Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: CVE-2025-33028: WinZip Flaw Exposes Users to Silent Code Execution via MotW Bypass, No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 22 Apr 2025 00:40:39 +0000
════════════════════════
⌗ Tags: #Vulnerability #archive #Code Execution #CVE_2025_33028 #cybersecurity #Exploit #Mark_of_the_Web #MotW #security flaw #WinZip
Daily CyberSecurity
CVE-2025-33028: WinZip Flaw Exposes Users to Silent Code Execution via MotW Bypass, No Patch
A WinZip vulnerability (CVE-2025-33028) allows attackers to bypass Mark-of-the-Web (MotW) protection, enabling silent code execution via malicious archives.
16 views
Daily Writeups
⤷ Title: Unpatched Windows LNK Vulnerability Enables Remote Execution via UNC Path, PoC Releases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:50:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #EnvironmentVariableDataBlock #Microsoft Security #MotW #NTLM Hash Capture #Responder Tool #Shell Parsing #Shortcut Exploit #UNC Path Exploit #Windows LNK
Daily CyberSecurity
Unpatched Windows LNK Vulnerability Enables Remote Execution via UNC Path, PoC Releases
A researcher reveals an unpatched Windows LNK flaw that allows UNC-based remote execution and NTLM hash capture. Microsoft declined to issue a fix.
22 views
Daily Writeups
⤷ Title: Unpatched Windows LNK Vulnerability Allows Attacker to Capture NTLM Hash
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 30 Apr 2025 00:50:03 +0000
════════════════════════
⌗ Tags: #Vulnerability #EnvironmentVariableDataBlock #Microsoft Security #MotW #NTLM Hash Capture #Responder Tool #Shell Parsing #Shortcut Exploit #UNC Path Exploit #Windows LNK
Daily CyberSecurity
Unpatched Windows LNK Vulnerability Allows Attacker to Capture NTLM Hash
A researcher reveals an unpatched Windows LNK flaw that allows UNC-based remote execution and NTLM hash capture. Microsoft declined to issue a fix.
17 views
Daily Writeups
⤷ Title: FileFix: New Windows Technique Bypasses Mark of the Web for Silent Script Execution
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 06:36:29 +0000
════════════════════════
⌗ Tags: #Vulnerability #bypass #cybersecurity #FileFix #HTA #HTML Application #Mark of the Web #MoTW #mr.d0x #Social Engineering #vulnerability #windows
Penetration Testing Tools
FileFix: New Windows Technique Bypasses Mark of the Web for Silent Script Execution
FileFix is a new Windows technique that allows silent script execution by bypassing Mark of the Web. Attackers trick users into saving and renaming HTML pages to .HTA files.
12 views
Daily Writeups
⤷ Title: LNK Stomping: Attackers Bypass Windows Security by Stripping the ‘Mark of the Web’
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 00:00:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AhnLab #CVE_2024_38217 #cyberattack #evasion #LNK Stomping #Mark_of_the_Web #MotW #Windows Security
Daily CyberSecurity
LNK Stomping: Attackers Bypass Windows Security by Stripping the 'Mark of the Web'
A vulnerability dubbed "LNK Stomping" (CVE-2024-38217) is actively used to strip the 'Mark of the Web' from LNK files, bypassing Windows security policies.
14 views