Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Golden Ticket Attack on Kerberos and Single Sign-On: Risks and How to Prevent It
════════════════════════
𐀪 Author: Isaac obune
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 02:42:38 GMT
════════════════════════
⌗ Tags: #active_directory #golden_ticket_attack #cybersecurity #single_sign_on #kerberos
Medium
Golden Ticket Attack on Kerberos and Single Sign-On: Risks and How to Prevent It
What Is a Golden Ticket Attack?
34 views
Daily Writeups
⤷ Title: Introducing the TOSS7 (An OWASP-like Reference for Tor Services)
════════════════════════
𐀪 Author: SirHaxAlot
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 01:57:09 GMT
════════════════════════
⌗ Tags: #tor_network #darkweb #ethical_hacking #owasp
Medium
Introducing the TOSS7 (An OWASP-like Reference for Tor Services)
Welcome to the Tor Onion Services Security 7
51 views
Daily Writeups
⤷ Title: Virtual Walls: Curly COMrades Hides Attacks in Hyper-V VMs to Evade Detection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:00:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Alpine Linux #Curly COMrades #cybersecurity #Evasion #Hyper_V #reverse shell #Threat Actors #Virtualization
Penetration Testing Tools
Virtual Walls: Curly COMrades Hides Attacks in Hyper-V VMs to Evade Detection
The Curly COMrades group uses Windows Hyper-V to create tiny, isolated Linux VMs for executing malware, bypassing native detection systems.
43 views
Daily Writeups
⤷ Title: Midnight Ransomware: Critical Flaw Found, Files Can Be Decrypted for Free
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:55:47 +0000
════════════════════════
⌗ Tags: #Malware #Babuk #cybersecurity #data recovery #Decryption Tool #encryption flaw #Gen Digital #Midnight #Norton #ransomware
Penetration Testing Tools
Midnight Ransomware: Critical Flaw Found, Files Can Be Decrypted for Free
Norton discovered a critical encryption flaw in the new Midnight ransomware, a Babuk variant. A free decryption tool is now available to recover lost files!
31 views
Daily Writeups
⤷ Title: US Congress’s Budget Office Breached: Foreign Hackers Hunt for Economic Secrets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:53:26 +0000
════════════════════════
⌗ Tags: #Cyber Security #CBO #Congress #cyberattack #cybersecurity #economic espionage #foreign actor #Government Breach #National Security #US policy
Penetration Testing Tools
US Congress's Budget Office Breached: Foreign Hackers Hunt for Economic Secrets
The Congressional Budget Office (CBO) confirms a suspected foreign cyberattack, raising fears that sensitive US economic forecasts and lawmaker communications were exposed.
15 views
Daily Writeups
⤷ Title: Extreme Deterrence: Singapore Approves Caning for Individuals Guilty of Internet Scamming
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:51:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Corporal Punishment #cybercrime #Extortion #Law #Money Laundering #regulation #Scamming #Singapore
Penetration Testing Tools
Extreme Deterrence: Singapore Approves Caning for Individuals Guilty of Internet Scamming
Singapore approved corporal punishment (caning) for individuals guilty of online scams and related money laundering, following a surge in fraud that caused $385M in losses.
12 views
Daily Writeups
⤷ Title: The $16 Billion Secret: Internal Docs Reveal Meta Profits Massively from Scam Ads
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:49:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Fraudulent Ads #Internal Documents #Meta #Profitability #regulation #revenue #Scam #SEC
Penetration Testing Tools
The $16 Billion Secret: Internal Docs Reveal Meta Profits Massively from Scam Ads
Internal Meta documents show the company projected $16B (10% of 2024 revenue) from scam ads. Reports reveal Meta chose profit over banning likely fraudsters.
11 views
Daily Writeups
⤷ Title: How a Simple SVG File Turned Into a Data Exfiltration Vector in an Invoice System
════════════════════════
𐀪 Author: Bytewreaker
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:59:08 GMT
════════════════════════
⌗ Tags: #bugs #bug_bounty_tips #bug_bounty_writeup #bug_bounty
Medium
How a Simple SVG File Turned Into a Data Exfiltration Vector in an Invoice System
In a recent security assessment, I stumbled upon a subtle yet impactful vulnerability involving SVG file uploads in an invoicing platform…
19 views
Daily Writeups
⤷ Title: Top Advanced XSS Payloads That Still Work in 2025
════════════════════════
𐀪 Author: Monu Jangra
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:44:34 GMT
════════════════════════
⌗ Tags: #xss_attack #bug_bounty #writing #cybersecurity #technology
Medium
Top Advanced XSS Payloads That Still Work in 2025
By Monu Jangra — Senior Security Researcher | LPT Master | CPENT | CEH
30 views
Daily Writeups
⤷ Title: The Most Overlooked Bug Bounty Misconfiguration (Add This To Your Checklist)
════════════════════════
𐀪 Author: Rehan Sohail
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 04:07:15 GMT
════════════════════════
⌗ Tags: #bug_bounty_hunter #bug_bounty_tips #bug_bounty #activated_thinker #bug_bounty_writeup
Medium
The Most Overlooked Bug Bounty Misconfiguration (Add This To Your Checklist)
The most straightforward yet so neglected misconfiguration
21 views
Daily Writeups
⤷ Title: Elevating Movement TryHackMe Walkthrough | Privilege Escalation & RDP Analysis
════════════════════════
𐀪 Author: Visir
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:43:27 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme_walkthrough #windows #elevating_movement #cybersecurity
Medium
Elevating Movement TryHackMe Walkthrough | Privilege Escalation & RDP Analysis
The second machine in the network: Windows investigation segment.
18 views
Daily Writeups
⤷ Title: eBPF for LLM and AI Agent Tracing: The Future of Non-Invasive Observability?
