Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: fnwn@hacking:~$whoami
════════════════════════
𐀪 Author: fnwn
════════════════════════
ⴵ Time: Tue, 13 May 2025 22:03:52 GMT
════════════════════════
⌗ Tags: #ctf_writeup #hacking #introduction #ctf #who_am_i
Medium
fnwn@hacking:~$whoami
Hi everyone, fnwn here. You are probably asking who the hack is fnwn?
21 views
Daily Writeups
⤷ Title: Telegram Üzerinden Siber Tehdit İstihbaratı (CTI)
════════════════════════
𐀪 Author: A.B
════════════════════════
ⴵ Time: Tue, 13 May 2025 23:30:48 GMT
════════════════════════
⌗ Tags: #threat_hunting #telegram #cybersecurity #cyber_threat_intelligence #osint
Medium
Telegram Üzerinden Siber Tehdit İstihbaratı (CTI)
Siber güvenlik dünyasında açık kaynak istihbaratı (OSINT), günümüz dijital tehdit ortamında hayati bir rol oynuyor. Özellikle Telegram, son…
25 views
Daily Writeups
⤷ Title: Writing Pentest Reports . TryHackMe Walkthrough
════════════════════════
𐀪 Author: RosanaFSS
════════════════════════
ⴵ Time: Tue, 13 May 2025 23:28:02 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #penetration_testing #business #cybersecurity
Medium
Writing Pentest Reports . TryHackMe Walkthrough
Learn how to write professional pentesting reports that communicate risk to business stakeholders.
14 views
Daily Writeups
⤷ Title: Phishing Alert: How Hackers Are Targeting Apple & Google Wallets (And How to Stay Safe)
════════════════════════
𐀪 Author: Sherry
════════════════════════
ⴵ Time: Tue, 13 May 2025 23:13:47 GMT
════════════════════════
⌗ Tags: #cyberattack #phishing_awareness #phishing_attacks #cybersecurity
Medium
Phishing Alert: How Hackers Are Targeting Apple & Google Wallets (And How to Stay Safe)
The Growing Threat of Phishing on Digital Wallets
17 views
Daily Writeups
⤷ Title: Hack The Box | Devvortex
════════════════════════
𐀪 Author: Luigi Carpio (0xBahalaNa)
════════════════════════
ⴵ Time: Tue, 13 May 2025 23:03:20 GMT
════════════════════════
⌗ Tags: #hackthebox_walkthrough #cybersecurity #information_security #hackthebox_writeup #hackthebox
Medium
Hack The Box | Devvortex
Released 11/25/2023 (Retired)
14 views
Daily Writeups
⤷ Title: meerkat — a scuffed writeup + update
════════════════════════
𐀪 Author: nubb
════════════════════════
ⴵ Time: Tue, 13 May 2025 22:55:49 GMT
════════════════════════
⌗ Tags: #dfir #hackthebox #blue_team #writeup #cybersecurity
Medium
meerkat — a scuffed writeup + update
Hello again, Medium. It’s been quite some time since I last appeared on this platform — 10 months of radio silence. During those ten…
17 views
Daily Writeups
⤷ Title: Post India-Pakistan Conflict: India’s Digital Retaliation — Tariffs, Tech, and a Wake-Up Call for…
════════════════════════
𐀪 Author: Everclear International
════════════════════════
ⴵ Time: Tue, 13 May 2025 22:49:47 GMT
════════════════════════
⌗ Tags: #usa #economics #india #technology #cybersecurity
Medium
Post India-Pakistan Conflict: India’s Digital Retaliation — Tariffs, Tech, and a Wake-Up Call for the U.S.
By Everclear, Medium Contributor on Geopolitics, Cybersecurity & Emerging Technology
23 views
Daily Writeups
⤷ Title: Ultra-Fast DevSecOps Scanners
════════════════════════
𐀪 Author: AquilaX AI
════════════════════════
ⴵ Time: Tue, 13 May 2025 22:40:48 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_development #security #devsecops
Medium
Ultra-Fast DevSecOps Scanners
Why scan speed matters in modern CI/CD pipelines
20 views
Daily Writeups
⤷ Title: UnderPass (Write-Up) — Hack The Box
════════════════════════
𐀪 Author: Ross Mitchell
════════════════════════
ⴵ Time: Tue, 13 May 2025 22:40:04 GMT
════════════════════════
⌗ Tags: #htb #penetration_testing #ethical_hacking #hack_the_box_writeup #hack_the_box_walkthrough
Medium
UnderPass (Write-Up) — Hack The Box
UnderPass is a Linux box which contains information disclosure within SNMP utilising default community strings, which can be used to…
23 views
Daily Writeups
⤷ Title: Writing Pentest Reports: TryHackMe Answers with Explanation
════════════════════════
𐀪 Author: Ansul Kotadia
════════════════════════
ⴵ Time: Tue, 13 May 2025 23:12:15 GMT
════════════════════════
⌗ Tags: #pentest_reporting #writing_pentest_reports #tryhackme_writeup #tryhackme #tryhackme_walkthrough
Medium
Writing Pentest Reports: TryHackMe Answers with Explanation
Learn how to write professional pentesting reports that communicate risk to business stakeholders.
