Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: OverTheWire: Bandit levels 7–12
════════════════════════
𐀪 Author: Malek Alhawi
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 00:08:55 GMT
════════════════════════
⌗ Tags: #kali #linux #cybersecurity #bandit_walkthrough #learning
Medium
OverTheWire: Bandit levels 7–12
Description
18 views
Daily Writeups
⤷ Title: CyberDefenders —IcedID Lab Walkthrough
════════════════════════
𐀪 Author: Drew Arpino
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 00:01:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyberdefender #cyber_threat_intelligence #blue_team #virustotal
Medium
CyberDefenders —IcedID Lab Walkthrough
A Cyber Threat Intelligence Challenge using VirusTotal, MITRE ATT&CK, and Recorded Future Triage.
24 views
Daily Writeups
⤷ Title: Why Your SME’s Cyber Insurance Might Not Cover You (And What to Do About It)
════════════════════════
𐀪 Author: Cyber Secure Step Consulting
════════════════════════
ⴵ Time: Sun, 16 Feb 2025 23:48:01 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #sme #cyber_insurance #cybersecurity
Medium
Why Your SME’s Cyber Insurance Might Not Cover You (And What to Do About It)
Cyber threats aren’t just a big business problem anymore. Small and medium-sized enterprises (SMEs) are now prime targets for…
19 views
Daily Writeups
⤷ Title: Insecure Randomness and Padding Oracle, Web Exploitation - Decryptify : TryHackMe Walkthrough - 60…
════════════════════════
𐀪 Author: RosanaFSS
════════════════════════
ⴵ Time: Sun, 16 Feb 2025 23:20:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme_walkthrough #web_development #tryhackme #technology
Medium
Insecure Randomness and Padding Oracle, Web Exploitation - Decryptify : TryHackMe Walkthrough - 60 points
Explore Broken Object Level Authorization, API1:2023. Use your skills to exploit Insecure Randomness vulnerability, and uncover encrypted…
37 views
Daily Writeups
⤷ Title: Hack The Box — Cicada Walkthrough
════════════════════════
𐀪 Author: Tech&Jazzgirl
════════════════════════
ⴵ Time: Sun, 16 Feb 2025 23:15:54 GMT
════════════════════════
⌗ Tags: #hackthebox_writeup #pentesting #windows #penetration_testing #hackthebox_walkthrough
Medium
Hack The Box — Cicada Walkthrough
1. Reconnaissance, Scanning and Enumeration
36 views
Daily Writeups
⤷ Title: SSH3: faster and rich secure shell using HTTP/3
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:40:22 +0000
════════════════════════
⌗ Tags: #Network Defense #HTTP/3 #SSH protocol #SSH3
Penetration Testing Tools
SSH3: faster and rich secure shell using HTTP/3
SSH3 is a complete revisit of the SSH protocol, mapping its semantics on top of the HTTP mechanisms. In a nutshell, SSH3 uses QUIC+TLS1.3
32 views
Daily Writeups
⤷ Title: PichichiH0ll0wer: Nim process hollowing loader
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:37:39 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #process hollowing loader
Penetration Testing Tools
PichichiH0ll0wer: Nim process hollowing loader
PichichiH0ll0wer is a Process hollowing loader written in Nim for PEs only. PichichiH0ll0wer has some features to protect your payload
24 views
Daily Writeups
⤷ Title: EDRSilencer: uses WFP to block EDR agents from reporting security events to the server
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:30:47 +0000
════════════════════════
⌗ Tags: #Ethical Hacking
Penetration Testing Tools
EDRSilencer: uses WFP to block EDR agents from reporting security events to the server
This tool was created to block the outbound traffic of running EDR processes using Windows Filtering Platform (WFP) APIs.
21 views
Daily Writeups
⤷ Title: CVE-2022-31631 (CVSS 9.1): Critical PHP Flaw Exposes Websites to SQL Injection Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:25:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2022_31631 #php #SQLite databases
Daily CyberSecurity
CVE-2022-31631 (CVSS 9.1): Critical PHP Flaw Exposes Websites to SQL Injection Attacks
Learn about CVE-2022-31631 and its risks related to SQL injection in PHP. Update your PHP to stay secure from vulnerabilities.
16 views
Daily Writeups
⤷ Title: Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:19:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT29 #CozyDuke #CozyLarch #DarkHalo #Device Code Authentication #Device Code Authentication phishing #Midnight Blizzard #phishing #UTA0304 #UTA0307
Daily CyberSecurity
Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts
Explore the risks of Device Code Authentication phishing targeted at Microsoft 365 users by Russian threat actors.
21 views
Daily Writeups
⤷ Title: Metasploit-Ready: CVE-2025-1094 SQLi in PostgreSQL Exposes Systems to Remote Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:14:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_1094 #PostgreSQL
Daily CyberSecurity
Metasploit-Ready: CVE-2025-1094 SQLi in PostgreSQL Exposes Systems to Remote Attacks
Explore CVE-2025-1094, a high-severity SQL injection vulnerability in PostgreSQL's psql tool that can execute arbitrary code.
