Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: How Amazon Disrupted APT29’s Watering-Hole Attack
════════════════════════
𐀪 Author: Deven Chhajed
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 03:31:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #microsoft365security #apt29 #watering_hole_attack #cloud_security
Medium
How Amazon Disrupted APT29’s Watering-Hole Attack
Cloud platforms are supposed to be safe harbors. Microsoft 365 is where businesses keep their email, files and collaboration tools. But…
16 views
Daily Writeups
⤷ Title: I found a VBS “prank” that actually fills your drives with junk files (Analysis of a 2000s…
════════════════════════
𐀪 Author: Harsh Raj Singhania
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 03:23:46 GMT
════════════════════════
⌗ Tags: #cybercrime #cybersecurity #cyber #malware #malware_analysis
Medium
I found a VBS “prank” that actually fills your drives with junk files (Analysis of a 2000s…
Okay so I found another ancient VBS sample and this one is wild. It pretends to be some kind of interactive genie that will reveal “the…
24 views
Daily Writeups
⤷ Title: hdfc bank se paise cut jaaye to kya karen 9238652455 एचडीएफसी बैंक से पैसे कट जाए तो क्या करें…
════════════════════════
𐀪 Author: एचडीएफसी बैंक से पैसे कट जाए तो क्या करें
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 02:48:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #climate_change #ios #bitcoin #future
Medium
hdfc bank se paise cut jaaye to kya karen 9238652455 एचडीएफसी बैंक से पैसे कट जाए तो क्या करें…
hdfc bank se paise cut jaaye to kya karen 9238652455 एचडीएफसी बैंक से पैसे कट जाए तो क्या करें 9238652455 अगर आपके HDFC …
23 views
Daily Writeups
⤷ Title: Chapter — 2.1
════════════════════════
𐀪 Author: Giri
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 02:46:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #blue_team #tcm_security
Medium
Chapter 2.1 — The Proactive Side of the Security Operations Center(SOC)
Exploring how SOC teams anticipate, hunt, and prevent cyber threats through intelligence, awareness, and vulnerability management.
27 views
Daily Writeups
⤷ Title: Golden Ticket Attack on Kerberos and Single Sign-On: Risks and How to Prevent It
════════════════════════
𐀪 Author: Isaac obune
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 02:42:38 GMT
════════════════════════
⌗ Tags: #active_directory #golden_ticket_attack #cybersecurity #single_sign_on #kerberos
Medium
Golden Ticket Attack on Kerberos and Single Sign-On: Risks and How to Prevent It
What Is a Golden Ticket Attack?
34 views
Daily Writeups
⤷ Title: Introducing the TOSS7 (An OWASP-like Reference for Tor Services)
════════════════════════
𐀪 Author: SirHaxAlot
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 01:57:09 GMT
════════════════════════
⌗ Tags: #tor_network #darkweb #ethical_hacking #owasp
Medium
Introducing the TOSS7 (An OWASP-like Reference for Tor Services)
Welcome to the Tor Onion Services Security 7
51 views
Daily Writeups
⤷ Title: Virtual Walls: Curly COMrades Hides Attacks in Hyper-V VMs to Evade Detection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:00:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Alpine Linux #Curly COMrades #cybersecurity #Evasion #Hyper_V #reverse shell #Threat Actors #Virtualization
Penetration Testing Tools
Virtual Walls: Curly COMrades Hides Attacks in Hyper-V VMs to Evade Detection
The Curly COMrades group uses Windows Hyper-V to create tiny, isolated Linux VMs for executing malware, bypassing native detection systems.
43 views
Daily Writeups
⤷ Title: Midnight Ransomware: Critical Flaw Found, Files Can Be Decrypted for Free
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:55:47 +0000
════════════════════════
⌗ Tags: #Malware #Babuk #cybersecurity #data recovery #Decryption Tool #encryption flaw #Gen Digital #Midnight #Norton #ransomware
Penetration Testing Tools
Midnight Ransomware: Critical Flaw Found, Files Can Be Decrypted for Free
Norton discovered a critical encryption flaw in the new Midnight ransomware, a Babuk variant. A free decryption tool is now available to recover lost files!
31 views
Daily Writeups
⤷ Title: US Congress’s Budget Office Breached: Foreign Hackers Hunt for Economic Secrets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:53:26 +0000
════════════════════════
⌗ Tags: #Cyber Security #CBO #Congress #cyberattack #cybersecurity #economic espionage #foreign actor #Government Breach #National Security #US policy
Penetration Testing Tools
US Congress's Budget Office Breached: Foreign Hackers Hunt for Economic Secrets
The Congressional Budget Office (CBO) confirms a suspected foreign cyberattack, raising fears that sensitive US economic forecasts and lawmaker communications were exposed.
15 views
Daily Writeups
⤷ Title: Extreme Deterrence: Singapore Approves Caning for Individuals Guilty of Internet Scamming
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:51:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Corporal Punishment #cybercrime #Extortion #Law #Money Laundering #regulation #Scamming #Singapore
Penetration Testing Tools
Extreme Deterrence: Singapore Approves Caning for Individuals Guilty of Internet Scamming
Singapore approved corporal punishment (caning) for individuals guilty of online scams and related money laundering, following a surge in fraud that caused $385M in losses.
12 views
Daily Writeups
⤷ Title: The $16 Billion Secret: Internal Docs Reveal Meta Profits Massively from Scam Ads
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:49:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Fraudulent Ads #Internal Documents #Meta #Profitability #regulation #revenue #Scam #SEC
Penetration Testing Tools
The $16 Billion Secret: Internal Docs Reveal Meta Profits Massively from Scam Ads
Internal Meta documents show the company projected $16B (10% of 2024 revenue) from scam ads. Reports reveal Meta chose profit over banning likely fraudsters.