26 views
Daily Writeups
⤷ Title: 3. X86 Assembly Basics
════════════════════════
𐀪 Author: Iram Jack
════════════════════════
ⴵ Time: Tue, 13 May 2025 22:32:26 GMT
════════════════════════
⌗ Tags: #miss_robot #static_analysis #tryhackme #dynamic_analysis #malware_analysis
Medium
X86 Assembly Basics
x86 architecture | Malware Analysis
36 views
Daily Writeups
⤷ Title: AIGoat: A deliberately Vulnerable AI Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:30:36 +0000
════════════════════════
⌗ Tags: #Arsenal Lab #Vulnerability Assessment #AIGoat #Vulnerable AI
Penetration Testing Tools
AIGoat: A deliberately Vulnerable AI Infrastructure
AI-Goat is a deliberately vulnerable AI infrastructure hosted on AWS, designed to simulate the OWASP Machine Learning Security Top 10 risks
32 views
Daily Writeups
⤷ Title: dummy: Generator of static files for testing file upload
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:00:41 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #Web AppSec #dummy #testing file upload
Penetration Testing Tools
dummy: Generator of static files for testing file upload
Generator of static files for testing file upload functionality. When generating a png, as in the screenshot, you can generate a png of a specified size.
32 views
Daily Writeups
⤷ Title: CVSS 10.0 Flaws in Siemens OZW Web Servers Enable Unauthenticated RCE and Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 01:00:17 +0000
════════════════════════
⌗ Tags: #Vulnerability #building automation #CVE_2025_26389 #CVE_2025_26390 #CVSS 10.0 #cybersecurity #ICS security #OZW672 #OZW772 #Remote Code Execution #Siemens #sql injection
Daily CyberSecurity
CVSS 10.0 Flaws in Siemens OZW Web Servers Enable Unauthenticated RCE and Admin Access
CVEs 2025-26389 and 2025-26390 let attackers run code as root or gain admin access on Siemens OZW web servers. Patching is strongly advised.
22 views
Daily Writeups
⤷ Title: Ivanti Neurons for ITSM Hit by CVSS 9.8 Authentication Bypass Flaw Enabling Full Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:55:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #admin access #Authentication Bypass #Critical Vulnerability #CVE_2025_22462 #CVSS 9.8 #Ivanti #Neurons for ITSM #on_prem ITSM #security advisory
Daily CyberSecurity
Ivanti Neurons for ITSM Hit by CVSS 9.8 Authentication Bypass Flaw Enabling Full Admin Access
Ivanti patches CVE-2025-22462, a critical CVSS 9.8 auth bypass flaw in Neurons for ITSM. Risk of full admin access. Patch or restrict IIS access now.
17 views
Daily Writeups
⤷ Title: Varnish Vulnerability Exposes Cache to HTTP Request Smuggling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:50:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cache Poisoning #http #request smuggling #Varnish #Varnish Cache #Varnish Enterprise #Web Security
Daily CyberSecurity
Varnish Vulnerability Exposes Cache to HTTP Request Smuggling
Varnish Cache and Enterprise have a vulnerability allowing HTTP request smuggling. This can lead to cache poisoning and WAF bypass. Upgrade now!
17 views
Daily Writeups
⤷ Title: Zoom Patches High-Severity Flaw (CVE-2025-30663) in Workplace Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:49:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #buffer over_read #CVE_2025_30663 #CVSS 8.8 #cybersecurity #Denial of Service #NULL pointer #privilege escalation #security #security update #update #Workplace Apps #Zoom #Zoom patch
Daily CyberSecurity
Zoom Patches High-Severity Flaw (CVE-2025-30663) in Workplace Apps
Zoom fixes critical CVE-2025-30663 flaw allowing local privilege escalation. Users urged to update Workplace apps and SDKs to version 6.4.0 or newer.
13 views
Daily Writeups
⤷ Title: Critical Misconfiguration in Bitnami Pgpool Enables Unauthenticated PostgreSQL Access (CVE-2025-22248)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:46:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bitnami #Cloud Security #CVE_2025_22248 #CVSS 9.4 #database security #Helm chart #Kubernetes #Pgpool #PostgreSQL #unauthenticated access
Daily CyberSecurity
Critical Misconfiguration in Bitnami Pgpool Enables Unauthenticated PostgreSQL Access (CVE-2025-22248)
Bitnami Pgpool flaw (CVE-2025-22248) exposes PostgreSQL to unauthenticated access. Update to Pgpool 4.6.0-1 or Helm chart 16.0.0 to fix.
10 views
Daily Writeups
⤷ Title: TA406 Cyber Campaign: North Korea’s Focus on Ukraine Intelligence
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:42:17 +0000
════════════════════════
⌗ Tags: #Cyber Security #cyber_espionage #geopolitics #intelligence gathering #malware #North Korea #phishing #Proofpoint #TA406 #threat actor #Ukraine
Daily CyberSecurity
TA406 Cyber Campaign: North Korea's Focus on Ukraine Intelligence
North Korean threat actor TA406 intensifies cyber espionage against Ukraine, using phishing and malware to gather political intelligence.
13 views
Daily Writeups
⤷ Title: Siemens RUGGEDCOM Flaws Scored CVSS 9.9: Command Injection Bugs Threaten Industrial Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:38:36 +0000
════════════════════════
⌗ Tags: #Vulnerability #Command Injection #CVE_2025_32469 #CVE_2025_33024 #CVE_2025_33025 #CVSS 9.9 #firmware update #ICS #industrial cybersecurity #OT Security #RUGGEDCOM #Siemens
Daily CyberSecurity
Siemens RUGGEDCOM Flaws Scored CVSS 9.9: Command Injection Bugs Threaten Industrial Networks
Siemens RUGGEDCOM devices face CVSS 9.9 command injection flaws. Authenticated users can execute root-level code via web tools. Patch to V2.16.5 now.
24 views