Daily Writeups
@Daily_Writeups
4.09K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.09K subscribers
Daily Writeups
⤷ Title: metlo: open-source API security platform
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:15:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #API security platform
Penetration Testing Tools
metlo: open-source API security platform
Metlo is an open-source API security platform which create an Inventory of all your API Endpoints, detect API attacks in real-time.
18 views
Daily Writeups
⤷ Title: Critical CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:43:15 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cloud Pak for Security #CVSS #cybersecurity #dos #IBM #Information Disclosure #patch #QRadar #Remote Code Execution #security advisory #Vulnerability
Daily CyberSecurity
Critical CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed
Critical CVSS 9.6 vulnerability in IBM QRadar & Cloud Pak for Security exposes systems to RCE & DoS. Patch immediately to secure your platforms.
13 views
Daily Writeups
⤷ Title: PoC Unleashed: Linux vsock Flaw Enables Privilege Escalation to Root
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:40:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #Kernel Exploit #Linux Kernel #PoC #privilege escalation #use after free #Virtualization Security #VMware vsock
Daily CyberSecurity
PoC Unleashed: Linux vsock Flaw Enables Privilege Escalation to Root
PoC reveals how a Linux vsock driver flaw enables local users to escalate privileges to root via a dangerous Use-After-Free vulnerability.
12 views
Daily Writeups
⤷ Title: Crocodilus Trojan Evolves: Android Malware Goes Global with New Seed Phrase Stealer and Contact Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:35:25 +0000
════════════════════════
⌗ Tags: #Malware #android #Banking Trojan #Crocodilus #cryptocurrency #Cybercrime #malware #mobile security #Seed Phrase Stealer #ThreatFabric
Daily CyberSecurity
Crocodilus Trojan Evolves: Android Malware Goes Global with New Seed Phrase Stealer and Contact Injection
Crocodilus, a rapidly evolving Android banking trojan, now targets global users, stealing crypto seed phrases and bypassing defenses.
10 views
Daily Writeups
⤷ Title: Samba Security Alert: Stale Group Data Poses Risk in Kerberos SMB Sessions, No Patch!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:30:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #authentication #Group Membership #Kerberos #samba #security #smb
Daily CyberSecurity
Samba Security Alert: Stale Group Data Poses Risk in Kerberos SMB Sessions, No Patch!
Samba vulnerability (CVE-2025-0620) exposes stale group data in Kerberos SMB sessions. Learn how this impacts security and mitigation.
19 views
Daily Writeups
⤷ Title: Alert: Malicious RubyGems Impersonate Fastlane Plugins, Steal CI/CD Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:24:29 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD #cybersecurity #Fastlane #malware #RubyGems #Software security #supply chain attack #Telegram #Typosquatting #Vietnam
Daily CyberSecurity
Alert: Malicious RubyGems Impersonate Fastlane Plugins, Steal CI/CD Data
Socket uncovers malicious RubyGems impersonating Fastlane plugins, stealing sensitive CI/CD data by rerouting Telegram API calls. Beware of fastlane-plugin-telegram-proxy!
14 views
Daily Writeups
⤷ Title: AI Interface Hijacked: Open WebUI Exploited for Cryptominers and Stealthy AI Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:19:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #AI #cryptomining #cybersecurity #Infostealer #LLM #malware #Open WebUI #Software Supply Chain #Sysdig #threat research
Daily CyberSecurity
AI Interface Hijacked: Open WebUI Exploited for Cryptominers and Stealthy AI Malware
Sysdig uncovers a campaign exploiting misconfigured Open WebUI instances to deploy AI-assisted cryptominers and infostealers, showcasing new threat vectors.
16 views
Daily Writeups
⤷ Title: New WordPress Malware Masquerades as Legit Plugin with Data Exfiltration and RCE Capabilities
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:13:47 +0000
════════════════════════
⌗ Tags: #Malware #administrator credentials #cybersecurity #data exfiltration #malware #plugin #Remote Code Execution #Website Security #Wordfence #wordpress
Daily CyberSecurity
New WordPress Malware Masquerades as Legit Plugin with Data Exfiltration and RCE Capabilities
Wordfence uncovers a sophisticated WordPress malware disguised as a legitimate plugin, stealing admin credentials & enabling remote code execution.
19 views
Daily Writeups
⤷ Title: New npm Packages Exposed: Crypto Drainers Targeting BSC & Ethereum Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:06:05 +0000
════════════════════════
⌗ Tags: #Malware #Binance Smart Chain #crypto exploit #cryptocurrency #Ethereum #javascript #malware #npm #security #supply chain attack
Daily CyberSecurity
New npm Packages Exposed: Crypto Drainers Targeting BSC & Ethereum Wallets
Socket discovers 4 malicious npm packages designed to drain crypto wallets on BSC & Ethereum, downloaded over 2,100 times.