11 views
Daily Writeups
⤷ Title: How a Simple SVG File Turned Into a Data Exfiltration Vector in an Invoice System
════════════════════════
𐀪 Author: Bytewreaker
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:59:08 GMT
════════════════════════
⌗ Tags: #bugs #bug_bounty_tips #bug_bounty_writeup #bug_bounty
Medium
How a Simple SVG File Turned Into a Data Exfiltration Vector in an Invoice System
In a recent security assessment, I stumbled upon a subtle yet impactful vulnerability involving SVG file uploads in an invoicing platform…
19 views
Daily Writeups
⤷ Title: Top Advanced XSS Payloads That Still Work in 2025
════════════════════════
𐀪 Author: Monu Jangra
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:44:34 GMT
════════════════════════
⌗ Tags: #xss_attack #bug_bounty #writing #cybersecurity #technology
Medium
Top Advanced XSS Payloads That Still Work in 2025
By Monu Jangra — Senior Security Researcher | LPT Master | CPENT | CEH
30 views
Daily Writeups
⤷ Title: The Most Overlooked Bug Bounty Misconfiguration (Add This To Your Checklist)
════════════════════════
𐀪 Author: Rehan Sohail
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 04:07:15 GMT
════════════════════════
⌗ Tags: #bug_bounty_hunter #bug_bounty_tips #bug_bounty #activated_thinker #bug_bounty_writeup
Medium
The Most Overlooked Bug Bounty Misconfiguration (Add This To Your Checklist)
The most straightforward yet so neglected misconfiguration
21 views
Daily Writeups
⤷ Title: Elevating Movement TryHackMe Walkthrough | Privilege Escalation & RDP Analysis
════════════════════════
𐀪 Author: Visir
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:43:27 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #windows #elevating_movement #cybersecurity
Medium
Elevating Movement TryHackMe Walkthrough | Privilege Escalation & RDP Analysis
The second machine in the network: Windows investigation segment.
18 views
Daily Writeups
⤷ Title: eBPF for LLM and AI Agent Tracing: The Future of Non-Invasive Observability?
════════════════════════
𐀪 Author: Thiwanka Chameera Jayasiri
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:31:19 GMT
════════════════════════
⌗ Tags: #llm_applications #genai #cybersecurity #ai #ai_security
Medium
eBPF for LLM and AI Agent Tracing: The Future of Non-Invasive Observability?
I. The Observability Imperative for Next-Generation AI Workloads
23 views
Daily Writeups
⤷ Title: The Convergence of AI, Data Science, and Cybersecurity: Building Next Frontier of Digital Defense
════════════════════════
𐀪 Author: Bonuke Vincent
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:24:05 GMT
════════════════════════
⌗ Tags: #data_science #cybersecurity #emerging_threats #ict_security #smart_algorithms
Medium
The Convergence of AI, Data Science, and Cybersecurity: Building Next Frontier of Digital Defense
In today’s world of hyperconnectivity, it is the confluence of data science, and cybersecurity that will shape how organizations protect t
44 views
Daily Writeups
⤷ Title: Real-World OWASP Example in a MERN App — Broken Access Control Explained
════════════════════════
𐀪 Author: Faisal Mahamud
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 04:27:30 GMT
════════════════════════
⌗ Tags: #access_control #mern_stack #owasp #cybersecurity
Medium
Real-World OWASP Example in a MERN App — Broken Access Control Explained
When developers talk about web security, most focus on authentication — logging in users, managing tokens, and hashing passwords.  But the…
52 views
Daily Writeups
⤷ Title: Radio on Vinyl: Cyberattack Cripples Dutch Broadcaster RTV Noord, Forcing Manual Operation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:28:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #broadcasting disruption #cyberattack #Digital Security #Infrastructure #media #Netherlands #radio #RTV Noord #television
Penetration Testing Tools
Radio on Vinyl: Cyberattack Cripples Dutch Broadcaster RTV Noord, Forcing Manual Operation
A large-scale cyberattack crippled Dutch broadcaster RTV Noord's digital infrastructure, forcing staff to run a radio show manually. Investigation is ongoing.
58 views
Daily Writeups
⤷ Title: Exposed: X’s Algorithm Found to Heavily Favor Right-Wing Views in UK Politics
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:27:04 +0000
════════════════════════
⌗ Tags: #Technology #algorithmic bias #Elon Musk #Online Safety Act #political polarization #right_wing content #Sky News investigation #UK Politics #X (Twitter)
Penetration Testing Tools
Exposed: X's Algorithm Found to Heavily Favor Right-Wing Views in UK Politics
A Sky News investigation reveals X's algorithm heavily promotes right-wing and radical political content in the UK, deepening polarization and sparking democratic fears.
27 views
Daily Writeups
⤷ Title: Ransomware ‘Fakeout’? Apache OpenOffice Disputes Akira’s 23GB Data Theft Claim
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:24:57 +0000
════════════════════════
⌗ Tags: #Malware #Akira Ransomware #Apache OpenOffice #Apache Software Foundation #cyberattack #data breach #security #volunteer project
Penetration Testing Tools
Ransomware 'Fakeout'? Apache OpenOffice Disputes Akira's 23GB Data Theft Claim
The Apache Software Foundation strongly disputes the Akira ransomware group's claim of stealing 23GB of OpenOffice data, citing inconsistencies with the project's volunteer structure.
19 views