Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: Installing Metasploitable 3 on QEMU Ubuntu
════════════════════════
𐀪 Author: Stevanus Banu
════════════════════════
ⴵ Time: Thu, 05 Jun 2025 11:59:00 GMT
════════════════════════
⌗ Tags: #ethical_hacking #vulnerable_machine #cybersecurity #computers #virtualization
Medium
Installing Metasploitable 3 on QEMU Ubuntu
If you want to build your portfolio in ethical hacking or are just learning ethical hacking hands-on, installing Metasploitable 3 on your…
83 views
Daily Writeups
⤷ Title: VAmPI: Vulnerable REST API with OWASP top 10 vulnerabilities
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 15 Jun 2025 00:59:25 +0000
════════════════════════
⌗ Tags: #Arsenal Lab #Vulnerable REST API
Penetration Testing Tools
VAmPI: Vulnerable REST API with OWASP top 10 vulnerabilities
VAmPI is a vulnerable API made with Flask and it includes vulnerabilities from the OWASP top 10 vulnerabilities for APIs.
31 views
Daily Writeups
⤷ Title: TerraformGoat: “Vulnerable by Design” multi cloud deployment tool
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 27 Jul 2025 23:26:56 +0000
════════════════════════
⌗ Tags: #Open Source Tool #TerraformGoat #Vulnerable by Design
Penetration Testing Tools
TerraformGoat: "Vulnerable by Design" multi cloud deployment tool
TerraformGoat is HuoCorp research lab's "Vulnerable by Design" multi cloud deployment tool. supported cloud vendors include AWS, Azure, Google
4 views
Daily Writeups
⤷ Title: Password Managers Vulnerable to Data Theft via Clickjacking
════════════════════════
𐀪 Author: Securis360 Inc.
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 16:26:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerable_data
Medium
Password Managers Vulnerable to Data Theft via Clickjacking
Clickjacking, also known as UI redressing, is a malicious technique where attackers trick users into clicking on invisible or disguised…
21 views
Daily Writeups
⤷ Title: Silver Fox APT Exploits Microsoft-Signed Driver to Deploy ValleyRAT Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Sep 2025 00:04:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #BYOVD #Check Point Research #cybersecurity #Microsoft #Silver Fox #ValleyRAT #vulnerable driver
Daily CyberSecurity
Silver Fox APT Exploits Microsoft-Signed Driver to Deploy ValleyRAT Backdoor
A new report reveals the Silver Fox APT group is abusing a Microsoft-signed vulnerable driver to disable endpoint security and deploy the ValleyRAT backdoor.
11 views
Daily Writeups
⤷ Title: Silver Fox APT Exploits a Microsoft-Signed Driver to Bypass Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 03 Sep 2025 07:57:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #cybersecurity #malware #Silver Fox #ValleyRAT #vulnerable driver #windows
Penetration Testing Tools
Silver Fox APT Exploits a Microsoft-Signed Driver to Bypass Security
A new report reveals the Silver Fox APT is using a Microsoft-signed vulnerable driver to bypass security solutions and deploy the ValleyRAT trojan.
12 views
Daily Writeups
⤷ Title: Corrosion 1 walkthrough
════════════════════════
𐀪 Author: Morontowumi Akinbogun
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 07:01:57 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnhub_walkthrough #vulnerable_machine #vulnhub_writeup #penetration_testing
Medium
Corrosion 1 walkthrough
I'll be covering Corrosion1 a compromise that begins with an innocuous default Apache page and chains together an LFI, exposed backups…
22 views
Daily Writeups
⤷ Title: Security Assessment: Vulnhub Beelzebub Walkthrough
════════════════════════
𐀪 Author: Luke Gearty
════════════════════════
ⴵ Time: Wed, 15 Oct 2025 02:30:04 GMT
════════════════════════
⌗ Tags: #hack_to_learn #vulnerable_machine #cybersecurity #vulnhub_walkthrough #ethical_hacking
Medium
Security Assessment: Vulnhub Beelzebub Walkthrough
Introduction
43 views
Daily Writeups
⤷ Title: Vulnhub MyCMS Walkthrough
════════════════════════
𐀪 Author: cyber pancake
════════════════════════
ⴵ Time: Sun, 02 Nov 2025 04:43:54 GMT
════════════════════════
⌗ Tags: #hacking #vulnerable #hacker
Medium
Vulnhub MyCMS Walkthrough
The box abused MySQL to change the CMS admin password, used exposed sensitive files to move laterally, and ultimately gained root via a…
27 views
Daily Writeups
⤷ Title: Darkhole 1: Full Compromise
════════════════════════
𐀪 Author: Morontowumi Akinbogun
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 11:35:39 GMT
════════════════════════
⌗ Tags: #vulnerable_vm #vulnhub_writeup #vulnhub_walkthrough #cybersecurity
Medium
Darkhole 1: Full Compromise
A quiet profile update and a lax file‑upload rule opened a path from a standard user to admin and then to full system control. This writeup…
25 views
Daily Writeups
⤷ Title: DragonForce Ransomware Evolves with BYOVD to Kill EDR and Fixes Encryption Flaws in Conti V3 Codebase
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 00:00:29 +0000
════════════════════════
⌗ Tags: #Malware #BYOVD #Conti V3 #cybersecurity #DragonForce #EDR Bypass #MinGW #RaaS #vulnerable driver
Daily CyberSecurity
DragonForce Ransomware Evolves with BYOVD to Kill EDR and Fixes Encryption Flaws in Conti V3 Codebase
The Acronis Threat Research Unit (TRU) has identified a new DragonForce ransomware variant that showcases a dramatic evolution in both technical sophistication and organizational structure. The up…
20 views
Daily Writeups
⤷ Title: Think Your Password Is Strong? Hackers Would Disagree.
