Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: BFLA (API5–2023): Complete Guide to Detecting, Exploiting, and Reporting Broken Function Level…
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 00:02:28 GMT
════════════════════════
⌗ Tags: #hacking #technology #bug_bounty #cybersecurity #api
Medium
BFLA (API5–2023): Complete Guide to Detecting, Exploiting, and Reporting Broken Function Level Authorization
Learn about the BFLA (API5–2023) vulnerability, how to exploit API privilege escalation, and the master guide for reporting it.
18 views
Daily Writeups
⤷ Title: 2025’s Most Bizarre Cyberattack Started With a Coffee Mug Warmer. What Happened Next Was Chaos
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:31:30 GMT
════════════════════════
⌗ Tags: #hacking #technology #malware #small_business #cybersecurity
Medium
2025’s Most Bizarre Cyberattack Started With a Coffee Mug Warmer. What Happened Next Was Chaos
How a hidden Bluetooth vulnerability triggered a cross-platform malware outbreak that shut down a small business — and what every company…
14 views
Daily Writeups
⤷ Title: NCL [Hard] Password Challenge: Disney Characters and Advanced Wordreaper Techniques
════════════════════════
𐀪 Author: Nemorous
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:19:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_scraping_tools #password_cracking #hacking #ctf
Medium
NCL [Hard] Password Challenge: Disney Characters and Advanced Wordreaper Techniques
Ahh… the hard password challenges. Where Hashcat slowly eats away at your soul, and the electricity bill arrives with a condolence card…
9 views
Daily Writeups
⤷ Title: 5 Ways You Can Get Hacked, and How to Avoid Each One
════════════════════════
𐀪 Author: CiberEdu
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:09:15 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #hacking #cyberattack #cybercrime
Medium
5 Ways You Can Get Hacked, and How to Avoid Each One
We tend to imagine hackers as hoodie-wearing geniuses typing at lightspeed in a dark room, but in reality Most hacks don’t require elite…
9 views
Daily Writeups
⤷ Title: TheHarvester in Hacking | Find Emails, Domains & Targets Fast!
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:31:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #osint #theharvester
Medium
TheHarvester in Hacking | Find Emails, Domains & Targets Fast!
Simple Tool Became My Secret Weapon for Cracking Tough Cases
16 views
Daily Writeups
⤷ Title: From College Dorms to Red Team Powerhouse, The FourCore Journey
════════════════════════
𐀪 Author: Cyber Unbound
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:27:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_intelligence #startups_in_india #entrepreneurship #technology
Medium
From College Dorms to Red Team Powerhouse, The FourCore Journey
FourCore started in a college dorm room during the pandemic and has since grown into a cutting-edge red teaming platform trusted by…
16 views
Daily Writeups
⤷ Title: Why I Switched to Arch Linux: A Developer’s Perspective
════════════════════════
𐀪 Author: Murat Kurkoglu
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:06:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #engineering #arch_linux #tiling_window_manager
Medium
Why I Switched to Arch Linux: A Developer’s Perspective
I left stable distros for Arch Linux. Here is how building my OS from scratch taught me more about Linux internals than any textbook.
11 views
Daily Writeups
⤷ Title: Testing Registry Persistence Detection: When Rules Exist But Never Fire
════════════════════════
𐀪 Author: Raynard Waits
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:02:10 GMT
════════════════════════
⌗ Tags: #soc_analyst #soc_analyst_training #homelab #blue_team #cybersecurity
Medium
Testing Registry Persistence Detection: When Rules Exist But Never Fire
After discovering that reconnaissance commands had spotty detection in my previous tests, I expected persistence mechanisms to fare better…
12 views
Daily Writeups
⤷ Title: Static Routing vs. OSPF — A Hands-On Comparison in My CCNA Lab
════════════════════════
𐀪 Author: Jahson Jno-Baptiste
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 00:45:07 GMT
════════════════════════
⌗ Tags: #homelab #cisco #ccna #networking #cybersecurity
Medium
🚦 Static Routing vs. OSPF — A Hands-On Comparison in My CCNA Lab
I spent today working through a routing lab in GNS3 where I compared static routing and OSPF (Open Shortest Path First) across a small…
19 views
Daily Writeups
⤷ Title: What is the difference between authentication and authorization?
════════════════════════
𐀪 Author: Deon Orina
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 00:32:21 GMT
════════════════════════
⌗ Tags: #tech #cybersecurity #database #web_development #technology
Medium
What is the difference between authentication and authorization?
Photo by Markus Spiske on Unsplash
28 views
Daily Writeups
⤷ Title: MyTown Media Solutions — Full Network Deployment (Capstone Project)
════════════════════════
𐀪 Author: Jahson Jno-Baptiste
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 00:16:34 GMT
════════════════════════
⌗ Tags: #networking #cisco #ccna #homelab #cybersecurity
Medium
MyTown Media Solutions — Full Network Deployment (Capstone Project)
Designed and Implemented by JB
15 views
Daily Writeups
⤷ Title: X de Elon Musk presenta una función de ubicación real para combatir las cuentas falsas y la…
════════════════════════
𐀪 Author: Sherlock
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:53:20 GMT
════════════════════════
⌗ Tags: #elon_musk #chatgpt #xs
Medium
X de Elon Musk presenta una función de ubicación real para combatir las cuentas falsas y la…
Elon Musk revoluciona el panorama de las redes sociales una vez más con la última actualización de su plataforma, X. La nueva función "…
23 views
Daily Writeups
⤷ Title: DCOMRunAs: Covert Technique for Remote Code Execution in a Logged-on Session
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:31:40 +0000
════════════════════════
⌗ Tags: #Open Source Tool #DCOM #DCOMRunAs #DLL hijacking #Lateral Movement #post_exploitation #remote code execution #Windows Security
Penetration Testing Tools
DCOMRunAs: Covert Technique for Remote Code Execution in a Logged-on Session
DCOMRunAs is a covert technique that exploits DCOM and DLL hijacking to execute payloads in the context of a remote, logged-on user's session without new process creation.
