Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: TryHackMe: SOC Role in Blue Team
════════════════════════
𐀪 Author: Kc
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 06:32:56 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #soc_role_in_blue_team #thm_soc_level_1_path #tryhackme_walkthrough
Medium
TryHackMe: SOC Role in Blue Team
Task 1: Introduction
27 views
Daily Writeups
⤷ Title: Padelify
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 06:15:46 GMT
════════════════════════
⌗ Tags: #web_application_security #tryhackme_walkthrough #ctf_writeup #tryhackme_writeup #tryhackme
Medium
Padelify
Use red-teaming techniques to bypass the WAF and obtain admin access to the web application.
43 views
Daily Writeups
Forwarded from Bug Bounty Diary
Blog | Mirzadzare (Spix0r)
OAuth Vulnerabilities in Desktop Apps
Security flaw in desktop app OAuth allows account takeover with malicious links. Understand attack steps, why it works, and fix strategies
I just published my first write-up on Hashnode:

From "Log in with OAuth" to "Your Account Is Mine" – Desktop App Edition

This article is based on a recent OAuth vulnerability I discovered. I have requested permission to disclose the full report, but it hasn’t been approved yet. Once I get the green light, I will attach my proof of concept (PoC) and the full report.

I hope you enjoy it! ❤️‍🔥🙌
41 views
Daily Writeups
⤷ Title: New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 14:15:00 +0530
════════════════════════
⌗ Tags: No_Tags
41 views
Daily Writeups
⤷ Title: Kevin Lancaster Joins the usecure Board to Accelerate North American Channel Growth
════════════════════════
𐀪 Author: CyberNewswire
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 08:01:11 +0000
════════════════════════
⌗ Tags: #Press Release #MSP
Hackread
Kevin Lancaster Joins the usecure Board to Accelerate North American Channel Growth
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
27 views
Daily Writeups
⤷ Title: Boot Process Compromised: Critical Flaw (CVE-2025-47372) Hits Snapdragon 8 Gen 3 & 5G Modems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:33:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #CVE_2025_47372 #cybersecurity #Firmware Vulnerability #mobile security #Qualcomm #Snapdragon
Daily CyberSecurity
Boot Process Compromised: Critical Flaw (CVE-2025-47372) Hits Snapdragon 8 Gen 3 & 5G Modems
A critical boot flaw (CVE-2025-47372) exposes Snapdragon 8 Gen 3 and 5G modems to attack. Qualcomm's December update fixes 11 issues. Patch now.
18 views
Daily Writeups
⤷ Title: Kevin Lancaster Joins the usecure Board to Accelerate North American Channel Growth
════════════════════════
𐀪 Author: cybernewswire
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 08:00:18 +0000
════════════════════════
⌗ Tags: #Press Release
Daily CyberSecurity
Kevin Lancaster Joins the usecure Board to Accelerate North American Channel Growth
Claymont, Delaware, 1st December 2025, CyberNewsWire
15 views
Daily Writeups
⤷ Title: PoC Exploit Releases for CVE-2025-60718 – Windows Administrator Protection Elevation of Privilege Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 07:45:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #DLL hijacking #Microsoft Patch #privilege escalation #Windows Security
Daily CyberSecurity
PoC Exploit Releases for CVE-2025-60718 - Windows Administrator Protection Elevation of Privilege Vulnerability
CVE-2025-60718 lets attackers hijack Windows Administrator Protection to gain full control. Learn how the "Shadow Admin" exploit works.
16 views
Daily Writeups
⤷ Title: Bug Bounty Hunters: Use Plain Text Leaks To Turn Recon Into High-Impact Reports
════════════════════════
𐀪 Author: Alexandre Vandamme
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:02:17 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #infosec #bug_bounty_tips #cybersecurity
Medium
Bug Bounty Hunters: Use Plain Text Leaks To Turn Recon Into High-Impact Reports
You do not need heavy scans to find impact. If a target’s domain appears in plain text leaks, you already have a strong, real world problem…
13 views
Daily Writeups
⤷ Title: VirusTotal Tehdit İstihbaratıyla Gözlemlenebilirliğinizi Zenginleştirin
════════════════════════
𐀪 Author: Perform Yazılım
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 08:51:33 GMT
════════════════════════
⌗ Tags: #dynatrace #virustotal #application_security
Medium
VirusTotal Tehdit İstihbaratıyla Gözlemlenebilirliğinizi Zenginleştirin
Dynatrace Uygulamaları ile Kolay VirusTotal Entegrasyonu
10 views
Daily Writeups
⤷ Title: CVE-2025–64446 | The FortiWeb Vulnerability Everyone Slept On
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:20:10 GMT
════════════════════════
