Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: 30 Days of Red Team: Day 10 — Building Custom C2 Infrastructure (Your Lifeline to Compromised…
════════════════════════
𐀪 Author: Maxwell Cross
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 23:29:02 GMT
════════════════════════
⌗ Tags: #linux #python #cybersecurity #windows #red_team
Medium
30 Days of Red Team: Day 10 — Building Custom C2 Infrastructure (Your Lifeline to Compromised Systems)
Welcome to Day 10. You’ve spent two days mastering persistence — Windows registry keys, scheduled tasks, services, WMI subscriptions, cron…
10 views
Daily Writeups
⤷ Title: Personal Incident Response Plan Using the NIST Framework
════════════════════════
𐀪 Author: Anderson Santos
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 23:12:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #framework #nist #digital_forensics #technology
Medium
Personal Incident Response Plan Using the NIST Framework
Cybersecurity and digital forensics rely heavily on incident response, as it enables both people and organizations to deal with, lessen…
14 views
Daily Writeups
⤷ Title: Building the Invisible Wind Tunnel
════════════════════════
𐀪 Author: Timothy D. Harmon, CISSP
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 22:29:08 GMT
════════════════════════
⌗ Tags: #alteryx #python #formula_1 #cybersecurity #data_science
Medium
Building the Invisible Wind Tunnel
A Technical Guide to Simulating Cyber-Physical Threats with Python, FastF1, and a Digital Twin
9 views
Daily Writeups
⤷ Title: How I Found a Critical Vulnerability in a Major Streaming Platform (And What It Teaches Us About…
════════════════════════
𐀪 Author: Tyreek Haynes
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 22:01:14 GMT
════════════════════════
⌗ Tags: #case_study #cybersecurity #vulnerability #web_development #xss_vulnerability
Medium
How I Found a Critical Vulnerability in a Major Streaming Platform (And What It Teaches Us About Web Security)
From a Simple Curiosity to a Multi-Vector Attack
11 views
Daily Writeups
⤷ Title: Explaining the Risk: How AI Tools Pose a Threat
════════════════════════
𐀪 Author: IT_Engineer
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 21:58:15 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #small_business #cyber_threat #ai_tools
Medium
Explaining the Risk: How AI Tools Pose a Threat
Artificial intelligence is revolutionizing how organizations operate, boosting efficiency, automation, and decision-making speed. However…
13 views
Daily Writeups
⤷ Title: A Researcher’s Reflection on Identifying a Vulnerability in a Crypto Platform
════════════════════════
𐀪 Author: Tyreek Haynes
════════════════════════
ⴵ Time: Wed, 26 Nov 2025 00:22:41 GMT
════════════════════════
⌗ Tags: #infosec #vulnerability #cybersecurity #privacy #xss_vulnerability
Medium
A Researcher’s Reflection on Identifying a Vulnerability in a Crypto Platform
Recently, I spent five focused hours analyzing the merchant portal of a major cryptocurrency brand — a platform known for its tight…
21 views
Daily Writeups
⤷ Title: BFLA (API5–2023): Guía Completa de Detección, Explotación y Reporte de Broken Function Level…
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 00:02:10 GMT
════════════════════════
⌗ Tags: #hacking #technology #bug_bounty #api #cybersecurity
Medium
BFLA (API5–2023): Guía Completa de Detección, Explotación y Reporte de Broken Function Level Authorization
Descubre qué es la vulnerabilidad BFLA (API5–2023), cómo explotar la escalada de privilegios en APIs y la guía maestra para reportarla.
11 views
Daily Writeups
⤷ Title: How OCDP by Open Code Mission Changes the Red Team Playbook
════════════════════════
𐀪 Author: Graham dePenros
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 01:39:18 GMT
════════════════════════
⌗ Tags: #merkle_root #data_management_inversion #red_team #blackhat #hacking
Medium
How OCDP by Open Code Mission Changes the Red Team Playbook
Most red teams quietly depend on the same weak target: mutable logs and data stores that accept tampering as a fact of life.
