Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Enumerating Subdomains With Python
════════════════════════
𐀪 Author: Aleksa Zatezalo
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:45:57 GMT
════════════════════════
⌗ Tags: #python #hacking_tools #hacking
Medium
Enumerating Subdomains With Python
Introduction
23 views
Daily Writeups
⤷ Title: Android Hacking 101: Beginner’s Guide to Penetration Testing
════════════════════════
𐀪 Author: Pentester Club
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:13:08 GMT
════════════════════════
⌗ Tags: #hacking #ctf #cybersecurity #cybercrime #android
Medium
Android Hacking 101: Beginner’s Guide to Penetration Testing 📱💥
“The only way to truly secure something is to know how to break it.”
20 views
Daily Writeups
⤷ Title: Penetration Testing of AI: Why and How?
════════════════════════
𐀪 Author: Sandeep Saxena
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:45:16 GMT
════════════════════════
⌗ Tags: #infosec #info_sec_writeups #penetration_testing #cybersecurity
Medium
Penetration Testing of AI: Why and How?
Artificial Intelligence (AI) systems have rapidly evolved from research projects to business-critical assets powering fraud detection…
21 views
Daily Writeups
⤷ Title: Cybersecurity in 2025: Leveraging AI Without Losing Control
════════════════════════
𐀪 Author: Sandeep Saxena
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:44:26 GMT
════════════════════════
⌗ Tags: #infosec #infosec_write_ups #cybersecurity #ai
Medium
Cybersecurity in 2025: Leveraging AI Without Losing Control
Imagine an AI system capable of generating secure code snippets, scanning millions of lines for vulnerabilities in seconds, and triaging…
18 views
Daily Writeups
⤷ Title: Data & Statistics Tools For OSINT Investigators
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:48:36 GMT
════════════════════════
⌗ Tags: #statistics #data #osint_investigation #cybersecurity #osint
Medium
Data & Statistics Tools For OSINT Investigators
Must-have tools for OSINT investigators
17 views
Daily Writeups
⤷ Title: Web Monitoring Tools For OSINT Investigation
════════════════════════
𐀪 Author: loyalonlytoday
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:46:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint #monitoring #osint_investigation #ethical_hacking
Medium
Web Monitoring Tools For OSINT Investigation
must-have tools for OSINT investigators
18 views
Daily Writeups
⤷ Title: PortSwigger Lab: Exploiting a mass assignment vulnerability (API Testing)
════════════════════════
𐀪 Author: awes0meness
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:46:27 GMT
════════════════════════
⌗ Tags: #web_app_security #web_app_pentesting #cybersecurity #penetration_testing #api_penetration_testing
Medium
PortSwigger Lab: Exploiting a mass assignment vulnerability (API Testing)
To solve the lab, find and exploit a mass assignment vulnerability to buy a Lightweight l33t Leather Jacket. You can log in to your own…
33 views
Daily Writeups
⤷ Title: How I Use netstat and ss to Catch Suspicious Connections on Linux
════════════════════════
𐀪 Author: Faruk Ahmed
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:30:17 GMT
════════════════════════
⌗ Tags: #linux #cybersecurity #ubuntu #devops
Medium
How I Use netstat and ss to Catch Suspicious Connections on Linux
Intro:  Sometimes the biggest threats to your Linux server aren’t in the logs — they’re quietly hiding in plain sight, listening on open…
34 views
Daily Writeups
⤷ Title: XINTRA - Husky Corp Lab Walkthrough
════════════════════════
𐀪 Author: QhtSec
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:28:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #walkthrough #xintra #digital_forensics #dfir
Medium
XINTRA - Husky Corp Lab Walkthrough
SCOPING NOTE
35 views
Daily Writeups
⤷ Title: PortSwigger Lab: Finding and exploiting an unused API endpoint (API Testing)
════════════════════════
𐀪 Author: awes0meness
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 01:44:14 GMT
════════════════════════
⌗ Tags: #portswigger_lab #cybersecurity #web_app_security #web_app_pentesting #burpsuite
Medium
Portswigger Lab: Finding and exploiting an unused API endpoint
To solve the lab, exploit a hidden API endpoint to buy a Lightweight l33t Leather Jacket. You can log in to your own account using the…
26 views
Daily Writeups
⤷ Title: Browser Extension Recon: Finding Bugs in Official Extensions of Web Platforms
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:52:52 GMT
════════════════════════
⌗ Tags: #penetration_testing #chrome #bug_bounty #tips_and_tricks #technology
Medium
Browser Extension Recon: Finding Bugs in Official Extensions of Web Platforms
From XSS to Token Theft — How to Analyze, Reverse Engineer, and Exploit Browser Extensions for Bounties
34 views
Daily Writeups
⤷ Title: Very Vulnerable Management API (VVMA)
════════════════════════
𐀪 Author: Easpy
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:59:30 GMT
════════════════════════
⌗ Tags: #api_security #api_penetration_testing #owasp_api_security_top_10 #penetration_testing #security_testing
Medium
Very Vulnerable Management API (VVMA)
Very Vulnerable Management API (VVMA) merupakan API RESTful yang dibuat rentan dengan menggunakan Node.Js untuk tujuan pembelajaran dan…
20 views
Daily Writeups
⤷ Title: X ETH Passive Income Strategies for 2025
════════════════════════
𐀪 Author: $TY (X)
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:49:48 GMT
════════════════════════
⌗ Tags: #xs #crypto #ethereum #web3 #ties
Medium
X ETH Passive Income Strategies for 2025
A Beginner's Guide To Staking $TY from X
35 views
Daily Writeups
⤷ Title: Step-by-Step Guide to Acquiring X
════════════════════════
𐀪 Author: $X (X Community)
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 02:14:51 GMT
════════════════════════
⌗ Tags: #crypto_guide #ethereum #xs #x_community
Medium
Step-by-Step Guide to Acquiring X
An easy guide to securing X.
