Daily Writeups
@Daily_Writeups
4.04K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.04K subscribers
Daily Writeups
⤷ Title: ChromeAlone: Stealthy Browser Implant Steals Sessions and Phishes for YubiKeys
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:59:35 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Browser Implant #ChromeAlone #Credential Theft #EDR Bypass #post_exploitation #Red Team Tool #SOCKS Proxy #WebAuthn Phishing
Penetration Testing Tools
ChromeAlone: Stealthy Browser Implant Steals Sessions and Phishes for YubiKeys
ChromeAlone is a stealthy browser implant providing EDR-resistant persistence, SOCKS proxying, session/credential theft, and WebAuthn phishing for security tokens.
25 views
Daily Writeups
⤷ Title: GoldFactory Malware Injects FriHook/SkyHook into Banking Apps to Exploit 11K SE Asia Users
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:55:06 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Abuse #Android #FriHook #Gigabud #GoldFactory #Group_IB #Mobile Banking Malware #phishing #SkyHook #Southeast Asia
Penetration Testing Tools
GoldFactory Malware Injects FriHook/SkyHook into Banking Apps to Exploit 11K SE Asia Users
The GoldFactory group has launched a new wave of attacks targeting mobile-banking users across Southeast Asia. Disguising themselves
❤1
19 views
Daily Writeups
⤷ Title: Record DDoS Attack: Cloudflare Mitigates Massive 29.7 Tbps Assault from AISURU Botnet
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:53:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AISURU Botnet #Cloudflare #cybersecurity #DDOS attack #network security #Q3 2025 #Tbps #UDP Flood
Penetration Testing Tools
Record DDoS Attack: Cloudflare Mitigates Massive 29.7 Tbps Assault from AISURU Botnet
The scale of DDoS attacks continues to surge at a breathtaking pace, and effective protection is increasingly defined
5 views
Daily Writeups
⤷ Title: Australia Enforces Nationwide Social Media Ban for Under-16s; YouTube & Lemon8 React
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:52:48 +0000
════════════════════════
⌗ Tags: #Technology #Age Verification #Anika Wells #Australia #Digital Regulation #eSafety Commission #Lemon8 #Social Media Ban #Under 16 #Youtube
Penetration Testing Tools
Australia Enforces Nationwide Social Media Ban for Under-16s; YouTube & Lemon8 React
Australia is preparing to enforce a nationwide ban on social media use by teenagers under 16, and major
9 views
Daily Writeups
⤷ Title: Microsoft Finally Patches LNK Flaw (CVE-2025-9491) Exploited by Spies Since 2017
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:49:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #0patch #CVE_2025_9491 #Espionage #LNK Flaw #Microsoft #Patch Tuesday #PlugX #windows #zero_day
Penetration Testing Tools
Microsoft Finally Patches LNK Flaw (CVE-2025-9491) Exploited by Spies Since 2017
Microsoft has quietly patched a long-standing flaw in Windows that had been exploited in real-world attacks for several
7 views
Daily Writeups
⤷ Title: Securus Trains AI on Years of Inmate Calls to Detect ‘Intent’ for Criminal Activity
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:45:55 +0000
════════════════════════
⌗ Tags: #Technology #AI Surveillance #Carceral Tech #Coerced Consent #FCC #Inmate Monitoring #Predictive Policing #Prison Calls #Securus Technologies #Worth Rises
Penetration Testing Tools
Securus Trains AI on Years of Inmate Calls to Detect 'Intent' for Criminal Activity
The American telecommunications firm Securus Technologies has trained a new AI model on years’ worth of recorded prison
11 views
Daily Writeups
⤷ Title: Policy U-Turn: India Drops Mandatory Sanchar Saathi App After Privacy Backlash
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:42:53 +0000
════════════════════════
⌗ Tags: #Technology #Apple #cybersecurity #IFF #India Government #Mandatory App #Policy Reversal #privacy #Sanchar Saathi #Surveillance
Penetration Testing Tools
Policy U-Turn: India Drops Mandatory Sanchar Saathi App After Privacy Backlash
Indian authorities have abandoned plans to compel smartphone manufacturers to pre-install the state-run “cybersecurity” application Sanchar Saathi on
10 views
Daily Writeups
⤷ Title: OpenAI ‘Garlic’ LLM: Secret Model Reportedly Beats Gemini 3 in Coding/Reasoning
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:37:31 +0000
════════════════════════
⌗ Tags: #Technology #AI Race #Anthropic Opus 4.5 #Coding Benchmarks #Garlic #Gemini 3 #GPT_5.2 #LLM #Mark Chen #OpenAI
Penetration Testing Tools
OpenAI 'Garlic' LLM: Secret Model Reportedly Beats Gemini 3 in Coding/Reasoning
Microsoft (MSFT) and its partner OpenAI are developing a new large-scale language model, Garlic, designed to strengthen the
9 views
Daily Writeups
⤷ Title: Linux 6.18 LTS: Rust-Based Android Binder Lands as bcachefs is Removed from Mainline
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:34:03 +0000
════════════════════════
⌗ Tags: #Linux #AMD #Arm Mali #Bcachefs #Binder #ExFAT #Hardware Support #kernel #Linux 6.18 #LTS #Nvidia #Rust #XFS
Penetration Testing Tools
Linux 6.18 LTS: Rust-Based Android Binder Lands as bcachefs is Removed from Mainline
Linux 6.18 is the final major release of 2025, and it is highly likely to become the next
7 views
Daily Writeups
⤷ Title: Bug Hunting: A Practical Guide to Finding Vulnerabilities That Actually Pay
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:26:22 GMT
════════════════════════
⌗ Tags: #programming #technology #bug_bounty #cybersecurity #penetration_testing
Medium
Bug Hunting: A Practical Guide to Finding Vulnerabilities That Actually Pay
A beginner-friendly breakdown of recon, payloads, and vulnerability discovery.
