Daily Writeups
@Daily_Writeups
4.08K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.08K subscribers
Daily Writeups
⤷ Title: The Admin’s Shadow: How Hackers Turned the Nezha Monitoring Tool into a Stealth RAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 02:38:40 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security 2025 #Evasion #Nezha #NT AUTHORITY\SYSTEM #Ontinue #open source #post_exploitation #Qualys #RAT #RMM Abuse #Root Access
Information Security News
The Admin’s Shadow: How Hackers Turned the Nezha Monitoring Tool into a Stealth RAT
Threat actors have begun repurposing a legitimate server monitoring tool as a ready-made platform for remotely controlling systems that have already been compromised. According to the Ontinue Cybe…
18 views
Daily Writeups
⤷ Title: The Ghost in the Machine: Master Stealth with the Orsted C2 Framework
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:44:26 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AMSI Evasion #Command and Control #cybersecurity #Go_lang #Ligolo_ng #Orsted C2 #Penetration Testing #post_exploitation #red teaming #Sandbox Deception
Penetration Testing Tools
The Ghost in the Machine: Master Stealth with the Orsted C2 Framework
Orsted C2 is a modular Go framework featuring sandbox deception, AMSI/ETW evasion, and native Ligolo-ng pivoting for advanced red team simulations.
37 views
Daily Writeups
⤷ Title: The Nim Shadow: Conquest C2 Redefines Stealth for 2026 Red Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 03:47:54 +0000
════════════════════════
⌗ Tags: #Open Source Tool #adversary simulation #Conquest C2 #Dear ImGui #evasion techniques #InfoSec 2026 #Monarch Agent #Nim Programming #Penetration Testing #post_exploitation #red teaming
Information Security News
The Nim Shadow: Conquest C2 Redefines Stealth for 2026 Red Teams
Conquest is a feature-rich, extensible and malleable command & control/post-exploitation framework developed for penetration testing and adversary simulation. Conquest’s team server, ope…
18 views
Daily Writeups
⤷ Title: Exploiting Redis and ROP: A Full Walkthrough of the Blackgate CTF Machine
════════════════════════
𐀪 Author: MGMK
════════════════════════
ⴵ Time: Sun, 01 Feb 2026 00:09:43 GMT
════════════════════════
⌗ Tags: #post_exploitation #security_assessments #misconfiguration #privilege_escalation #penetration_testing
Medium
Exploiting Redis and ROP: A Full Walkthrough of the Blackgate CTF Machine
In this write-up, we’ll walk through the exploitation of the Blackgate Linux machine. Initial access is achieved through a misconfigured…
30 views
Daily Writeups
⤷ Title: Invisible Intruder: “ShadowHS” Malware Weaponizes Hackshell on Linux
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:22:02 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #Cyble Research #Fileless attack #GSocket #Hackshell #Linux Malware #Memory injection #post_exploitation #ShadowHS #threat intelligence
Daily CyberSecurity
Invisible Intruder: "ShadowHS" Malware Weaponizes Hackshell on Linux
Cyble uncovers "ShadowHS," a fileless Linux malware weaponizing hackshell. It uses GSocket tunneling to evade firewalls and kill rival bots.
21 views
Daily Writeups
⤷ Title: Post-Exploitation Toolbox: 25 Commands from Foothold to Domain Admin Mastery
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 07:20:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #post_exploitation #domains #penetration_testing
Medium
Post-Exploitation Toolbox: 25 Commands from Foothold to Domain Admin Mastery
Ever landed a shell and hit that “now what?” moment? You’re not alone — most pentesters and ethical hackers admit post-exploitation is…
27 views
Daily Writeups
⤷ Title: 10 Administrator-to-SYSTEM Privilege Escalation Techniques Every Red Teamer MUST Master
════════════════════════
𐀪 Author: Candy Wong
════════════════════════
ⴵ Time: Sun, 01 Mar 2026 16:11:45 GMT
════════════════════════
⌗ Tags: #offensive_security #hacking #privilege_escalation #red_team #post_exploitation
Medium
10 Administrator-to-SYSTEM Privilege Escalation Techniques Every Red Teamer MUST Master
Having local admin is not the end goal. NT AUTHORITY\SYSTEM is. This deep technical breakdown covers 10 battle-tested methods — from Potato…
28 views
Daily Writeups
⤷ Title: Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:42:22 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure #Credential Theft #DPAPI #EntraID #NGC tokens #post_exploitation #red teaming #SpecterBroker #Tech News 2026 #Token Broker #WAM #Windows Authentication Manager
Penetration Testing Tools
Stealing the Keys to the Cloud: SpecterBroker Unveils the Secrets of Windows Token Broker
SpecterBroker is a new post-exploitation powerhouse that extracts and decrypts Windows authentication tokens (WAM/TBRes) for full EntraID and Azure takeover.