════════════════════════
𐀪 Author: Feraidon A Rahimzai
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 04:29:00 GMT
════════════════════════
⌗ Tags: #passwords #threat #hacking #cybersecurity #vulnerable
Medium
Think Your Password Is Strong? Hackers Would Disagree.
Unmasking the Dark Art: Seven Ways Attackers Bypass Your Security and Steal Your Digital Life.
13 views
Daily Writeups
⤷ Title: EntraGoat: Deliberately Vulnerable Microsoft Entra ID Lab for Privilege Escalation Training
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 01 Dec 2025 04:04:05 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure AD #Black Box #Cybersecurity Training #EntraGoat #Lab Environment #Microsoft Entra ID #privilege escalation #Red Team #Vulnerable Infrastructure
Penetration Testing Tools
EntraGoat: Deliberately Vulnerable Microsoft Entra ID Lab for Privilege Escalation Training
EntraGoat is a deliberately vulnerable Microsoft Entra ID lab environment for security pros to practice black-box attacks, privilege escalation, and defense methodologies.
25 views
Daily Writeups
⤷ Title: Vulnhub Deathnote: 1 Walkthrough
════════════════════════
𐀪 Author: Luke Gearty
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:06:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerable_machine #ethical_hacking #hack_to_learn #vulnhub_walkthrough
Medium
Vulnhub Deathnote: 1 Walkthrough
“Deathnote: 1” is a vulnerable machine on Vulnhub, rated as easy. This post will be a walkthrough of hacking the machine and escalating…
22 views
Daily Writeups
⤷ Title: Blue | Tryhackme
════════════════════════
𐀪 Author: Tarek Monoar
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 10:33:26 GMT
════════════════════════
⌗ Tags: #tryhackme #blues #tryhackme_blue_room #metasploit_framework #vulnerable_machine
Medium
Blue | Tryhackme
Deploy & hack into a Windows machine, leveraging common misconfigurations issues.
15 views
Daily Writeups
⤷ Title: Kioptrix level 1.1(#2)
════════════════════════
𐀪 Author: Tarek Monoar
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 19:25:48 GMT
════════════════════════
⌗ Tags: #sql_bypass #kioptrix_level_2 #vulnhub #vulnerable_machine #command_injection
Medium
Kioptrix level 1.1(#2)
Full penetration testing walkthrough — from reconnaissance to root shell in Kioptrix Level 1.1 (#2).
36 views
Daily Writeups
⤷ Title: PumpkinGarden Walkthrough
════════════════════════
𐀪 Author: pavani
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 04:31:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #vulnerable_machine #ethical_hacking #privilege_escalation #ctf
Medium
PumpkinGarden Walkthrough
Mission–Pumpkin v1.0 (Beginner Level CTF)
25 views
Daily Writeups
⤷ Title: SQLmap cheat sheet
════════════════════════
𐀪 Author: Mahim Avi
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 22:19:20 GMT
════════════════════════
⌗ Tags: #sqlmap #web_app_security #web_app_pen_testing #vulnerable_db #sql_injection
Medium
SQLmap cheat sheet
Disclaimer: Before using the sqlmap tool, you must have proper permission to play with the database. Hacking is illegal. The author will…
48 views
Daily Writeups
⤷ Title: FSB Center 16 Targets Routers Across Critical Sectors
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 09:28:43 +0000
════════════════════════
⌗ Tags: #Cyber Security #Berserk Bear #Critical Infrastructure #FSB Center 16 #router security #russia #snmp #Vulnerable Routers
Daily CyberSecurity
FSB Center 16 Targets Routers Across Critical Sectors
At a glance Actor / group Russian FSB Center 16 (aka Berserk Bear, Dragonfly, Static Tundra) Activity SNMP scanning and exploitation of routers; config theft Targets / victims Critical infrastruct…
16 views
Daily Writeups
⤷ Title: SilverFox ValleyRAT Campaign Adds Three BYOVD Drivers to Kill Security Tools
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 06:16:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BYOVD #Cato CTRL #DLL Sideloading #Japan #PDFCORE8.dll #Silver Fox APT #SilverFox #ValleyRAT #vulnerable drivers #Winos 4.0
Daily CyberSecurity
SilverFox ValleyRAT Campaign Adds Three BYOVD Drivers to Kill Security Tools
At a Glance Actor / group SilverFox (Silver Fox), a China-aligned APT tracked since about 2022 Activity type Targeted malware campaign: phishing, DLL sideloading, and BYOVD delivering ValleyRAT Ta…
20 views