7 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via kid Header Path Traversal
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:09:35 GMT
════════════════════════
⌗ Tags: #authentication_bypass #jwt_authentication_bypass #bug_bounty #jwt_kid_vulnerability #path_traversal_exploit
Medium
JWT Authentication Bypass via kid Header Path Traversal
Understanding how insecure key lookups enable forged tokens and admin-level compromise.
14 views
Daily Writeups
⤷ Title: Tracking Hackers Online ️‍♂️: A Dark Web OSINT Story
════════════════════════
𐀪 Author: Vipul Sonule
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:09:26 GMT
════════════════════════
⌗ Tags: #programming #technology #cybersecurity #bug_bounty #ai
Medium
Tracking Hackers Online 🕵️‍♂️🌑: A Dark Web OSINT Story
Hi Vipul from The Hacker’s Log here — ready to take you inside the real world of cyber investigation.  Today, we’re going deep — into the…
7 views
Daily Writeups
⤷ Title: Free Linux hardening service
════════════════════════
𐀪 Author: ronin255
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:31:31 GMT
════════════════════════
⌗ Tags: #linux_server #hacking #web_server_hardening #linux_hardening
Medium
Free Linux Server hardening service
Linux, khususnya distribusi Ubuntu Server, adalah salah satu pilihan paling populer untuk membangun web server. Stabilitas, keamanan, dan…
12 views
Daily Writeups
⤷ Title: Tải Tiệm Lẩu Đường Hạnh Phúc Mod Apk (Vô Hạn Tiền, Kim Cương) V5.2.1
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 02:50:17 GMT
════════════════════════
⌗ Tags: #apkpure #games #hacking
Medium
Tải Tiệm Lẩu Đường Hạnh Phúc Mod Apk (Vô Hạn Tiền, Kim Cương) V5.2.1
Tiệm Lẩu Đường Hạnh Phúc là một trò chơi di động hấp dẫn, kết hợp giữa yếu tố quản lý thời gian và mô phỏng. Trong game, người chơi sẽ vào…
11 views
Daily Writeups
⤷ Title: How to Do Threat Modelling with STRIDE (Step by Step on a Simple Web App)
════════════════════════
𐀪 Author: Akshat Patel
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:55:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_hunting #ssdlc #threat_modeling #threat_intelligence
Medium
How to Do Threat Modelling with STRIDE (Step by Step on a Simple Web App)
This is my first time doing practical threat modelling on a (toy) system end-to-end. It’s not a production app, but it was enough to make…
10 views
Daily Writeups
⤷ Title: 94 Percent of LLMs Shown to Be Vulnerable to Attack
════════════════════════
𐀪 Author: Matthew.Rosenquist
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:45:07 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #research #llm #cybersecurity #ai_security
Medium
94 Percent of LLMs Shown to Be Vulnerable to Attack
The unfortunate truth is that poorly designed and improperly secured Artificial Intelligence integrations can be misused or exploited by…
7 views
Daily Writeups
⤷ Title: From Code to Defense: My First Steps into Cybersecurity as a .NET/Java Developer
════════════════════════
𐀪 Author: Barbaros Emre Alagöz
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:40:04 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_development #test_automation
Medium
From Code to Defense: My First Steps into Cybersecurity as a .NET/Java Developer
Over the last weeks I’ve been moving from “just writing code” into thinking like a defender.
7 views
Daily Writeups
⤷ Title: HashJack: The Hidden URL Trick That Manipulates AI Browsers
════════════════════════
𐀪 Author: Deven Chhajed
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:32:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #ai_security #browser_security #hashjack #llm_security
Medium
HashJack: The Hidden URL Trick That Manipulates AI Browsers
Artificial intelligence in the browser was supposed to be the upgrade we all wanted. A built-in assistant that reads pages for us, extracts…
15 views
Daily Writeups
⤷ Title: The OSINT Mindset, Thinking Like an Investigator
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:09:20 GMT
════════════════════════
⌗ Tags: #critical_thinking #cybersecurity #investing #osint #digital_detective
Medium
The OSINT Mindset, Thinking Like an Investigator
It’s Not About the Tools, It’s About the Questions You Ask Before You Search.
10 views
Daily Writeups
⤷ Title: Cybersecurity: ความจริงที่ SME มองข้ามไม่ได้อีกต่อไป และวิธีที่ Krungsri Business Online Mobile…
════════════════════════
𐀪 Author: Krungsri Nimble
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:02:12 GMT
════════════════════════
⌗ Tags: #cybersecurity #krungsri_nimble #trust #small_business
Medium
🔐 Cybersecurity: ความจริงที่ SME มองข้ามไม่ได้อีกต่อไป และวิธีที่ Krungsri Business Online Mobile เปลี่ยนเกมความปลอดภัยให้ธุรกิจไทย
มีข้อมูลหนึ่งที่น่าตกใจ แต่สะท้อนสถานการณ์จริงของ SME ไทยในปีนี้อย่างชัดเจน:
14 views
Daily Writeups
⤷ Title: Cicada — HTB Walkthrough | From Enumeration to PrivEsc with SeBackupPrivilege (Smart Path)
════════════════════════
𐀪 Author: Xploitnik
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 02:25:12 GMT
════════════════════════
⌗ Tags: #htb #penetration_testing #ctf #windows #cybersecurity
Medium
🐞 Cicada — HTB Walkthrough | From Enumeration to PrivEsc with SeBackupPrivilege (Smart Path)
This is a focused, methodical walkthrough of the Cicada machine from Hack The Box, highlighting real-world attacker behavior, clean…
21 views