════════════════════════
𐀪 Author: Thiwanka Chameera Jayasiri
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:31:19 GMT
════════════════════════
⌗ Tags: #llm_applications #genai #cybersecurity #ai #ai_security
Medium
eBPF for LLM and AI Agent Tracing: The Future of Non-Invasive Observability?
I. The Observability Imperative for Next-Generation AI Workloads
23 views
Daily Writeups
⤷ Title: The Convergence of AI, Data Science, and Cybersecurity: Building Next Frontier of Digital Defense
════════════════════════
𐀪 Author: Bonuke Vincent
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 05:24:05 GMT
════════════════════════
⌗ Tags: #data_science #cybersecurity #emerging_threats #ict_security #smart_algorithms
Medium
The Convergence of AI, Data Science, and Cybersecurity: Building Next Frontier of Digital Defense
In today’s world of hyperconnectivity, it is the confluence of data science, and cybersecurity that will shape how organizations protect t
44 views
Daily Writeups
⤷ Title: Real-World OWASP Example in a MERN App — Broken Access Control Explained
════════════════════════
𐀪 Author: Faisal Mahamud
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 04:27:30 GMT
════════════════════════
⌗ Tags: #access_control #mern_stack #owasp #cybersecurity
Medium
Real-World OWASP Example in a MERN App — Broken Access Control Explained
When developers talk about web security, most focus on authentication — logging in users, managing tokens, and hashing passwords.  But the…
52 views
Daily Writeups
⤷ Title: Radio on Vinyl: Cyberattack Cripples Dutch Broadcaster RTV Noord, Forcing Manual Operation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:28:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #broadcasting disruption #cyberattack #Digital Security #Infrastructure #media #Netherlands #radio #RTV Noord #television
Penetration Testing Tools
Radio on Vinyl: Cyberattack Cripples Dutch Broadcaster RTV Noord, Forcing Manual Operation
A large-scale cyberattack crippled Dutch broadcaster RTV Noord's digital infrastructure, forcing staff to run a radio show manually. Investigation is ongoing.
58 views
Daily Writeups
⤷ Title: Exposed: X’s Algorithm Found to Heavily Favor Right-Wing Views in UK Politics
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:27:04 +0000
════════════════════════
⌗ Tags: #Technology #algorithmic bias #Elon Musk #Online Safety Act #political polarization #right_wing content #Sky News investigation #UK Politics #X (Twitter)
Penetration Testing Tools
Exposed: X's Algorithm Found to Heavily Favor Right-Wing Views in UK Politics
A Sky News investigation reveals X's algorithm heavily promotes right-wing and radical political content in the UK, deepening polarization and sparking democratic fears.
27 views
Daily Writeups
⤷ Title: Ransomware ‘Fakeout’? Apache OpenOffice Disputes Akira’s 23GB Data Theft Claim
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:24:57 +0000
════════════════════════
⌗ Tags: #Malware #Akira Ransomware #Apache OpenOffice #Apache Software Foundation #cyberattack #data breach #security #volunteer project
Penetration Testing Tools
Ransomware 'Fakeout'? Apache OpenOffice Disputes Akira's 23GB Data Theft Claim
The Apache Software Foundation strongly disputes the Akira ransomware group's claim of stealing 23GB of OpenOffice data, citing inconsistencies with the project's volunteer structure.
19 views
Daily Writeups
⤷ Title: FreeBSD Joins the Container Club: OCI Standard Officially Adds the New Platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:15:14 +0000
════════════════════════
⌗ Tags: #Linux #Cloud Computing #containerization #Containers #Docker Hub #FreeBSD #Kubernetes #OCI #OCI Runtime Specification
Penetration Testing Tools
FreeBSD Joins the Container Club: OCI Standard Officially Adds the New Platform
The OCI Runtime Specification v1.3 now officially includes FreeBSD, cementing its status as a first-class platform for modern container and cloud workloads.
19 views
Daily Writeups
⤷ Title: Tanzania’s Blackout: Internet Shutdown Coincides with Violence and Disputed Election
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:08:30 +0000
════════════════════════
⌗ Tags: #Technology #Censorship #elections #free speech #internet shutdown #NetBlocks #political unrest #Samia Suluhu Hassan #Tanzania
Penetration Testing Tools
Tanzania's Blackout: Internet Shutdown Coincides with Violence and Disputed Election
Tanzania cut its internet for five days during disputed elections marked by mass protests and violence. Connectivity is restored, but social media remains restricted.
13 views
Daily Writeups
⤷ Title: Critical Flaws in Microsoft Teams Let Hackers Impersonate CEOs and Edit Messages Undetected
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:03:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #Check Point #corporate messenger #CVE_2024_38197 #Impersonation #Microsoft Teams #Social Engineering #vulnerabilities
Penetration Testing Tools
Critical Flaws in Microsoft Teams Let Hackers Impersonate CEOs and Edit Messages Undetected
Four critical Microsoft Teams flaws allowed attackers to impersonate executives, spoof calls, and secretly alter messages, turning trust into a new target.
23 views
Daily Writeups
⤷ Title: Botnet Beats Big Tech: Aisuru Overtakes Google in Cloudflare’s Popularity Ranking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:01:33 +0000
════════════════════════
⌗ Tags: #Malware #AISURU #BOTNET #Cloudflare #cybercrime #DDoS #DNS Attack #domain ranking #IoT #network security
Penetration Testing Tools
Botnet Beats Big Tech: Aisuru Overtakes Google in Cloudflare's Popularity Ranking
The Aisuru botnet, built from compromised IoT devices, unexpectedly topped Cloudflare's domain ranking, exploiting a flaw to launch a DNS-layer attack.
13 views