⌗ Tags: #hacking #fortinet #firewall #cve #infosec
Medium
CVE-2025–64446 | The FortiWeb Vulnerability Everyone Slept On
When security teams think edge device compromise, they usually imagine firewalls, VPN appliances, or exposed RDP endpoints. What they…
13 views
Daily Writeups
⤷ Title: Did OpenAI leak your data…?
════════════════════════
𐀪 Author: Swetha
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:17:12 GMT
════════════════════════
⌗ Tags: #data_science #openai #cybersecurity #hacking
Medium
Did OpenAI leak your data…?
OpenAI faced data breach in Nov 2025. A hacker targeted smishing attack against Mixpanel.
11 views
Daily Writeups
⤷ Title: Portswigger : Authentication vulnerabilities
════════════════════════
𐀪 Author: Songül Kızılay Özügürler
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 08:44:25 GMT
════════════════════════
⌗ Tags: #hacking #ctf_writeup #ctf_walkthrough #pentesting #ctf
Medium
Portswigger : Authentication vulnerabilities
Parola Sıfırlama İşlemleri
16 views
Daily Writeups
⤷ Title: Enumeration as a Graph: How a Different Recon Mindset Took Me From “Found X Vuln” to Full Root…
════════════════════════
𐀪 Author: Tauseef Ahmed
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 08:15:39 GMT
════════════════════════
⌗ Tags: #penetration_testing #reconnaissance #enumeration #hacking #pentest_reporting
Medium
Enumeration as a Graph: How a Different Recon Mindset Took Me From “Found X Vuln” to Full Root Compromise
Enum is not stacking info, rather connecting the dots
7 views
Daily Writeups
⤷ Title: Practical Approach to What You Need to Know About the SHA1-Hulud Supply Chain Attack
════════════════════════
𐀪 Author: Harsh Kahate
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:53:36 GMT
════════════════════════
⌗ Tags: #hacking #shai_hulud #supply_chain_security #cybersecurity #information_security
Medium
Practical Approach to What You Need to Know About the SHA1-Hulud Supply Chain Attack
Section 1 — Executive Summary (Non-Technical)
9 views
Daily Writeups
⤷ Title: How to Hide Your IP Address Online (And Why an Antidetect Browser Makes It Easier)
════════════════════════
𐀪 Author: Anna Kolodkina
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:48:45 GMT
════════════════════════
⌗ Tags: #hide_ip_addres #cybersecurity #antidetect_browser
Medium
How to Hide Your IP Address Online (And Why an Antidetect Browser Makes It Easier)
15 views
Daily Writeups
⤷ Title: Your Beginner’s Guide To Hardware Hacking: Tools, Techniques & Where to Start
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:34:39 GMT
════════════════════════
⌗ Tags: #hardware_hacking #ethical_hacking #hacking_tools #electronics #cybersecurity
Medium
Your Beginner’s Guide To Hardware Hacking: Tools, Techniques & Where to Start
Have you ever cracked open an old gadget just to see what was inside — only to close it back up because everything looked a little too……
11 views
Daily Writeups
⤷ Title: The Fatal Flaw in Your Cybersecurity GTM Strategy
════════════════════════
𐀪 Author: Dan Schoenbaum
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:33:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #founders #marketing #growth_hacking #female_founders
Medium
The Fatal Flaw in Your Cybersecurity GTM Strategy
Why trying to sell to everyone guarantees you’ll succeed with no one
18 views
Daily Writeups
⤷ Title: ShaShai-Hulud 2.0 Alert: The “Scorched Earth” npm Worm
════════════════════════
𐀪 Author: Ajanaku Temitope
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:29:16 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #cyberattack #articles #shai_hulud
Medium
ShaShai-Hulud 2.0 Alert: The “Scorched Earth” npm Worm
If you thought the initial supply chain attacks of September 2025 were a headache, the landscape just shifted dramatically.
20 views
Daily Writeups
⤷ Title: The rhyming ‘master key’ that breaks AI safety
════════════════════════
𐀪 Author: George Hopkin
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 09:06:01 GMT
════════════════════════
⌗ Tags: #technology #cybersecurity #ai #artificial_intelligence #technews
Medium
The rhyming ‘master key’ that breaks AI safety
TL;DR: Researchers discover that “adversarial poetry” acts as a universal master key to defeat AI safety filters, while Warner Music Group…
21 views
Daily Writeups
⤷ Title: RST TI Report Digest: 01 Dec 2025
════════════════════════
𐀪 Author: RST Cloud
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 08:56:00 GMT
════════════════════════
⌗ Tags: #threat_intelligence #cyber_threat_intelligence #cybersecurity #ti_report_digest
Medium
RST TI Report Digest: 01 Dec 2025
We processed 50 threat intelligence articles that we collected last week and are sharing a short summary of 10 of them with IoCs.
33 views