15 views
Daily Writeups
⤷ Title: GTA VI ‘Leaks’ Go Viral: Users Mistake AI-Generated Gameplay for Real Footage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:22:24 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Generation #Fake Leak #Gaming News #Generative Content #Grand Theft Auto #GTA VI #Rockstar Games #Social media
Penetration Testing Tools
GTA VI 'Leaks' Go Viral: Users Mistake AI-Generated Gameplay for Real Footage
A fresh controversy has unfolded on platform X around the long-awaited Grand Theft Auto VI — users spent
12 views
Daily Writeups
⤷ Title: 1,000+ Amazon Employees Sign Open Letter Against ‘Aggressive’ AI Strategy
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:18:13 +0000
════════════════════════
⌗ Tags: #Technology #AI Dissent #Amazon #Climate Justice #data centers #Employee Activism #Generative AI #layoffs #Tech Ethics
Penetration Testing Tools
1,000+ Amazon Employees Sign Open Letter Against 'Aggressive' AI Strategy
Amazon is facing a new wave of internal dissent over its rapid embrace of artificial intelligence. The group
11 views
Daily Writeups
⤷ Title: Scattered Lapsus$ Hunters Attack Zendesk Users with 40+ Fake SSO Phishing Portals
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:17:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Customer Support #phishing #ReliaQuest #Scattered LapSus Hunters #SSO #supply chain attack #Typosquatting #Zendesk
Penetration Testing Tools
Scattered Lapsus$ Hunters Attack Zendesk Users with 40+ Fake SSO Phishing Portals
ReliaQuest specialists have uncovered more than forty fraudulent domains masquerading as Zendesk portals, attributing them to the cyber-criminal
10 views
Daily Writeups
⤷ Title: AI Flunks Security Test: LLMs are Ineffective at Guessing Passwords from Personal Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:14:25 +0000
════════════════════════
⌗ Tags: #Information Security #Adversarial AI #AI security #Cyber Security #Falcon #Flan_T5 #LLaMA #LLM #password guessing #research
Penetration Testing Tools
AI Flunks Security Test: LLMs are Ineffective at Guessing Passwords from Personal Data
Australian researchers have tested whether large language models can infer passwords from personal information — and found that,
4 views
Daily Writeups
⤷ Title: Tomiris APT Infiltrates Governments Via Phishing, Uses Telegram/Discord for C2 Espionage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:10:48 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #CIS #Cyber Espionage #Discord C2 #kaspersky #phishing #reverse shell #Russia #Telegram C2 #Tomiris
Penetration Testing Tools
Tomiris APT Infiltrates Governments Via Phishing, Uses Telegram/Discord for C2 Espionage
The Tomiris group launched a new wave of cyber-espionage in early 2025, targeting high-level political and diplomatic institutions.
10 views
Daily Writeups
⤷ Title: OpenAI Users Warned of Phishing Risk After Mixpanel Analytics Provider Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:08:27 +0000
════════════════════════
⌗ Tags: #Data Leak #Analytics Leak #API Users #data breach #Mixpanel #OpenAI #Phishing Risk #security incident #Third_Party Vendor
Penetration Testing Tools
OpenAI Users Warned of Phishing Risk After Mixpanel Analytics Provider Breach
OpenAI has disclosed a security incident at the third-party web-analytics provider Mixpanel that affected a subset of users
9 views
Daily Writeups
⤷ Title: Microsoft Entra ID to Block All Third-Party Scripts on Login Page via Strict CSP
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:07:00 +0000
════════════════════════
⌗ Tags: #Microsoft #Authentication #Azure AD #Content Security Policy #CSP #Microsoft Entra ID #Secure Future Initiative #security update #XSS Attack
Penetration Testing Tools
Microsoft Entra ID to Block All Third-Party Scripts on Login Page via Strict CSP
Microsoft is tightening the security of Microsoft Entra ID sign-ins, planning to block all third-party script execution on
9 views
Daily Writeups
⤷ Title: Apple Podcasts Auto-Launch Flaw Exposes Users to XSS Attacks via Malicious Shows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:04:39 +0000
════════════════════════
⌗ Tags: #Apple #Vulnerability #Apple Podcasts #Auto Launch #Cross_Site Scripting #ios #macos #Remote Delivery #security flaw #XSS Attack
Penetration Testing Tools
Apple Podcasts Auto-Launch Flaw Exposes Users to XSS Attacks via Malicious Shows
Apple Podcasts has begun launching itself spontaneously, displaying peculiar religious and “educational” programs and, in some cases, directing
13 views