Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Introducing the TOSS7 (An OWASP-like Top Ten for Tor Services)
════════════════════════
𐀪 Author: SirHaxAlot
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 01:07:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #tor #owasp #darkweb
22 views
Daily Writeups
⤷ Title: How I Achieved Unlimited AI Voice Generation for Free — A Reverse Engineering Case Study
════════════════════════
𐀪 Author: AYOUBSec
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 00:56:52 GMT
════════════════════════
⌗ Tags: #reverse_engineering #ethical_hacking
Medium
How I Achieved Unlimited AI Voice Generation for Free — A Reverse Engineering Case Study
Its a popular platfrom for ai tts and we,ll refer to it just as test for privacy ,It offers free credits to every new guest user Each…
26 views
Daily Writeups
⤷ Title: Memory Manipulation at the Assembly Level: The Dangerous Art of Reverse Engineering
════════════════════════
𐀪 Author: Bervice
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 00:00:52 GMT
════════════════════════
⌗ Tags: #reverse_engineering #assembly #bervice #security_research #ethical_hacking
Medium
Memory Manipulation at the Assembly Level: The Dangerous Art of Reverse Engineering
Manipulating memory at the assembly level is where software stops being abstract and becomes physical — registers, stacks, heaps, and raw…
37 views
Daily Writeups
⤷ Title: Get Paid: Your First Bug Bounty
════════════════════════
𐀪 Author: ToxSec
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 03:39:13 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #tech
Medium
Get Paid: Your First Bug Bounty
You’ve put in the hours, crushed the labs, and maybe earned a certification. You’ve picked a platform, like HackerOne, Bugcrowd, or…
36 views
Daily Writeups
⤷ Title: HackSmarter: Welcome
════════════════════════
𐀪 Author: Persecure
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 03:10:06 GMT
════════════════════════
⌗ Tags: #hacking #hack_smarter #ctf_writeup
Medium
HackSmarter: Welcome
Objective / Scope
28 views
Daily Writeups
⤷ Title: HTB Academy — Web Attacks: A Walkthrough of the Challenges (Part 3)
════════════════════════
𐀪 Author: BotsiCat
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 03:04:36 GMT
════════════════════════
⌗ Tags: #htb #htb_walkthrough #htb_academy #hacking #ethical_hacking
Medium
HTB Academy — Web Attacks: A Walkthrough of the Challenges (Part 3)
Good evening, everyone! I hope you’re all doing great and ready to wrap up the challenges from the Web Attacks study module today. Of…
21 views
Daily Writeups
⤷ Title: eJPT Lab Write-Up: Host & Network Penetration Testing: System-Host Based Attacks CTF 2
════════════════════════
𐀪 Author: Ninadkarkhanis
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 03:45:32 GMT
════════════════════════
⌗ Tags: #ejpt_exam_guide #cybersecurity #ejpt #ejptv2
Medium
eJPT Lab Write-Up: Host & Network Penetration Testing: System-Host Based Attacks CTF 2
This write-up covers the Host & Network Penetration Testing: System-Host Based Attacks CTF 2from the INE Penetration Testing Student…
18 views
Daily Writeups
⤷ Title: A bug Bounty Hunter’s Guide to Cloud Misconfiguration.
════════════════════════
𐀪 Author: ToxSec
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 03:39:29 GMT
════════════════════════
⌗ Tags: #bug_hunter #tech #bugs #cybersecurity
Medium
A bug Bounty Hunter’s Guide to Cloud Misconfiguration.
The Cloud as a Bounty Landscape
19 views
Daily Writeups
⤷ Title: How Amazon Disrupted APT29’s Watering-Hole Attack
════════════════════════
𐀪 Author: Deven Chhajed
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 03:31:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #microsoft365security #apt29 #watering_hole_attack #cloud_security
Medium
How Amazon Disrupted APT29’s Watering-Hole Attack
Cloud platforms are supposed to be safe harbors. Microsoft 365 is where businesses keep their email, files and collaboration tools. But…
16 views
Daily Writeups
⤷ Title: I found a VBS “prank” that actually fills your drives with junk files (Analysis of a 2000s…
════════════════════════
𐀪 Author: Harsh Raj Singhania
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 03:23:46 GMT
════════════════════════
⌗ Tags: #cybercrime #cybersecurity #cyber #malware #malware_analysis
Medium
I found a VBS “prank” that actually fills your drives with junk files (Analysis of a 2000s…
Okay so I found another ancient VBS sample and this one is wild. It pretends to be some kind of interactive genie that will reveal “the…
24 views
Daily Writeups
⤷ Title: hdfc bank se paise cut jaaye to kya karen 9238652455 एचडीएफसी बैंक से पैसे कट जाए तो क्या करें…
════════════════════════
𐀪 Author: एचडीएफसी बैंक से पैसे कट जाए तो क्या करें
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 02:48:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #climate_change #ios #bitcoin #future
Medium
hdfc bank se paise cut jaaye to kya karen 9238652455 एचडीएफसी बैंक से पैसे कट जाए तो क्या करें…
hdfc bank se paise cut jaaye to kya karen 9238652455 एचडीएफसी बैंक से पैसे कट जाए तो क्या करें 9238652455 अगर आपके HDFC …
23 views
Daily Writeups
⤷ Title: Chapter — 2.1
════════════════════════
𐀪 Author: Giri
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 02:46:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #blue_team #tcm_security
Medium
Chapter 2.1 — The Proactive Side of the Security Operations Center(SOC)
Exploring how SOC teams anticipate, hunt, and prevent cyber threats through intelligence, awareness, and vulnerability management.
