Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: The Intel “AppDomain” Hijack: Unmasking a Sophisticated Post-Exploitation Framework
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:26:54 +0000
════════════════════════
⌗ Tags: #Malware #AppDomain Manager Hijacking #Cobalt Strike #Cyfirma #DLL hijacking #Domain Fronting #Financial Sector Security #IAStorHelp.exe #infosec #intel #JIT Trampolining #Memory Forensics #post_exploitation framework
Daily CyberSecurity
The Intel "AppDomain" Hijack: Unmasking a Sophisticated Post-Exploitation Framework
CYFIRMA uncovers an elite stealth framework hijacking signed Intel utilities via AppDomain Manager. It targets EMEA finance with undetectable memory-only code.
15 views
Daily Writeups
⤷ Title: Someone Already Has Your Encrypted Data. They’re Just Waiting.
════════════════════════
𐀪 Author: Red Oxyde
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 20:36:05 GMT
════════════════════════
⌗ Tags: #quantum_computing #cybersecurity #post_quantum #infosec #cryptography
Medium
Someone Already Has Your Encrypted Data. They’re Just Waiting.
Not the dramatic kind. No zero-days, no ransomware war rooms, no breach notifications landing at 3am. The slow, structural kind, the…
25 views
Daily Writeups
⤷ Title: Artificial Intelligence and Post-Quantum Cryptography (PQC)
════════════════════════
𐀪 Author: Bervice
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 02:41:17 GMT
════════════════════════
⌗ Tags: #post_quantum_cryptography #pqc #infosec #bervice #artificial_intelligence
Medium
Artificial Intelligence and Post-Quantum Cryptography (PQC)
Securing the Future in the Age of Intelligent Systems
27 views
Daily Writeups
⤷ Title: X Growth Blueprint — 0 to 10K Followers & Income System
════════════════════════
𐀪 Author: Sahil Ansari
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 19:54:08 GMT
════════════════════════
⌗ Tags: #xs #post #social_media #growth #twitter
Medium
X Growth Blueprint — 0 to 10K Followers & Income System
This ebook gives you everything you need to build a strong personal brand, create viral content, and monetize your audience — without…
35 views
Daily Writeups
⤷ Title: Quantum-Ready and AI-Driven: How RHEL 10.2 and 9.8 are Redefining Enterprise Linux Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:40:11 +0000
════════════════════════
⌗ Tags: #Linux #AI Automation #Ansible #Confidential Computing #Cybersecurity 2026 #enterprise Linux #hybrid cloud #NIST #Post_Quantum Cryptography #red hat #RHEL 10.2 #RHEL 9.8 #SysAdmin
Daily CyberSecurity
Quantum-Ready and AI-Driven: How RHEL 10.2 and 9.8 are Redefining Enterprise Linux Security
Red Hat RHEL 10.2 & 9.8 arrive with NIST Post-Quantum Cryptography, AI-driven Ansible upgrades, and MCP servers for natural language system governance.
10 views
Daily Writeups
⤷ Title: BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:49:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Azure AD #BAADTokenBroker #cloud security #Device_Bound Keys #Kerberos #Microsoft Entra ID #NT Hash #post_exploitation #PRT Cookie #red teaming #TGT
Penetration Testing Tools
BAADTokenBroker Abuses Microsoft Entra ID Device-Bound Keys for PRT Hijacking
Master Microsoft Entra ID post-exploitation with BAADTokenBroker. Learn how to request PRT cookies and abuse Entra Kerberos to acquire TGTs and NT hashes.
32 views
Daily Writeups
⤷ Title: The SNEK Initiative Drops “Eris”: New Post-Exploit Framework Abuses Windows Fax Service for SYSTEM Root
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 07:29:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Session Takeover #Eris Exploit #local privilege escalation #MinGW_w64 Compilation #Post_Exploitation Tool #Registry Hijack #Silent Cleanup Task #The SNEK Initiative #User Account Control Bypass #Windows Fax Service
Penetration Testing Tools
The SNEK Initiative Drops "Eris": New Post-Exploit Framework Abuses Windows Fax Service for SYSTEM Root
A novel exploitation framework designed to escalate execution privileges within the Windows environment, designated as Eris, has emerged
15 views
Daily Writeups
⤷ Title: The Silent Blackout: Unpatched Huawei Router Zero-Day Crushed Luxembourg’s Telecom Grid
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 06:54:40 +0000
════════════════════════
⌗ Tags: #Vulnerability #Carrier Grade Networking #Core Switching Fabric #Denial of Service Exploit #European CERT IoCs #Firmware Reboot Loop #Huawei Enterprise Routing Hardware #POST Luxembourg Telecom Collapse #Recorded Future News Threat Intel #Restricted Advisory Portal #zero_day vulnerability
Penetration Testing Tools
The Silent Blackout: Unpatched Huawei Router Zero-Day Crushed Luxembourg’s Telecom Grid
During the previous summer season, the sovereign nation of Luxembourg suffered a catastrophic, near-total collapse of its domestic
12 views
Daily Writeups
⤷ Title: Metasploit: Post-Exploitation | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 08:59:53 GMT
════════════════════════
⌗ Tags: #post_exploitation #cybersecurity #tryhackme #pentesting #metasploit
Medium
Metasploit: Post-Exploitation | TryHackMe
Use Meterpreter to harvest credentials, escalate privileges, and explore compromised systems.