37 views
Daily Writeups
⤷ Title: Harden-Runner: EDR for CI/CD Stops Supply Chain Attacks Cold
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 04:06:03 +0000
════════════════════════
⌗ Tags: #Open Source Tool #CI/CD #Continuous Delivery #Continuous Integration #cybersecurity #EDR #Endpoint Detection and Response #GitHub Actions #Harden_Runner #security #StepSecurity #supply chain attack
Penetration Testing Tools
Harden-Runner: EDR for CI/CD Stops Supply Chain Attacks Cold
StepSecurity's "Harden-Runner" is a CI/CD security agent functioning as an EDR for runners, preventing exfiltration, detecting tampering, and securing over a million workflow runs weekly.
36 views
Daily Writeups
⤷ Title: Fedora Delays 32-bit Support End: Community Outcry Saves Gaming & Legacy Apps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:34:17 +0000
════════════════════════
⌗ Tags: #Linux #32_bit Support #Bazzite #Community Debate #Fedora Linux #gaming #Linux distribution #Multilib #open source #Wayland #X.org #Xlibre
Penetration Testing Tools
Fedora Delays 32-bit Support End: Community Outcry Saves Gaming & Legacy Apps
Fedora Linux rejected a proposal to end 32-bit support, delaying the removal of multilib due to community backlash, especially from the gaming sector, and dismissing the Xlibre proposal.
26 views
Daily Writeups
⤷ Title: AI Chatbots Are Leading Users to Phishing Sites: New Report Reveals Dangerous “AI Search Poisoning” Threat
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:31:07 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Chatbots #Brand Impersonation #cybersecurity #google #LLM #Netcraft #OpenAI #phishing #Scam #Search Poisoning #Social Engineering
Penetration Testing Tools
AI Chatbots Are Leading Users to Phishing Sites: New Report Reveals Dangerous "AI Search Poisoning" Threat
AI chatbots frequently suggest incorrect or fake websites for major brands, creating a new "AI search poisoning" threat where attackers can register these domains for phishing scams.
21 views
Daily Writeups
⤷ Title: CISA Warns: TeleMessage TM SGNL Actively Exploited for Data Leaks, Patch by July 22
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:28:08 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2025_48927 #CVE_2025_48928 #cybersecurity #data leak #Exploited in Wild #Government #Heap Dump #Memory Dump #Spring Boot Actuator #TeleMessage TM SGNL #vulnerability
Penetration Testing Tools
CISA Warns: TeleMessage TM SGNL Actively Exploited for Data Leaks, Patch by July 22
CISA warns of active exploitation of TeleMessage TM SGNL (CVE-2025-48927, CVE-2025-48928), exposing memory dumps & passwords. Federal agencies must patch or cease use by July 22.
19 views
Daily Writeups
⤷ Title: Global E-commerce Fraud Ring Uncovered: Fake Apple, Nordstrom, Brooks Brothers Sites Steal Credit Cards
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:26:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apple #Brooks Brothers #China #Credit Card Theft #E_commerce Fraud #Mexico #Nordstrom #Online Scams #phishing #Retail #Silent Push
Penetration Testing Tools
Global E-commerce Fraud Ring Uncovered: Fake Apple, Nordstrom, Brooks Brothers Sites Steal Credit Cards
A global e-commerce fraud campaign uses thousands of fake retail websites mimicking Apple, Nordstrom, and more, to steal credit card data, with roots tied to Chinese developers.
14 views
Daily Writeups
⤷ Title: Urgent Cisco ISE/ISE-PIC Alert: Critical RCE Flaw (CVSS 10.0) Allow Unauthenticated Root Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 03:23:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cisco #CVE_2025_20309 #CVSS 10.0 #cybersecurity #Identity Services Engine #ISE #ISE_PIC #RCE #remote code execution #Root Privileges #Unauthenticated #vulnerability
Penetration Testing Tools
Urgent Cisco ISE/ISE-PIC Alert: Critical RCE Flaw (CVSS 10.0) Allow Unauthenticated Root Access
Cisco warns of a critical flaw (CVE-2025-20309, CVSS 10.0) in ISE and ISE-PIC allowing unauthenticated remote root code execution. Apply patches immediately.
17 views