25 views
Daily Writeups
⤷ Title: PNPT Privilege Escalation (PrivEsc) Cheat Sheet
════════════════════════
𐀪 Author: jaejun835
════════════════════════
ⴵ Time: Sat, 07 Mar 2026 02:26:49 GMT
════════════════════════
⌗ Tags: #linux_security #ethical_hacking #post_exploitation #privilege_escalation #windows_security
Medium
PNPT Privilege Escalation (PrivEsc) Cheat Sheet
This is a cheat sheet for privilege escalation techniques used in TCM Security’s PNPT (Practical Network Penetration Tester) certification…
30 views
Daily Writeups
⤷ Title: The Intel “AppDomain” Hijack: Unmasking a Sophisticated Post-Exploitation Framework
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:26:54 +0000
════════════════════════
⌗ Tags: #Malware #AppDomain Manager Hijacking #Cobalt Strike #Cyfirma #DLL hijacking #Domain Fronting #Financial Sector Security #IAStorHelp.exe #infosec #intel #JIT Trampolining #Memory Forensics #post_exploitation framework
Daily CyberSecurity
The Intel "AppDomain" Hijack: Unmasking a Sophisticated Post-Exploitation Framework
CYFIRMA uncovers an elite stealth framework hijacking signed Intel utilities via AppDomain Manager. It targets EMEA finance with undetectable memory-only code.
15 views
Daily Writeups
⤷ Title: BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:49:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure AD #BAADTokenBroker #cloud security #Device_Bound Keys #Kerberos #Microsoft Entra ID #NT Hash #post_exploitation #PRT Cookie #red teaming #TGT
Penetration Testing Tools
BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
Master Microsoft Entra ID post-exploitation with BAADTokenBroker. Learn how to request PRT cookies and abuse Entra Kerberos to acquire TGTs and NT hashes.
32 views
Daily Writeups
⤷ Title: The SNEK Initiative Drops “Eris”: New Post-Exploit Framework Abuses Windows Fax Service for SYSTEM Root
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:29:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Session Takeover #Eris Exploit #local privilege escalation #MinGW_w64 Compilation #Post_Exploitation Tool #Registry Hijack #Silent Cleanup Task #The SNEK Initiative #User Account Control Bypass #Windows Fax Service
Penetration Testing Tools
The SNEK Initiative Drops "Eris": New Post-Exploit Framework Abuses Windows Fax Service for SYSTEM Root
A novel exploitation framework designed to escalate execution privileges within the Windows environment, designated as Eris, has emerged
15 views
Daily Writeups
⤷ Title: Metasploit: Post-Exploitation | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 08:59:53 GMT
════════════════════════
⌗ Tags: #post_exploitation #cybersecurity #tryhackme #pentesting #metasploit
Medium
Metasploit: Post-Exploitation | TryHackMe
Use Meterpreter to harvest credentials, escalate privileges, and explore compromised systems.
20 views
Daily Writeups
⤷ Title: Task 3.1 -> Exploitation & Post-Exploitation (postexploit)
════════════════════════
𐀪 Author: Gunay Safarzadeh
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 18:19:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #post_exploitation
Medium
Task 3.1 -> Exploitation & Post-Exploitation (postexploit)
Giriş
18 views
Daily Writeups
⤷ Title: Task 3.1 -> Exploitation & Post-Exploitation (rppsempire)
════════════════════════
𐀪 Author: Gunay Safarzadeh
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 19:40:07 GMT
════════════════════════
⌗ Tags: #post_exploitation #cybersecurity #tryhackme
Medium
Task 3.1 -> Exploitation & Post-Exploitation (rppsempire)
Giriş
38 views
Daily Writeups
⤷ Title: The Complete Pentest Methodology: A Step by Step Practical Guide (Part 1)
════════════════════════
𐀪 Author: Abdelrhman mohamed
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 17:32:15 GMT
════════════════════════
⌗ Tags: #post_exploitation #exploit #cybersecurity #information_security #penetration_testing
Medium
The Complete Pentest Methodology: A Step by Step Practical Guide (Part 1)
2 in the cage, 1 is free.
12 views
Daily Writeups
⤷ Title: Metasploit: Meterpreter — In-Memory Execution, Command Vectors, and Post-Exploitation
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 10:22:06 GMT
════════════════════════
⌗ Tags: #tryhackme #post_exploitation #cybersecurity #meterpreter #metasploit
Medium
Metasploit: Meterpreter — In-Memory Execution, Command Vectors, and Post-Exploitation
Introduction
21 views
Daily Writeups
⤷ Title: Miraak Framework Turns PostgreSQL Into a Covert C2 Channel
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 14:08:41 +0000
════════════════════════
⌗ Tags: #Malware #Blackpoint Cyber #Cobalt Strike BOF #Miraak #post_exploitation #PostgreSQL C2
Information Security News
Miraak Framework Turns PostgreSQL Into a Covert C2 Channel
Malicious tools strive to blend into ordinary network traffic, but the new Miraak framework has gone further and transformed a cloud PostgreSQL database into a full-fledged channel for controlling…
19 views
Daily Writeups
⤷ Title: Post-Exploitation Challenge — TryHackMe
════════════════════════
𐀪 Author: S4F4L
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 19:08:18 GMT
════════════════════════
⌗ Tags: #post_exploitation #meterpreter #metasploit #ethical_hacking #cybersecurity
Medium
Post-Exploitation Challenge — TryHackMe
Write-up for the Task-5 of the Metasploit:Post-Exploitation challenge
28 views
Daily Writeups
⤷ Title: ML in Post-Exploitation
════════════════════════
𐀪 Author: Funcybot
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 12:14:59 GMT
════════════════════════
⌗ Tags: #machine_learning #computer_science #hacking #post_exploitation #cybersecurity
Medium
ML in Post-Exploitation
The Algorithmic Pivot: How ML is Rewriting the Post-Exploitation Playbook
30 views