20 views
Daily Writeups
⤷ Title: The Quantum Bastion: Let’s Encrypt Embraces Merkle Tree Certificates against Post-Quantum Threats
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 17:13:58 +0000
════════════════════════
⌗ Tags: #Technology #Certificate Transparency automation #Google Cloudflare MTC #Let's Encrypt roadmap #Merkle Tree Certificates #post_quantum cryptography TLS #signature size bloat mitigation
Daily CyberSecurity
The Quantum Bastion: Let’s Encrypt Embraces Merkle Tree Certificates against Post-Quantum Threats
Discover how Merkle Tree Certificates resolve post-quantum signature bloat. Learn about the new TLS standards from Google and Cloudflare.
16 views
Daily Writeups
⤷ Title: Task 3.1 -> Exploitation & Post-Exploitation (postexploit)
════════════════════════
𐀪 Author: Gunay Safarzadeh
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 18:19:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #tryhackme #post_exploitation
Medium
Task 3.1 -> Exploitation & Post-Exploitation (postexploit)
Giriş
18 views
Daily Writeups
⤷ Title: Task 3.1 -> Exploitation & Post-Exploitation (rppsempire)
════════════════════════
𐀪 Author: Gunay Safarzadeh
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 19:40:07 GMT
════════════════════════
⌗ Tags: #post_exploitation #cybersecurity #tryhackme
Medium
Task 3.1 -> Exploitation & Post-Exploitation (rppsempire)
Giriş
38 views
Daily Writeups
⤷ Title: The Complete Pentest Methodology: A Step by Step Practical Guide (Part 1)
════════════════════════
𐀪 Author: Abdelrhman mohamed
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 17:32:15 GMT
════════════════════════
⌗ Tags: #post_exploitation #exploit #cybersecurity #information_security #penetration_testing
Medium
The Complete Pentest Methodology: A Step by Step Practical Guide (Part 1)
2 in the cage, 1 is free.
12 views
Daily Writeups
⤷ Title: Metasploit: Meterpreter — In-Memory Execution, Command Vectors, and Post-Exploitation
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 10:22:06 GMT
════════════════════════
⌗ Tags: #tryhackme #post_exploitation #cybersecurity #meterpreter #metasploit
Medium
Metasploit: Meterpreter — In-Memory Execution, Command Vectors, and Post-Exploitation
Introduction
21 views
Daily Writeups
⤷ Title: Miraak Framework Turns PostgreSQL Into a Covert C2 Channel
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 14:08:41 +0000
════════════════════════
⌗ Tags: #Malware #Blackpoint Cyber #Cobalt Strike BOF #Miraak #post_exploitation #PostgreSQL C2
Information Security News
Miraak Framework Turns PostgreSQL Into a Covert C2 Channel
Malicious tools strive to blend into ordinary network traffic, but the new Miraak framework has gone further and transformed a cloud PostgreSQL database into a full-fledged channel for controlling…
19 views
Daily Writeups
⤷ Title: Post-Quantum Readiness Starts With an Inventory: How to Build a CBOM in 2026
════════════════════════
𐀪 Author: Rimlauf
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 13:03:16 GMT
════════════════════════
⌗ Tags: #cryptography #security #compliance #infosec #post_quantum
Medium
Post-Quantum Readiness Starts With an Inventory: How to Build a CBOM in 2026
The first task in preparing for post-quantum cryptography is not swapping out algorithms. It is finding out what is already in place, where…
19 views
Daily Writeups
⤷ Title: Post-Exploitation Challenge — TryHackMe
════════════════════════
𐀪 Author: S4F4L
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 19:08:18 GMT
════════════════════════
⌗ Tags: #post_exploitation #meterpreter #metasploit #ethical_hacking #cybersecurity
Medium
Post-Exploitation Challenge — TryHackMe
Write-up for the Task-5 of the Metasploit:Post-Exploitation challenge
28 views
Daily Writeups
⤷ Title: How a Flawed OTP Flow Led to Full Account Takeover
════════════════════════
𐀪 Author: EL_SHE5
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 19:18:56 GMT
════════════════════════
⌗ Tags: #post #otp_bypass #otp_verification #otp_message_api #bug_bounty
Medium
How a Flawed OTP Flow Led to Full Account Takeover
Introduction
22 views
Daily Writeups
⤷ Title: Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:56:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CrossWeb EX #cyber_espionage #kaspersky #Lazarus Group #LPEClient #North Korea #Operation FlashHole #Post_Quantum Cryptography #south korea
Daily CyberSecurity
Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms
At a glance Actor Lazarus Group, a North Korea-linked threat actor (Kaspersky, medium-to-high confidence) Activity Cyber espionage through spear phishing, watering-hole sites, and abuse of mandato…
6 views
Daily Writeups
⤷ Title: ML in Post-Exploitation
════════════════════════
𐀪 Author: Funcybot
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 12:14:59 GMT
════════════════════════
⌗ Tags: #machine_learning #computer_science #hacking #post_exploitation #cybersecurity
Medium
ML in Post-Exploitation
The Algorithmic Pivot: How ML is Rewriting the Post-Exploitation Playbook
30 views