced AI
════════════════════════
𐀪 Author: Synbit.7
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 01:32:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #ai
Medium
Evaluating Potential Cybersecurity Threats of Advanced AI
AI in Cybersecurity: A Double-Edge Sword
10 views
Daily Writeups
⤷ Title: Summary on Theoretical Study on Noise Model Improvements for Privacy Amplification in…
════════════════════════
𐀪 Author: Okai Tettey-Antie Samuel(OTAS)
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 01:16:59 GMT
════════════════════════
⌗ Tags: #quantum_computing #information_security #quantum_physics #cybersecurity #information_technology
Medium
Summary on Theoretical Study on Noise Model Improvements for Privacy Amplification in…
This study adopted a purely simulation-based methodology to investigate and improve the efficiency of privacy amplification techniques…
9 views
Daily Writeups
⤷ Title: Building a Honeypot in Microsoft Azure: A Hands-On Cloud Security Project
════════════════════════
𐀪 Author: Eugene Radcliff II
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 01:04:47 GMT
════════════════════════
⌗ Tags: #siem #log_analysis #azure #sentinel #cybersecurity
Medium
Building a Honeypot in Microsoft Azure: A Hands-On Cloud Security Project
Honeypots are a fascinating way to study real-world attack behavior. By intentionally deploying a vulnerable system and monitoring it, you…
11 views
Daily Writeups
⤷ Title: What is a Network Topology? (Explained Like You’re Five… But Cooler)
════════════════════════
𐀪 Author: Araiz Naqvi
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:59:59 GMT
════════════════════════
⌗ Tags: #networking #cloud_security #cloud_computing #cybersecurity #security
Medium
What is a Network Topology? (Explained Like You’re Five… But Cooler)
So, we just learned what a network is. Great. But here’s the next question: how are those networks actually arranged? That’s where…
11 views
Daily Writeups
⤷ Title: What is Monero (XMR)? A Complete Guide to Privacy-Focused Cryptocurrency in 2025
════════════════════════
𐀪 Author: Daisypto
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:48:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #cryptocurrency #monero #blockchain #crypto
Medium
What is Monero (XMR)? A Complete Guide to Privacy-Focused Cryptocurrency in 2025
Monero ($XMR) stands out in the cryptocurrency world for its strong emphasis on user privacy. Unlike many digital currencies that leave a…
13 views
Daily Writeups
⤷ Title: Deploying an AI Honeypot with Beelzebub + OpenAI: Smarter Traps for Smarter Attackers
════════════════════════
𐀪 Author: SOCFortress
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:45:08 GMT
════════════════════════
⌗ Tags: #socfortress #cybersecurity #security #information_security #open_source
Medium
Deploying an AI Honeypot with Beelzebub + OpenAI: Smarter Traps for Smarter Attackers
What if your honeypot could talk back?
25 views
Daily Writeups
⤷ Title: Exploring the Splunk AI Toolkit (f.k.a
════════════════════════
𐀪 Author: Grotti
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:31:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #splunk #ai #coding #machine_learning
Medium
Exploring the Splunk AI Toolkit (f.k.a Splunk Machine Learning Toolkit): Outlier Detection in Application Requests
Splunk is well known for its powerful search capabilities and data analytics features. But what many practitioners don’t realize is that…
18 views
Daily Writeups
⤷ Title: Ask the Librarian: Search-Engine Dorking as a Visibility Tool
════════════════════════
𐀪 Author: Dzianis Skliar
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:17:21 GMT
════════════════════════
⌗ Tags: #osint #threat_intelligence #penetration_testing #bugb #google_dork
Medium
Ask the Librarian: Search-Engine Dorking as a Visibility Tool
Search engines are massive public databases. Imagine knowing how to query them so you can extract the valuable signals that help you…
26 views
Daily Writeups
⤷ Title: How to Get Started with CTFs (For Absolute Beginners)
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:08:14 GMT
════════════════════════
⌗ Tags: #learning_through_doing #cybersecurity #ethical_hacking #ctf #penetration_testing
Medium
How to Get Started with CTFs (For Absolute Beginners)
That Time I Spent Six Hours on a “Five-Minute” Challenge
31 views
Daily Writeups
⤷ Title: GoAnywhere MFT Zero-Day Actively Exploited for Days Before Patch Release
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 03:58:15 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_10035 #cybersecurity #Deserialization #Fortra #GoAnywhere MFT #remote code execution #WatchTowr #zero_day
Penetration Testing Tools
GoAnywhere MFT Zero-Day Actively Exploited for Days Before Patch Release
A critical flaw in GoAnywhere MFT was actively exploited for days before Fortra issued a patch. Attackers gained unauthenticated RCE and created a backdoor.
29 views