Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: I Blocked Them, But They Could Still See Me: A Simple Privacy Logic Flaw
════════════════════════
𐀪 Author: default_0x
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 01:42:19 GMT
════════════════════════
⌗ Tags: #bug_bounty #tips #pentesting #logic_flaw #infosecurity
Medium
I Blocked Them, But They Could Still See Me: A Simple Privacy Logic Flaw
In the world of bug hunting, we often go looking for complex “movie-style” hacks. But sometimes, the most impactful bugs are just simple…
22 views
Daily Writeups
⤷ Title: Exploiting WebSocket Information Disclosure to Achieve Account Deletion (IDOR)
════════════════════════
𐀪 Author: Waleed Osama
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 01:38:29 GMT
════════════════════════
⌗ Tags: #web_development #idor #hacking #bug_bounty #websocket
Medium
Exploiting WebSocket Information Disclosure to Achieve Account Deletion (IDOR)
🔍 Quick Overview
26 views
Daily Writeups
⤷ Title: Natal de 1994: IP Spoofing e o nascimento de um mito
════════════════════════
𐀪 Author: Giuliano Cardozo
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 01:47:10 GMT
════════════════════════
⌗ Tags: #history #kevin_mitnick #tsutomu_shimomura #hacking
Medium
Natal de 1994: IP Spoofing e o nascimento de um mito
O caso Shimomura vs. Mitnick
49 views
Daily Writeups
⤷ Title: The Ghost in the Machine: Master Stealth with the Orsted C2 Framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:44:26 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AMSI Evasion #Command and Control #cybersecurity #Go_lang #Ligolo_ng #Orsted C2 #Penetration Testing #post_exploitation #red teaming #Sandbox Deception
Penetration Testing Tools
The Ghost in the Machine: Master Stealth with the Orsted C2 Framework
Orsted C2 is a modular Go framework featuring sandbox deception, AMSI/ETW evasion, and native Ligolo-ng pivoting for advanced red team simulations.
36 views
Daily Writeups
⤷ Title: Christmas Eve Crash: Massive Steam Outage Derails Holiday Gaming and Sales
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:27:19 +0000
════════════════════════
⌗ Tags: #Technology #COUNTER STRIKE 2 #Dota 2 #Downdetector #E502 L3 Error #Outage #PC Gaming #Server Crash #Steam #Steam Winter Sale #SteamDB #Valve
Penetration Testing Tools
Christmas Eve Crash: Massive Steam Outage Derails Holiday Gaming and Sales
Recently, a notable disruption struck the Steam platform: a segment of users was unable to access the store,
29 views
Daily Writeups
⤷ Title: Ruby 4.0 Unwrapped: Meet ZJIT and the Game-Changing Ruby Box
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:26:41 +0000
════════════════════════
⌗ Tags: #Technology #Backend #JIT Compiler #Memory Safety #performance #Programming 2026 #Ractor #Ruby 4.0 #Ruby Box #Web Development #ZJIT
Penetration Testing Tools
Ruby 4.0 Unwrapped: Meet ZJIT and the Game-Changing Ruby Box
Ruby has almost settled into a festive tradition of its own: each Christmas, the developers unveil a new
18 views
Daily Writeups
⤷ Title: The Silence of the Scans: New NtKiller Utility Disables Antivirus at the Root
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:23:58 +0000
════════════════════════
⌗ Tags: #Malware #AlphaGhoul #Early Boot Persistence #EDR Bypass #endpoint security #HVCI #KrakenLabs #Malware 2025 #Microsoft Defender #NtKiller #rootkit #UAC bypass
Penetration Testing Tools
The Silence of the Scans: New NtKiller Utility Disables Antivirus at the Root
A new commodity has surfaced on underground forums for those seeking to operate more quietly—and for longer. An
19 views
Daily Writeups
⤷ Title: Beyond Scanning: QKS Group Names the 2025 Leaders in Exposure Management
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:20:49 +0000
════════════════════════
⌗ Tags: #Information Security #AI security #attack surface #CrowdStrike #Exposure Management #Pentera #QKS Group #Qualys #Security Vision #SPARK Matrix #Tenable #vulnerability management
Penetration Testing Tools
Beyond Scanning: QKS Group Names the 2025 Leaders in Exposure Management
The analytical firm QKS Group has published its Exposure Management market study for the fourth quarter of 2025.
20 views
Daily Writeups
⤷ Title: Off the Rails: How Researchers Hijacked the Eurostar AI Chatbot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:18:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Guardrails #API Vulnerabilities #Eurostar #LLM Security #Pen Test Partners #Prompt Injection #Responsible Disclosure #Web Security 2025 #XSS
Penetration Testing Tools
Off the Rails: How Researchers Hijacked the Eurostar AI Chatbot
Security researchers uncovered several vulnerabilities in Eurostar’s public chatbot, demonstrating that a “modern” LLM interface can fail for
29 views
Daily Writeups
⤷ Title: Design Meets Security: elementary OS 8.1 Unleashes Wayland and ARM64 Power
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:17:19 +0000
════════════════════════
⌗ Tags: #Linux #AppCenter #Apple Silicon #ARM64 #Elementary OS #elementary OS 8.1 #Linux 6.14 #Open Source 2025 #Raspberry Pi #Secure Session #Ubuntu 24.04 #Wayland
Penetration Testing Tools
Design Meets Security: elementary OS 8.1 Unleashes Wayland and ARM64 Power
The new release of elementary OS 8.1 arrives a year after its predecessor, bringing notable advances in security,
21 views
Daily Writeups
⤷ Title: The Trusted Thief: New Signed MacSync Malware Bypasses Apple’s Gatekeeper
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:14:47 +0000
════════════════════════
⌗ Tags: #Malware #Apple Notarization #Crypto Theft #Cybersecurity 2025 #Gatekeeper #Infostealer #Jamf #macos #MacSync #malware #Mentalpositive #Swift
Penetration Testing Tools
The Trusted Thief: New Signed MacSync Malware Bypasses Apple’s Gatekeeper
The latest iteration of the macOS stealer known as MacSync has learned to infiltrate victims’ machines almost “like
21 views
Daily Writeups
⤷ Title: Google Dorks: Hacking Google Like a Pro (The Safe Way!)