27 views
Daily Writeups
⤷ Title: Golden Ticket Attack on Kerberos and Single Sign-On: Risks and How to Prevent It
════════════════════════
𐀪 Author: Isaac obune
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 02:42:38 GMT
════════════════════════
⌗ Tags: #active_directory #golden_ticket_attack #cybersecurity #single_sign_on #kerberos
Medium
Golden Ticket Attack on Kerberos and Single Sign-On: Risks and How to Prevent It
What Is a Golden Ticket Attack?
34 views
Daily Writeups
⤷ Title: Introducing the TOSS7 (An OWASP-like Reference for Tor Services)
════════════════════════
𐀪 Author: SirHaxAlot
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 01:57:09 GMT
════════════════════════
⌗ Tags: #tor_network #darkweb #ethical_hacking #owasp
Medium
Introducing the TOSS7 (An OWASP-like Reference for Tor Services)
Welcome to the Tor Onion Services Security 7
51 views
Daily Writeups
⤷ Title: Virtual Walls: Curly COMrades Hides Attacks in Hyper-V VMs to Evade Detection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:00:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Alpine Linux #Curly COMrades #cybersecurity #Evasion #Hyper_V #reverse shell #Threat Actors #Virtualization
Penetration Testing Tools
Virtual Walls: Curly COMrades Hides Attacks in Hyper-V VMs to Evade Detection
The Curly COMrades group uses Windows Hyper-V to create tiny, isolated Linux VMs for executing malware, bypassing native detection systems.
43 views
Daily Writeups
⤷ Title: Midnight Ransomware: Critical Flaw Found, Files Can Be Decrypted for Free
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:55:47 +0000
════════════════════════
⌗ Tags: #Malware #Babuk #cybersecurity #data recovery #Decryption Tool #encryption flaw #Gen Digital #Midnight #Norton #ransomware
Penetration Testing Tools
Midnight Ransomware: Critical Flaw Found, Files Can Be Decrypted for Free
Norton discovered a critical encryption flaw in the new Midnight ransomware, a Babuk variant. A free decryption tool is now available to recover lost files!
31 views
Daily Writeups
⤷ Title: US Congress’s Budget Office Breached: Foreign Hackers Hunt for Economic Secrets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:53:26 +0000
════════════════════════
⌗ Tags: #Cyber Security #CBO #Congress #cyberattack #cybersecurity #economic espionage #foreign actor #Government Breach #National Security #US policy
Penetration Testing Tools
US Congress's Budget Office Breached: Foreign Hackers Hunt for Economic Secrets
The Congressional Budget Office (CBO) confirms a suspected foreign cyberattack, raising fears that sensitive US economic forecasts and lawmaker communications were exposed.
15 views
Daily Writeups
⤷ Title: Extreme Deterrence: Singapore Approves Caning for Individuals Guilty of Internet Scamming
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:51:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Corporal Punishment #cybercrime #Extortion #Law #Money Laundering #regulation #Scamming #Singapore
Penetration Testing Tools
Extreme Deterrence: Singapore Approves Caning for Individuals Guilty of Internet Scamming
Singapore approved corporal punishment (caning) for individuals guilty of online scams and related money laundering, following a surge in fraud that caused $385M in losses.
12 views
Daily Writeups
⤷ Title: The $16 Billion Secret: Internal Docs Reveal Meta Profits Massively from Scam Ads
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:49:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Fraudulent Ads #Internal Documents #Meta #Profitability #regulation #revenue #Scam #SEC
Penetration Testing Tools
The $16 Billion Secret: Internal Docs Reveal Meta Profits Massively from Scam Ads
Internal Meta documents show the company projected $16B (10% of 2024 revenue) from scam ads. Reports reveal Meta chose profit over banning likely fraudsters.
11 views
Daily Writeups
⤷ Title: How a Simple SVG File Turned Into a Data Exfiltration Vector in an Invoice System
════════════════════════
𐀪 Author: Bytewreaker
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:59:08 GMT
════════════════════════
⌗ Tags: #bugs #bug_bounty_tips #bug_bounty_writeup #bug_bounty
Medium
How a Simple SVG File Turned Into a Data Exfiltration Vector in an Invoice System
In a recent security assessment, I stumbled upon a subtle yet impactful vulnerability involving SVG file uploads in an invoicing platform…
19 views
Daily Writeups
⤷ Title: Top Advanced XSS Payloads That Still Work in 2025
════════════════════════
𐀪 Author: Monu Jangra
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:44:34 GMT
════════════════════════
⌗ Tags: #xss_attack #bug_bounty #writing #cybersecurity #technology
Medium
Top Advanced XSS Payloads That Still Work in 2025
By Monu Jangra — Senior Security Researcher | LPT Master | CPENT | CEH
30 views