Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: From Chaos to Confidence: What We’re Learning About Securing Open Source Supply Chains
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Tue, 27 May 2025 23:12:35 GMT
════════════════════════
⌗ Tags: #information_security #supply_chain #cybersecurity #ai #api
Medium
From Chaos to Confidence: What We’re Learning About Securing Open Source Supply Chains
By now, it’s no secret that software supply chains are under attack.
23 views
Daily Writeups
⤷ Title: SQL Injection: What It Is and How to Stay Safe
════════════════════════
𐀪 Author: Akshay Chauhan
════════════════════════
ⴵ Time: Tue, 27 May 2025 22:57:40 GMT
════════════════════════
⌗ Tags: #information_security #safeaeon #sql_injection #cybersecurity
Medium
SQL Injection: What It Is and How to Stay Safe
Imagine someone walking into your building through an open side door. You locked the front. You installed cameras. But that one overlooked…
26 views
Daily Writeups
⤷ Title: # ️ Automatiza tu vida digital y protege tus datos como un profesional — sin ser un hacker
════════════════════════
𐀪 Author: Nulltrace
════════════════════════
ⴵ Time: Tue, 27 May 2025 22:52:21 GMT
════════════════════════
⌗ Tags: #privacy #automation #digital_life #productivity #cybersecurity
Medium
# 🛡️ Automatiza tu vida digital y protege tus datos como un profesional — sin ser un hacker
¿Te imaginas poder automatizar tus tareas digitales más repetitivas y proteger tu información personal con simples herramientas?
26 views
Daily Writeups
⤷ Title: Automating Information Gathering Using Top 20 Tools
════════════════════════
𐀪 Author: Karthikeyan Nagaraj
════════════════════════
ⴵ Time: Tue, 27 May 2025 22:17:30 GMT
════════════════════════
⌗ Tags: #programming #technology #cybersecurity #automation #careers
Medium
Automating Information Gathering Using Top 20 Tools
One-Click Recon for Ethical Hacking, Bug Bounty, and Red Teaming
31 views
Daily Writeups
⤷ Title: Debugging
════════════════════════
𐀪 Author: Iram Jack
════════════════════════
ⴵ Time: Tue, 27 May 2025 22:32:27 GMT
════════════════════════
⌗ Tags: #miss_robot #malware_analysis #static_analysis #dynamic_analysis #tryhackme
Medium
Debugging
Dynamic Analysis | Part 2
28 views
Daily Writeups
⤷ Title: DIGITAL RAPE
════════════════════════
𐀪 Author: Raph Abdul
════════════════════════
ⴵ Time: Tue, 27 May 2025 20:07:14 GMT
════════════════════════
⌗ Tags: #xs #xai #openai #elon_musk
Medium
POST / GET / PUT / DELETE (X)
The 4 HTTP METHODS that give you control over data.
28 views
Daily Writeups
⤷ Title: EG-CTF Finals: WEB-FlagFinder
════════════════════════
𐀪 Author: 0xStrawHat
════════════════════════
ⴵ Time: Tue, 27 May 2025 22:43:57 GMT
════════════════════════
⌗ Tags: #sqli #ctf #waf_bypass #ssrf
Medium
EG-CTF Finals: WEB-FlagFinder
بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ
31 views
Daily Writeups
⤷ Title: Robbinhood Ransomware Operator Pleads Guilty to Targeting U.S. Cities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:46:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitcoin #Cybercrime #DOJ #Extortion #ransomware #Robbinhood ransomware #Sina Gholinejad
Daily CyberSecurity
Robbinhood Ransomware Operator Pleads Guilty to Targeting U.S. Cities
Iranian national Sina Gholinejad pleaded guilty for his role in the Robbinhood ransomware attacks targeting U.S. cities like Baltimore.
32 views
Daily Writeups
⤷ Title: Chrome 137 Released: Fixes High-Severity Use-After-Free & V8 Bugs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:37:42 +0000
════════════════════════
⌗ Tags: #Vulnerability #browser security #Chrome 137 #CVE_2025_5063 #CVE_2025_5280 #google chrome #security update #use after free #V8
Daily CyberSecurity
Chrome 137 Released: Fixes High-Severity Use-After-Free & V8 Bugs
Google Chrome 137 is out, patching 11 vulnerabilities including high-severity use-after-free (CVE-2025-5063) and V8 flaws. Update now!
17 views
Daily Writeups
⤷ Title: Void Blizzard: New Russian Cyberespionage Group Targets NATO and Ukraine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:35:58 +0000
════════════════════════
⌗ Tags: #Cyber Security #Cyberespionage #LAUNDRY BEAR #Microsoft 365 #NATO #phishing #Russian APT #Ukraine #Void Blizzard
Daily CyberSecurity
Void Blizzard: New Russian Cyberespionage Group Targets NATO and Ukraine
Microsoft identified Void Blizzard, a new Russia-affiliated cyberespionage group, targeting critical sectors in NATO countries and Ukraine.