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 03:29:54 GMT
════════════════════════
⌗ Tags: #security #reconnaissance #hacking #information_security #cybersecurity
Medium
Google Dorks: Hacking Google Like a Pro (The Safe Way!)
Uncover hidden info with just a search bar
29 views
Daily Writeups
⤷ Title: Unlocking the Power of Shodan: Advanced Recon Techniques for Professionals
════════════════════════
𐀪 Author: Cybeague Technologies
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 03:28:24 GMT
════════════════════════
⌗ Tags: #information_security #security #hacking #cybersecurity #reconnaissance
Medium
Unlocking the Power of Shodan: Advanced Recon Techniques for Professionals
Go beyond the basics and turn Shodan into your ultimate recon weapon.
22 views
Daily Writeups
⤷ Title: The Complete Guide to Penetration Testing Careers: Your Roadmap From Zero to Security Expert in…
════════════════════════
𐀪 Author: Sajidur Rahman
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 03:40:35 GMT
════════════════════════
⌗ Tags: #career_advice #penetration_testing #job_hunting #india #cybersecurity
Medium
The Complete Guide to Penetration Testing Careers: Your Roadmap From Zero to Security Expert in 2026
You’re about to discover how to build a lucrative career that pays anywhere from ₹25 lakhs to ₹75+ lakhs annually — and it’s in one of the…
27 views
Daily Writeups
⤷ Title: Cicada — Active Directory Lab Write-Up!
════════════════════════
𐀪 Author: Dogukan İSPİRLİ
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:04:55 GMT
════════════════════════
⌗ Tags: #active_directory_pentest #hackthebox_writeup #penetration_testing #ad_pentesting #active_directory
Medium
Cicada — Active Directory Lab Write-Up!
Selamlar, bugün çok güzel ve kolay bir makine çözümü ile birlikteyim. Sizlere Cicada Lab’in çözümünü göstereceğim. Eğer ki sizlerde bu lab…
31 views
Daily Writeups
⤷ Title: Routers, IP Addresses, and Enumeration: A Beginner-Friendly Guide to Ethical Hacking
════════════════════════
𐀪 Author: blackey07
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:35:56 GMT
════════════════════════
⌗ Tags: #enumeration #ethical_hacking #router #hacker #learning
Medium
Routers, IP Addresses, and Enumeration: A Beginner-Friendly Guide to Ethical Hacking
When I started learning ethical hacking, I jumped straight into tools and scans. It felt powerful for about five minutes, until nothing…
31 views
Daily Writeups
⤷ Title: Cybersecurity in Banking System
════════════════════════
𐀪 Author: Vsasf Tech ICT Academy, Enugu
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:07:29 GMT
════════════════════════
⌗ Tags: #ethical_hacking #incident_response #pentesting #cybersecurity #incident_management
Medium
Cybersecurity in Banking System
Cybersecurity is vital for banks to protect vast amounts of sensitive customer data, prevent massive financial fraud, maintain customer…
44 views
Daily Writeups
⤷ Title: The “D” is for Danger: How a Tiny Typo in MAS Activation Hijacks Your PC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:55:46 +0000
════════════════════════
⌗ Tags: #Malware #Cosmali Loader #Cyber Attack 2025 #malware #MAS #Microsoft Activation Scripts #powershell #Typosquatting #Windows Security #XWorm RAT
Daily CyberSecurity
The "D" is for Danger: How a Tiny Typo in MAS Activation Hijacks Your PC
Attackers are using a fake MAS domain (get.activate.win) to deploy Cosmali Loader and XWorm RAT via PowerShell. Verify your command before running it!
30 views
Daily Writeups
⤷ Title: Gmail’s Identity Revolution: How to Change Your Email Address Without Losing Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:32:11 +0000
════════════════════════
⌗ Tags: #Technology #Account Migration #Data Privacy #Digital Identity #Email Alias #gmail #google #Google Account Settings #Productivity #Tech News 2025
Daily CyberSecurity
Gmail’s Identity Revolution: How to Change Your Email Address Without Losing Data
Google is finally letting users change their @gmail.com address! Keep your data, photos, and history while updating your username via a new alias system.
24 views
Daily Writeups
⤷ Title: The Godfather’s Gambit: Why Yoshua Bengio Lies to AI to Get the Truth
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:01:47 +0000
════════════════════════
⌗ Tags: #Technology #AI Alignment #AI Godfather #AI Sycophancy #ChatGPT #Diary of a CEO #Machine Learning 2025 #OpenAI #prompt engineering #RLHF #Yoshua Bengio
Daily CyberSecurity
The Godfather’s Gambit: Why Yoshua Bengio Lies to AI to Get the Truth
AI Godfather Yoshua Bengio reveals a "reverse deception" hack: lie to your chatbot to bypass its sycophantic flattery and get honest, critical feedback.
20 views