9 views
Daily Writeups
⤷ Title: Mustacchio writeup — TryHackMe
════════════════════════
𐀪 Author: 0xH1S
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 00:53:33 GMT
════════════════════════
⌗ Tags: #hacking #ctf #tryhackme #ctf_writeup #tryhackme_walkthrough
Medium
Mustacchio writeup — TryHackMe
Writeup of the “Mustacchio” machine of tryhackme
7 views
Daily Writeups
⤷ Title: ️‍♂️ MAC Spoofing: The Danger Behind Network Identity
════════════════════════
𐀪 Author: Wesley Santos
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 00:51:09 GMT
════════════════════════
⌗ Tags: #networking #cybersecurity #hacking #tryhackme #mac_spoofing
Medium
🕵️‍♂️ MAC Spoofing: The Danger Behind Network Identity
This article is based on a TryHackMe lab that demonstrates a crucial concept in networking and security: MAC Spoofing. Understanding how…
10 views
Daily Writeups
⤷ Title: Wireshark for Pentesting — The Complete Practical Guide
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 00:27:01 GMT
════════════════════════
⌗ Tags: #ethical_hacking #linux #network_security #hacking #cybersecurity
Medium
Wireshark for Pentesting — The Complete Practical Guide
By ghostyjoe
 Updated for 2025 | Works on Kali Linux, Parrot OS, Ubuntu, Debian
9 views
Daily Writeups
⤷ Title: Shadow AI: The Enterprise Security Crisis Nobody Is Prepared For
════════════════════════
𐀪 Author: Irgyagentaarnezzi
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 01:33:51 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #data_privacy #cybersecurity #enterprise_software #generative_ai_tools
Medium
Shadow AI: The Enterprise Security Crisis Nobody Is Prepared For
The alert came in at 2:47 PM. Samsung Electronics had a problem — a big one. Over the course of three weeks, employees across the company…
13 views
Daily Writeups
⤷ Title: What I Learned From a Popular Hardware Trojan Survey
════════════════════════
𐀪 Author: Surabhi Misra
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 01:13:09 GMT
════════════════════════
⌗ Tags: #semiconductors #cybersecurity #computer_hardware #research #hardware_security
Medium
What I Learned From a Popular Hardware Trojan Survey
A Beginner-Friendly Guide
9 views
Daily Writeups
⤷ Title: Complete OSINT Roadmap (Beginner → Expert)
════════════════════════
𐀪 Author: Engr. Md. Hasan Monsur
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 00:27:54 GMT
════════════════════════
⌗ Tags: #osint #open_source #programming #cybersecurity #osint_investigation
Medium
Complete OSINT Roadmap (Beginner → Expert)
Follow the complete OSINT roadmap from beginner to expert and learn how to master open-source intelligence step by step. This guide shows…
17 views
Daily Writeups
⤷ Title: HealthGPT - TryHackme Walkthrough
════════════════════════
𐀪 Author: Gustavo Henrique
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 00:11:42 GMT
════════════════════════
⌗ Tags: #pentester_labs #tryhackme #tryhackme_walkthrough #cybersecurity #pentester
Medium
HealthGPT - TryHackme Walkthrough
Conecte-se comigo no LinkedIn: https://linkedin.com/in/gustavo-henrique-gds
26 views
Daily Writeups
⤷ Title: TryHackMe BankGPT — Easy Challenge — Writeup | by P4NTHR
════════════════════════
𐀪 Author: P4NTHR
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 00:30:46 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #ai
Medium
TryHackMe BankGPT — Easy Challenge — Writeup | by P4NTHR
How I Found The Secret Key
20 views
Daily Writeups
⤷ Title: RedExt: New Red Team Tool Uses Chrome Extension for Covert Browser Data Exfiltration
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 02:04:35 +0000
════════════════════════
⌗ Tags: #Open Source Tool #browser data #Chrome extension #Cybersecurity Tool #Flask C2 #Manifest V3 #post_exploitation #Red Team #RedExt
Penetration Testing Tools
RedExt: New Red Team Tool Uses Chrome Extension for Covert Browser Data Exfiltration
RedExt is a new red team framework using a Manifest V3 Chrome extension and a Flask C2 server to covertly exfiltrate and analyze comprehensive browser data for operations.
20 views
Daily Writeups
⤷ Title: Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 02:00:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BlindEagle #CVE_2024_43451 #CVE_2025_33073 #Head Mare #infosec #kaspersky #NTLM #privilege escalation
Daily CyberSecurity
Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025
Kaspersky reveals critical NTLM flaws active in 2025. Attackers use "clickless" exploits like CVE-2024-43451 to steal credentials and gain SYSTEM privileges.
21 views
Daily Writeups
⤷ Title: Silent Threat: How Malicious Calendars & ‘Promptware’ Target 4M+ Devices Daily
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 01:52:12 +0000
════════════════════════
⌗ Tags: #Malware #AI security #Bitsight TRACE #Calendar Phishing #iOS security #mobile security #Prompt injection #Promptware #social engineering
Daily CyberSecurity
Silent Threat: How Malicious Calendars & 'Promptware' Target 4M+ Devices Daily
Bitsight TRACE exposes a massive calendar phishing network targeting 4M+ devices. Learn how "Promptware" exploits AI assistants via malicious calendar events.
16 views
Daily Writeups
⤷ Title: The “Korean Leaks” Siege: Qilin & North Korea Cripple Financial Sector via MSP Hack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 00:01:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender #cyber_espionage #Financial Sector #Korean Leaks #Moonstone Sleet #MSP Compromise #Qilin #ransomware #south korea #supply chain attack
Daily CyberSecurity
The "Korean Leaks" Siege: Qilin & North Korea Cripple Financial Sector via MSP Hack
Qilin & North Korean hackers launch "Korean Leaks," a massive supply chain attack on South Korea's financial sector via a compromised MSP.
12 views
Daily Writeups
⤷ Title: IDN Homograph attack
════════════════════════
𐀪 Author: L0da
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 02:15:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity
Medium
IDN Homograph attack
Today I’m sharing my old notes on IDN Homograph attacks. Really sneaky technique…
12 views