Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Digital Forensics with Autopsy: A Comprehensive Guide
════════════════════════
𐀪 Author: Arham khan
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 21:57:27 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
Digital Forensics with Autopsy: A Comprehensive Guide
Exploring the depths of digital evidence analysis using one of the most powerful open-source forensic tools
20 views
Daily Writeups
⤷ Title: IIT Delhi Achieves Quantum Breakthrough: Wireless Communication Over 1 Kilometer
════════════════════════
𐀪 Author: QuantumGenie
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 21:43:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #communication #india #wireless #quantum_computing
Medium
IIT Delhi Achieves Quantum Breakthrough: Wireless Communication Over 1 Kilometer
In a groundbreaking development for quantum communication, researchers at the Indian Institute of Technology (IIT) Delhi, in collaboration…
23 views
Daily Writeups
⤷ Title: TryHackMe | SQLMap: The Basics — PRACTICAL EXERCISE
════════════════════════
𐀪 Author: the Journal of a Cyber Security Enthusiast
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 21:24:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #tryhackme_walkthrough #sql #sqlmap
Medium
TryHackMe | SQLMap: The Basics — PRACTICAL EXERCISE
In this post, we’ll only focus on the Practical Exercise. Let’s begin!
30 views
Daily Writeups
⤷ Title: Day 1 of 21 — Start with TryHackMe
════════════════════════
𐀪 Author: Myshawne Stallings
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 20:58:58 GMT
════════════════════════
⌗ Tags: #training #tryhackme #security #careers #learn
Medium
Day 1 of 21 — Start with TryHackMe
How to Use TryHackMe Room
43 views
Daily Writeups
⤷ Title: The importance of managing your SEO strategy in a safe way
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 18 Jun 2025 14:13:00 +0000
════════════════════════
⌗ Tags: #Technology
Hackread
The importance of managing your SEO strategy in a safe way
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
32 views
Daily Writeups
⤷ Title: Nali: offline tool for querying IP geographic information and CDN provider
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:11:14 +0000
════════════════════════
⌗ Tags: #OSINT _ Open Source Intelligence #querying IP geographic information
Penetration Testing Tools
Nali: offline tool for querying IP geographic information and CDN provider
I want to query the IP geographic information and CDN service provider on the terminal, then found the Nali tool.
29 views
Daily Writeups
⤷ Title: Varalyze: The All-in-One Threat Intelligence Suite Revolutionizing Security Triage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:08:34 +0000
════════════════════════
⌗ Tags: #Data Forensics #Network Defense #API #cybersecurity #Incident Response #python #Security Automation #Security Tools #threat analysis #threat intelligence #Varalyze
Penetration Testing Tools
Varalyze: The All-in-One Threat Intelligence Suite Revolutionizing Security Triage
Varalyze is a new threat intelligence tool suite that automates data gathering, correlation, and reporting from various sources, streamlining security event triaging for defensive teams.
21 views
Daily Writeups
⤷ Title: Apache Traffic Server Flaws Allow Access Bypass & Remote DoS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:42:13 +0000
════════════════════════
⌗ Tags: #Vulnerability #access control bypass #Apache Traffic Server #ATS #cybersecurity #Denial of Service #dos #ESI Plugin #PROXY Protocol
Daily CyberSecurity
Apache Traffic Server Flaws Allow Access Bypass & Remote DoS
Two critical flaws in Apache Traffic Server (CVE-2025-31698, CVE-2025-49763) allow IP-based ACL bypass and remote DoS via ESI plugin.
18 views
Daily Writeups
⤷ Title: Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:39:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Linux #Local Privilege Escalation #LPE #PAM #pam_namespace #Pluggable Authentication Modules #privilege escalation #race condition #Symlink Attack
Daily CyberSecurity
Root Access Unlocked: How a pam_namespace Flaw Lets Attackers Elevate Privileges on Linux
A high-severity flaw (CVE-2025-6020) in Linux PAM's pam_namespace allows unprivileged users to gain root via symlink attacks and race conditions.
24 views
Daily Writeups
⤷ Title: Tor Meets Docker: Sophisticated Crypto-Mining Campaign Hijacks Misconfigured APIs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:35:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anonymity #Cloud Security #Cryptojacking #cryptomining #cybersecurity #docker #Docker Remote API #threat actor #Tor network #Trend Micro #XMRig
Daily CyberSecurity
Tor Meets Docker: Sophisticated Crypto-Mining Campaign Hijacks Misconfigured APIs
Trend Micro uncovers a new attack method using misconfigured Docker Remote APIs and the Tor network to stealthily deploy cryptominers and establish persistent access.
18 views
Daily Writeups
⤷ Title: MySQL Servers Under Attack: Threat Actors Exploiting UDFs to Inject Gh0stRAT, XWorm & Zoho Agents
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:30:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ASEC #cyberattack #cybersecurity #database security #Gh0stRAT #HpLoader #mysql #Remote Access Trojan #UDF #User Defined Functions #XWorm #Zoho ManageEngine
Daily CyberSecurity
MySQL Servers Under Attack: Threat Actors Exploiting UDFs to Inject Gh0stRAT, XWorm & Zoho Agents
Threat actors are actively compromising poorly managed MySQL servers, using UDFs to inject Gh0stRAT, XWorm, HpLoader, and legitimate Zoho agents for full system control and data theft.
