Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: A Sunday for the History Books: Drones, Chess, and a 2:30 AM Writing Debut
════════════════════════
𐀪 Author: Nikhil
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 22:41:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #chess #russia_ukraine_war
Medium
A Sunday for the History Books: Drones, Chess, and a 2:30 AM Writing Debut
Hey you all, I’m someone new to writing but always wanted to. I did write a few (google reviews) and always wanted to scale up, express my…
10 views
Daily Writeups
⤷ Title: Enso: Accelerating Visual Programming with Shortcuts
════════════════════════
𐀪 Author: Murphy
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 22:41:33 GMT
════════════════════════
⌗ Tags: #blockchain #innovation #cybersecurity #technology
Medium
Enso: Accelerating Visual Programming with Shortcuts
In today’s fast-paced digital landscape, the ability to transform data into meaningful applications quickly and clearly is a major…
12 views
Daily Writeups
⤷ Title: Every Word You Type is Being Stolen… The Insidious Google Keyboard
════════════════════════
𐀪 Author: Stacy L
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 22:28:05 GMT
════════════════════════
⌗ Tags: #business #android #cybersecurity #technology #tech
Medium
Every Word You Type is Being Stolen… The Insidious Google Keyboard
Did you know that every word you type on your phone could be tracked, stored, and even used against you? If you’re using Google Keyboard…
12 views
Daily Writeups
⤷ Title: ICE WALKTHROUGH : TRYHACKME
════════════════════════
𐀪 Author: rizzziom
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 22:32:32 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme_walkthrough #ctf_writeup #tryhackme #penetration_testing
Medium
ICE WALKTHROUGH : TRYHACKME
To access the machine, click on the link given below:
21 views
Daily Writeups
⤷ Title: What is Kerberoasting?
════════════════════════
𐀪 Author: Jason
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 21:32:44 GMT
════════════════════════
⌗ Tags: #kerberoasting #cybersecurity #penetration_testing #ransonware #active_directory_security
Medium
What is Kerberoasting?
TL;DR: Kerberoasting is an attack technique used to steal and crack passwords for service accounts in Active Directory. It is quiet, fast…
17 views
Daily Writeups
⤷ Title: Spearphishing Attachments
════════════════════════
𐀪 Author: Iram Jack
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 22:32:32 GMT
════════════════════════
⌗ Tags: #malware_analysis #dynamic_analysis #static_analysis #tryhackme #miss_robot
Medium
Spearphishing Attachments
Malicious Documents | Part 1
20 views
Daily Writeups
⤷ Title: HTB Bashed Walkthrough
════════════════════════
𐀪 Author: The Cyber Outpost
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 23:02:32 GMT
════════════════════════
⌗ Tags: #php #hackthebox #hackthebox_writeup #hackthebox_walkthrough #cron
Medium
HTB Bashed Walkthrough
In this article, we’re going to explore the retired easy box of Blue, following the guided mode.
27 views
Daily Writeups
⤷ Title: xeol: scanner for end-of-life software in container images, filesystems, and SBOMs
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:56:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #container images #filesystems #SBOM
Penetration Testing Tools
xeol: scanner for end-of-life software in container images, filesystems, and SBOMs
xeol is a scanner for end-of-life (EOL) packages in container images, filesystems, and SBOMs
24 views
Daily Writeups
⤷ Title: kntrl: Real-time eBPF Runtime Security for Your CI/CD Pipelines
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:42:11 +0000
════════════════════════
⌗ Tags: #Network Defense #CI/CD #eBPF #GitHub Actions #kernel monitoring #kntrl #OPA #Open Policy Agent #open source #pipeline security #runtime security
Penetration Testing Tools
kntrl: Real-time eBPF Runtime Security for Your CI/CD Pipelines
kntrl is an eBPF-powered runtime agent for real-time detection & prevention of anomalous behavior in CI/CD pipelines, supporting OPA policies & GitHub Actions.
25 views
Daily Writeups
⤷ Title: PoC Reveals Apple Audio Zero-Day Enabling Remote Code Execution via Malicious Media Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:50:14 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apple #APT #CoreAudio #Cyberespionage #ios #iPadOS #macOS #PoC #proof_of_concept #rce #Remote Code Execution #security patch #tvOS #visionOS #zero_day
Daily CyberSecurity
PoC Reveals Apple Audio Zero-Day Enabling Remote Code Execution via Malicious Media Files
Apple patches a CoreAudio flaw exploited in the wild via malicious media files, enabling remote code execution. PoC now on GitHub.
12 views
Daily Writeups
⤷ Title: Critical SSRF Flaw in Esri Portal for ArcGIS Exposes Internal Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:40:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #ArcGIS #critical patch #cybersecurity #data exfiltration #Esri #network_security #Portal for ArcGIS #Remote Code Execution #ssrf
Daily CyberSecurity
Critical SSRF Flaw in Esri Portal for ArcGIS Exposes Internal Networks
Esri patches a critical SSRF vulnerability in Portal for ArcGIS, allowing unauthenticated remote attackers to bypass protections and access internal services.