14 views
Daily Writeups
⤷ Title: Identifying the AWS Account ID from a Public S3 Bucket (ACRTP)
════════════════════════
𐀪 Author: Makayla Ferrell
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:46:16 GMT
════════════════════════
⌗ Tags: #red_team #s3 #cybersecurity #hacking #aws
Medium
Identifying the AWS Account ID from a Public S3 Bucket (ACRTP)
This is a walkthrough of the Identifying the AWS Account ID from a Public S3 Bucket lab from PwnedLabs, which is part of the Amazon Cloud…
21 views
Daily Writeups
⤷ Title: Looting Public EBS Snapshots (ACRTP)
════════════════════════
𐀪 Author: Makayla Ferrell
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:27:06 GMT
════════════════════════
⌗ Tags: #aws #hacking #ec2 #red_team #cybersecurity
Medium
Looting Public EBS Snapshots (ACRTP)
This is a walkthrough of the Looting Public EBS Snapshots lab from PwnedLabs, which is part of the Amazon Cloud Red Team Professional…
18 views
Daily Writeups
⤷ Title: ACRTP: Hunting for Secrets in Git Repos
════════════════════════
𐀪 Author: Makayla Ferrell
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:43:41 GMT
════════════════════════
⌗ Tags: #aws #git #hacking #red_team #cybersecurity
Medium
Hunting for Secrets in Git Repos (ACRTP)
This is a walkthrough of the “Hunting for Secrets in Git Repos” lab from PwnedLabs. This lab is a CTF style challenge that focuses on…
15 views
Daily Writeups
⤷ Title: Ketika Hacker Menyerang Pembangkit Listrik: Kisah Nyata Ancaman di Dunia ICS/SCADA
════════════════════════
𐀪 Author: RootKitty7
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:36:02 GMT
════════════════════════
⌗ Tags: #scada #industrial #ci #infosec #cybersecurity
Medium
Ketika Hacker Menyerang Pembangkit Listrik: Kisah Nyata Ancaman di Dunia ICS/SCADA
Bayangkan ini: Sebuah kota tiba-tiba gelap gulita. Pompa air berhenti mengalir. Lalu lintas kacau karena lampu merah mati. Pabrik berhenti…
14 views
Daily Writeups
⤷ Title: Panduan Lengkap Hardening SSH di Linux: Kunci Server Anda dari Serangan Brute Force
════════════════════════
𐀪 Author: RootKitty7
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:53:33 GMT
════════════════════════
⌗ Tags: #server_security #sshhardening #servers #cybersecurity #linux
Medium
Panduan Lengkap Hardening SSH di Linux: Kunci Server Anda dari Serangan Brute Force
Bayangkan ini: Suatu pagi, Anda menerima notifikasi bahwa server Anda dihack. Setelah diperiksa, ternyata ada 1.000.000 percobaan login SSH…
18 views
Daily Writeups
⤷ Title: Defining Your Protect Surface
════════════════════════
𐀪 Author: Rob Forbes
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:25:18 GMT
════════════════════════
⌗ Tags: #zero_trust #cybersecurity #zero_trust_security
Medium
🔐 Defining Your Protect Surface
The First Stumbling Block to Actually Implementing Zero Trust
16 views
Daily Writeups
⤷ Title: CryptoBreaker
════════════════════════
𐀪 Author: EdCho
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:16:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #it #computer_science
Medium
CryptoBreaker 🔓💻
An advanced web-based decryption tool to easily crack encryption methods like Base64, AES, RSA, and more
15 views
Daily Writeups
⤷ Title: Mastering Nmap: A Deep Dive into Network Scanning Techniques — Part 1
════════════════════════
𐀪 Author: Seshu
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 01:15:17 GMT
════════════════════════
⌗ Tags: #nmap_command #nmap #penetration_testing #cybersecurity #nmap_scan
Medium
Mastering Nmap: A Deep Dive into Network Scanning Techniques — Part 1
Hey , cybersecurity folks! I’m excited to share a detailed Detailed Guide on the Use of Nmap with Various Flags— Part 1 from identifying…
19 views
Daily Writeups
⤷ Title: ThreatLens: Building a Real-World Threat Intelligence Dashboard with Python & Flask
════════════════════════
𐀪 Author: Teshera Kimbrough
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 00:56:39 GMT
════════════════════════
⌗ Tags: #open_source #python #cybersecurity #threat_intelligence #flask
Medium
ThreatLens: Building a Real-World Threat Intelligence Dashboard with Python & Flask
A practical walkthrough of creating a professional-grade threat intelligence tool from scratch
26 views
Daily Writeups
⤷ Title: CIOs Under Pressure: 5 Challenges to Tackle in 2025
════════════════════════
𐀪 Author: Eddy AZEBAZE
════════════════════════
ⴵ Time: Tue, 03 Jun 2025 23:57:19 GMT
════════════════════════
⌗ Tags: #digital_transformation #it_strategy #cio #cybersecurity #ai_governance
Medium
CIOs Under Pressure: 5 Challenges to Tackle in 2025
In 2025, the role of CIO has never been more critical or more exposed.  Faced with rising cyber risks, AI adoption pressure, talent…
38 views
Daily Writeups
⤷ Title: Actively Exploited Qualcomm GPU Zero-Days Added to CISA’s KEV Catalog
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Jun 2025 02:55:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Adreno #android #CISA #CVE_2025_21479 #CVE_2025_21480 #exploitation #GPU #KEV #memory corruption #mobile security #Qualcomm #use after free #Vulnerability #zero_day
Daily CyberSecurity
Actively Exploited Qualcomm GPU Zero-Days Added to CISA's KEV Catalog
CISA adds 3 actively exploited Qualcomm Adreno GPU flaws to KEV catalog. Android devices at risk from memory corruption and use-after-free bugs.
30 views