20 views
Daily Writeups
⤷ Title: Stealthy Catena Loader Delivers Winos RAT via Trojanized App Installers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:32:59 +0000
════════════════════════
⌗ Tags: #Malware #Catena #cybersecurity #DLL injection #malware #memory_resident #powershell #rat #Winos RAT
Daily CyberSecurity
Stealthy Catena Loader Delivers Winos RAT via Trojanized App Installers
The Catena malware loader is using trojanized app installers (QQBrowser, LetsVPN) to deploy the memory-resident Winos v4.0 RAT.
19 views
Daily Writeups
⤷ Title: Critical (CVSS 9.8): Weidmueller Switch Flaws Risk Full System Compromise
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:30:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #CVSS #cybersecurity #industrial Ethernet switch #OT Security #Remote Code Execution #Weidmueller
Daily CyberSecurity
Critical (CVSS 9.8): Weidmueller Switch Flaws Risk Full System Compromise
Critical flaws (CVSS 9.8) in Weidmueller industrial switches allow unauthenticated remote attackers full system compromise. Update firmware.
17 views
Daily Writeups
⤷ Title: Mimo Returns: CVE-2025-32432 Exploited in Cryptomining and Proxyware Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:22:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #Craft CMS #cryptominer #CVE_2025_32432 #Hezb #malware #Mimo #proxyware #rce #unauthenticated #Vulnerability
Daily CyberSecurity
Mimo Returns: CVE-2025-32432 Exploited in Cryptomining and Proxyware Campaigns
Mimo (Hezb) is exploiting an unauthenticated RCE (CVE-2025-32432) in Craft CMS to deploy webshells, cryptominers, and proxyware. Patch now!
18 views
Daily Writeups
⤷ Title: Toxic Agent Flow: GitHub MCP Vulnerability Exposes Private Repositories
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:18:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI agent #cybersecurity #data exfiltration #github #MCP server #Prompt injection
Daily CyberSecurity
Toxic Agent Flow: GitHub MCP Vulnerability Exposes Private Repositories
A critical GitHub MCP server vulnerability allows AI agent hijacking via prompt injection, leading to data exfiltration from private repositories.
16 views
Daily Writeups
⤷ Title: Industrial Systems at Risk: Lenze VPN Flaws Lead to Root/SYSTEM Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:08:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVSS #industrial control systems #IOT #Lenze #privilege escalation #rce #vpn
Daily CyberSecurity
Industrial Systems at Risk: Lenze VPN Flaws Lead to Root/SYSTEM Access
Lenze VPN Client for x500 IoT gateways has critical flaws allowing arbitrary code execution via local privilege escalation.
20 views
Daily Writeups
⤷ Title: Earth Lamia: China-Linked APT Targets Global Industries with Custom Backdoors
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:01:21 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #backdoor #china #CVE #cyber_espionage #Earth Lamia #malware #PULSEPACK #sql injection
Daily CyberSecurity
Earth Lamia: China-Linked APT Targets Global Industries with Custom Backdoors
Earth Lamia, a China-linked APT, is targeting critical industries worldwide using SQL injection, CVEs, and custom backdoors like PULSEPACK.
20 views
Daily Writeups
⤷ Title: Reflected XSS and Blind OS Command Injection
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:23:05 GMT
════════════════════════
⌗ Tags: #cyebrsecurity #penetration_testing #bug_bounty_tips #bug_bounty #technology
Medium
Reflected XSS and Blind OS Command Injection
How a Misconfigured Email Parameter Led to Script Injection, Frame Embedding, and Remote DNS-Based OS Command Execution
40 views
Daily Writeups
⤷ Title: Ciphered Chaos: Bit-Flipping in the Wild
════════════════════════
𐀪 Author: Ahmed A. Sherif (Batee5a)
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:38:13 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #vulnerability #crypto #encryption #bug_bounty
Medium
Ciphered Chaos: Bit-Flipping in the Wild
Encryption does not mean secure
28 views
Daily Writeups
⤷ Title: Protecting Multitenancy Files: Why Leaking tenant-config.json Can Be a Disaster
════════════════════════
𐀪 Author: Cyber T
════════════════════════
ⴵ Time: Wed, 28 May 2025 01:22:56 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #hacking #osint #cybersecurity #cyber
Medium
Protecting Multitenancy Files: Why Leaking tenant-config.json Can Be a Disaster
Note: This content is intended for educational purposes only. Always apply security best practices in production environments.
24 views
Daily Writeups
⤷ Title: Stack Canaries: The Tiny Guardians of Your Stack
════════════════════════
𐀪 Author: xwxrtxn
════════════════════════
ⴵ Time: Wed, 28 May 2025 00:11:40 GMT
════════════════════════
⌗ Tags: #reverse_engineering #cybersecurity #hacking #cyber_security_awareness #linux
Medium
Stack Canaries: The Tiny Guardians of Your Stack
When it comes to memory corruption attacks like buffer overflows, stack canaries are one of the oldest — and most effective — lines of…
26 views