12 views
Daily Writeups
⤷ Title: Critical Flaw in Fabio Load Balancer Allows HTTP Header Tampering & Access Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:39:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #access control bypass #cybersecurity #Fabio #HTTP Headers #load balancer #reverse proxy #Server Security #Web Security
Daily CyberSecurity
Critical Flaw in Fabio Load Balancer Allows HTTP Header Tampering & Access Bypass
A critical flaw in Fabio load balancer allows malicious clients to manipulate or strip HTTP headers, leading to potential access control bypass. Upgrade to 1.6.6.
11 views
Daily Writeups
⤷ Title: Aviation Industry Alert: 50,000+ Azure AD Records Exposed via Misconfigured API
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:33:38 +0000
════════════════════════
⌗ Tags: #Data Leak #API vulnerability #aviation #Azure AD #CloudSEK #cybersecurity #Data Breach #Data Exposure #Microsoft Graph #misconfiguration #PII
Daily CyberSecurity
Aviation Industry Alert: 50,000+ Azure AD Records Exposed via Misconfigured API
Over 50,000 Microsoft Azure AD user records from the aviation industry were exposed due to a misconfigured, unauthenticated API, revealing sensitive data and posing major risks.
16 views
Daily Writeups
⤷ Title: CISA Alert: Critical Flaws in Consilium Safety CS5000 Fire Panel Could Enable Remote Takeover, No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:30:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Consilium Safety #Critical Infrastructure #CS5000 #cybersecurity #default account #fire panel #hardcoded credentials #ICS #industrial control systems #Vulnerability
Daily CyberSecurity
CISA Alert: Critical Flaws in Consilium Safety CS5000 Fire Panel Could Enable Remote Takeover, No Patch
CISA warns of critical flaws (CVE-2025-41438, CVE-2025-46352) in Consilium Safety CS5000 Fire Panels, allowing remote access & disruption. Vendor won't patch.
12 views
Daily Writeups
⤷ Title: Critical Flaws in Veritas DLO Expose Systems to Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:26:58 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #apache Tomcat #CISA KEV #cybersecurity #data backup #endpoint protection #rce #Remote Code Execution #Veritas DLO
Daily CyberSecurity
Critical Flaws in Veritas DLO Expose Systems to Remote Code Execution
Veritas DLO has critical vulnerabilities (CVE-2024-38475, CVE-2025-24813) in bundled Apache components, leading to RCE. Upgrade immediately to prevent exploitation.
12 views
Daily Writeups
⤷ Title: Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:22:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2025_48045 #CVE_2025_48046 #CVE_2025_48047 #cybersecurity #default credentials #Enterprise Security #MICI NetFax #Rapid7 #rce #Remote Code Execution #unpatched #Vulnerability
Daily CyberSecurity
Critical RCE Flaws in MICI NetFax Server Unpatched, Vendor Refuses Fix
Rapid7 found critical RCE flaws in MICI NetFax (versions < 3.0.1.0) via default credentials & command injection. Vendor refuses to patch, advising no internet exposure.
12 views
Daily Writeups
⤷ Title: PyPI Supply Chain Attack Steals Solana Private Keys via Covert Monkey-Patching
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:19:33 +0000
════════════════════════
⌗ Tags: #Malware #Blockchain #cryptocurrency #cybersecurity #Infostealer #malware #open_source #private keys #PyPI #Python #Socket Security #Solana #supply chain attack
Daily CyberSecurity
PyPI Supply Chain Attack Steals Solana Private Keys via Covert Monkey-Patching
A sophisticated PyPI supply chain attack, "cappership," steals Solana private keys by monkey-patching, leveraging transitive dependencies and blockchain exfiltration.
21 views
Daily Writeups
⤷ Title: NetSPI Details Multiple Local Privilege Escalation Vulnerabilities in SonicWall NetExtender
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:13:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_23009 #CVE_2025_23010 #cybersecurity #LPE #NetExtender #NetSPI #privilege escalation #SonicWall #vpn #Vulnerability #windows
Daily CyberSecurity
NetSPI Details Multiple Local Privilege Escalation Vulnerabilities in SonicWall NetExtender
High-risk LPE vulnerabilities in SonicWall NetExtender for Windows (CVE-2025-23009, CVE-2025-23010) allow SYSTEM access or DoS. Patch immediately to version 10.3.2.
16 views
Daily Writeups
⤷ Title: Path Traversal at Scale: Study Uncovers 1,756 Vulnerable GitHub Projects and LLM Contamination
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:02:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ChatGPT #code reuse #Copilot #CWE_22 #Cybersecurity Research #github #LLM #Node.js #open_source #Path Traversal #security vulnerability #Supply Chain Security
Daily CyberSecurity
Path Traversal at Scale: Study Uncovers 1,756 Vulnerable GitHub Projects and LLM Contamination
A study reveals widespread path traversal (CWE-22) in open-source projects, exacerbated by LLMs generating insecure code. Automated detection and patching are critical.
12 views
Daily Writeups
⤷ Title: Reconocimiento Web con Katana: Guía Completa para Empezar en Bug Bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:02:28 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #bug_bounty #penetration_testing #ethical_hacking
Medium
Reconocimiento Web con Katana: Guía Completa para Empezar en Bug Bounty
Aprende a usar Katana para descubrir rutas y endpoints ocultos. Guía ideal para tus inicios en Bug Bounty.
14 views