18 views
Daily Writeups
⤷ Title: SSRF Flaw (CVE-2025-6087) in OpenNext for Cloudflare Allows Unauthenticated Content Proxying
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:27:55 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloudflare #CVE_2025_6087 #cybersecurity #Image Proxy #Next.js #OpenNext #Server_Side Request Forgery #ssrf #Vulnerability #Web Security
Daily CyberSecurity
SSRF Flaw (CVE-2025-6087) in OpenNext for Cloudflare Allows Unauthenticated Content Proxying
A critical SSRF flaw (CVE-2025-6087) in @opennextjs/cloudflare allows unauthenticated users to proxy arbitrary remote content via /_next/image endpoint.
21 views
Daily Writeups
⤷ Title: Elastic Uncovers Stealthy Campaign Using GHOSTPULSE and ARECHCLIENT2 Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:22:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arechclient2 #ClickFix #cybersecurity #Elastic Security Labs #GHOSTPULSE #Infostealer #malware #phishing #rat #Remote Access Trojan #SecTopRAT #social engineering
Daily CyberSecurity
Elastic Uncovers Stealthy Campaign Using GHOSTPULSE and ARECHCLIENT2 Malware
Elastic uncovers a sophisticated ClickFix campaign deploying the GHOSTPULSE loader to deliver ARECHCLIENT2 malware, leveraging social engineering for credential theft and remote access.
15 views
Daily Writeups
⤷ Title: Ransomware Gang Qilin Rises Amid Collapse of Major Gangs Like RansomHub and LockBit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:19:57 +0000
════════════════════════
⌗ Tags: #Malware #BlackLock #cyberattack #Cybercrime #Cybereason #DragonForce #Everest #LockBit #Qilin #RaaS #RansomHub #ransomware #Ransomware_as_a_Service
Daily CyberSecurity
Ransomware Gang Qilin Rises Amid Collapse of Major Gangs Like RansomHub and LockBit
Qilin ransomware is rapidly dominating the RaaS landscape, as rivals like RansomHub and LockBit face collapse, internal chaos, and public defacements by "XOXO from Prague."
20 views
Daily Writeups
⤷ Title: Critical Auth Bypass Vulnerability (CVE-2025-51381) Found in KAON KCM3100 Gateways
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:12:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2025_51381 #cybersecurity #IoT security #KAON #KCM3100 #network_security #Vulnerability #Wi_Fi Gateway
Daily CyberSecurity
Critical Auth Bypass Vulnerability (CVE-2025-51381) Found in KAON KCM3100 Gateways
A critical flaw (CVE-2025-51381) in KAON KCM3100 Wi-Fi gateways allows local attackers to bypass authentication. Update firmware to version 1.4.8 immediately.
19 views
Daily Writeups
⤷ Title: Invoice to Infection: Sorillus RAT Campaign Strikes European Organizations
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:06:16 +0000
════════════════════════
⌗ Tags: #Malware #cyberattack #cybersecurity #Europe #MaaS #Mediafire #Ngrok #OneDrive #Orange Cyberdefense #phishing #rat #Remote Access Trojan #SambaSpy #Sorillus
Daily CyberSecurity
Invoice to Infection: Sorillus RAT Campaign Strikes European Organizations
A new wave of invoice-themed phishing emails is distributing the Sorillus RAT across Europe, leveraging legitimate platforms like OneDrive and Ngrok for stealthy delivery.
14 views
Daily Writeups
⤷ Title: XDSpy Resurfaces: Stealthy Cyber-Espionage Campaign Targets Governments with Obscure Windows LNK Flaw
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:00:11 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #cyber_espionage #Eastern Europe #HarfangLab #LNK Vulnerability #malware #russia #Windows Security #XDigo #XDSpy #ZDI_CAN_25373
Daily CyberSecurity
XDSpy Resurfaces: Stealthy Cyber-Espionage Campaign Targets Governments with Obscure Windows LNK Flaw
XDSpy, a covert cyber-espionage group, is back with a sophisticated campaign targeting governments, leveraging an obscure Windows LNK file parsing flaw and new XDigo malware
22 views
Daily Writeups
⤷ Title: Network Protocols 101: Categories, Types, and Common Ports Explained
════════════════════════
𐀪 Author: BlueTeam Bytes
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:53:32 GMT
════════════════════════
⌗ Tags: #networking #cybersecurity #computer_science #technology
Medium
Network Protocols 101: Categories, Types, and Common Ports Explained
In today’s connected world, every device you use relies on invisible rules to talk to each other seamlessly. These rules are known as…
19 views
Daily Writeups
⤷ Title: ⚠️ The Hidden Dangers of Using Public Wi-Fi: What You Need to Know
════════════════════════
𐀪 Author: Mustafa ahmed
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:39:08 GMT
════════════════════════
⌗ Tags: #cybersecurity
Medium
⚠️ The Hidden Dangers of Using Public Wi-Fi: What You Need to Know
Public Wi-Fi is everywhere — in cafes, airports, malls, and hotels. It’s convenient, fast, and free. But behind the ease lies a serious cybersecurity risk that most people don’t even think about…
18 views
Daily Writeups
⤷ Title: How I Hosted a Website on Amazon S3! | NextWork Cloud Project
════════════════════════
𐀪 Author: Angie
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 00:06:10 GMT
════════════════════════
⌗ Tags: #cloud #cybersecurity #cloud_security #blogging #aws
Medium
How I Hosted a Website on Amazon S3! | NextWork Cloud Project
DevOps + Cloud Security Blog Series by Angie
19 views