30 views
Daily Writeups
⤷ Title: Astaroth Phishing Kit Bypasses 2FA, Steals Accounts
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:07:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #AOL #Astaroth #Astaroth Phishing Kit #gmail #Microsoft 365 #Phishing Kit #yahoo
Daily CyberSecurity
Astaroth Phishing Kit Bypasses 2FA, Steals Accounts
Uncover the dangers of the Astaroth Phishing Kit, which bypasses two-factor authentication to steal sensitive credentials.
19 views
Daily Writeups
⤷ Title: SPAWNCHIMERA: New Malware Exploits Ivanti Zero-Day Flaw (CVE-2025-0282)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 02:03:21 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #CVE_2025_0282 #SPAWNANT #SPAWNMOLE #SPAWNSNAIL
Daily CyberSecurity
SPAWNCHIMERA: New Malware Exploits Ivanti Zero-Day Flaw (CVE-2025-0282)
Uncover the dangers of SPAWNCHIMERA malware, an advanced cyber threat exploiting CVE-2025-0282 for stealthy attacks.
18 views
Daily Writeups
⤷ Title: North Korea’s IT Worker Scam: How the Regime Infiltrates Global Tech Firms for Cyber Espionage
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:58:29 +0000
════════════════════════
⌗ Tags: #Cyber Security #Astrill VPN #BeaverTail #InvisibleFerret #OtterCookie #PurpleBravo
Daily CyberSecurity
North Korea’s IT Worker Scam: How the Regime Infiltrates Global Tech Firms for Cyber Espionage
Uncover the dangers of North Korea’s IT worker scam. Learn how it threatens global tech with espionage and fraud.
20 views
Daily Writeups
⤷ Title: AMD Patches High-Severity SMM Callout Flaw (CVE-2024-21924) in EPYC and Ryzen Threadripper Processors
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:53:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #AMD #CVE_2024_21924 #EPYC #Ryzen Threadripper Processors
Daily CyberSecurity
AMD Patches High-Severity SMM Callout Flaw (CVE-2024-21924) in EPYC and Ryzen Threadripper Processors
Learn about CVE-2024-21924's impact on AMD processors and the high-severity vulnerabilities addressed by recent security patches.
21 views
Daily Writeups
⤷ Title: Buffer Overflows Vulnerabilities: CISA & FBI Issue Urgent Warning
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:48:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #buffer overflow vulnerabilities #CVE_2022_0185 #CVE_2023_6549 #CVE_2024_38812 #CVE_2024_49138 #CVE_2025_0282 #CVE_2025_21333
Daily CyberSecurity
Buffer Overflows Vulnerabilities: CISA & FBI Issue Urgent Warning
Learn about buffer overflows vulnerabilities and how they threaten software security and infrastructure. Stay informed today.
22 views
Daily Writeups
⤷ Title: Mailcow Patches Password Reset Poisoning Vulnerability (CVE-2025-25198)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:41:37 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_25198
Daily CyberSecurity
Mailcow Patches Password Reset Poisoning Vulnerability (CVE-2025-25198)
Learn about CVE-2025-25198 and how it affects mailcow's password reset feature. Stay secure with the latest patch details.
21 views
Daily Writeups
⤷ Title: FINALDRAFT Malware Exploits Outlook Drafts for Covert Communication
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:39:30 +0000
════════════════════════
⌗ Tags: #Malware #FINALDRAFT Malware #PATHLOADER
Daily CyberSecurity
FINALDRAFT Malware Exploits Outlook Drafts for Covert Communication
Explore FINALDRAFT Malware, a new threat using Microsoft Outlook drafts for stealthy communication and cyberespionage.
23 views
Daily Writeups
⤷ Title: CVE-2024-1709 and CVE-2023-48788: Exploits Fueling Russia’s BadPilot Campaign
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:31:25 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability #APT44 #BadPilot #BadPilot campaign #BlackEnergy Lite #CVE_2021_34473 #CVE_2022_41352 #CVE_2023_48788 #CVE_2024_1709 #SANDWORM #Seashell Blizzard #ShadowLink
Daily CyberSecurity
CVE-2024-1709 and CVE-2023-48788: Exploits Fueling Russia's BadPilot Campaign
Uncover the threats posed by Seashell Blizzard, a cyber espionage group behind the BadPilot campaign targeting critical sectors.
22 views
Daily Writeups
⤷ Title: Fake ‘Adobe Drive X’ App Sneaks Through Microsoft Login to Steal Credentials
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Mon, 17 Feb 2025 01:28:04 +0000
════════════════════════
⌗ Tags: #Cyber Security #Adobe Drive X
Daily CyberSecurity
Fake 'Adobe Drive X' App Sneaks Through Microsoft Login to Steal Credentials
Uncover the dangers of Adobe Drive X in the new phishing campaign targeting Microsoft users. Stay informed and secure.
18 views