Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: Weaponized JPEG Payload Deploys Trojanized ScreenConnect for Covert Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 07:01:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AMSI Bypass #ConnectWise #Cyber Security #Cyfirma #infosec #JPEG Exploit #Operation SilentCanvas #PowerShell Malware #ScreenConnect #Trojan #UAC bypass
Daily CyberSecurity
Weaponized JPEG Payload Deploys Trojanized ScreenConnect for Covert Espionage
CYFIRMA warns of Operation SilentCanvas: A weaponized JPEG delivers trojanized ScreenConnect, bypassing AMSI and UAC for full-system surveillance. Stay alert!
12 views
Daily Writeups
⤷ Title: PowerShell for Penetration Testers
════════════════════════
𐀪 Author: Mohamed Eid
════════════════════════
ⴵ Time: Thu, 14 May 2026 19:36:16 GMT
════════════════════════
⌗ Tags: #powershell #cybersecurity #ethical_hacking #penetration_testing #red_team
Medium
PowerShell for Penetration Testers
PowerShell for Penetration Testers
20 views
Daily Writeups
⤷ Title: Microsoft Explains the New “SecureBoot” Folder in Windows 11 KB5089549 Update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 05:43:42 +0000
════════════════════════
⌗ Tags: #Windows #C:\Windows\SecureBoot #Detect_SecureBootCertUpdateStatus #Device Security #Enterprise Fleet Management #KB5089549 #PowerShell Script #Secure Boot Expiration #Trust Chain Renovation #UEFI CA 2023 #Windows 11 May Update
Daily CyberSecurity
Microsoft Explains the New "SecureBoot" Folder in Windows 11 KB5089549 Update
Seeing a new SecureBoot folder under C:Windows? Microsoft confirms it is part of an essential KB5089549 update to replace expiring 2011 UEFI certificates.
12 views
Daily Writeups
⤷ Title: In-Memory Financial Theft: Inside Banana RAT’s Operator-Driven Attacks on Brazilian Banks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 06:47:33 +0000
════════════════════════
⌗ Tags: #Malware #Banana RAT #Banking Trojan #Cyber Security #Fileless Execution #In_Memory Exploit #infosec #Malware_as_a_Service #Pix_QR Interception #Powershell obfuscation #SHADOW_WATER_063 #TrendAI Counter Threat Unit
Daily CyberSecurity
In-Memory Financial Theft: Inside Banana RAT’s Operator-Driven Attacks on Brazilian Banks
TrendAI exposes Banana RAT, a fileless banking trojan by SHADOW-WATER-063 that uses in-memory execution and fake UI overlays to hijack Pix-QR transfers.
27 views
Daily Writeups
⤷ Title: Critical FortiClient EMS Exploitation Campaign Spreads New EKZ Infostealer Payload
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 28 May 2026 04:25:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arctic Wolf #credential stealer #CVE_2026_35616 #EKZ Infostealer #endpoint security #FortiClient EMS #PowerShell Malware
Daily CyberSecurity
Critical FortiClient EMS Exploitation Campaign Spreads New EKZ Infostealer Payload
A dangerous new cyber assault is currently targeting corporate infrastructure networks. Specifically, security researchers have uncovered a sophisticated FortiClient EMS exploitation campaign. Ana…
29 views
Daily Writeups
⤷ Title: The Day I Accidentally Destroyed My Own Evidence
════════════════════════
𐀪 Author: Teachnolen
════════════════════════
ⴵ Time: Wed, 24 Jun 2026 00:36:25 GMT
════════════════════════
⌗ Tags: #powershell #ethical_hacking #digital_forensics #cybersecurity #blue_team
Medium
The Day I Accidentally Destroyed My Own Evidence
By Patrick Nolen
25 views
Daily Writeups
⤷ Title: Windows PowerShell — TryHackMe Answers | by Deepti Gupta
════════════════════════
𐀪 Author: Deepti Gupta
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:20:29 GMT
════════════════════════
⌗ Tags: #windows #tryhackme #tryhackme_walkthrough #powershell #tryhackme_writeup
Medium
Windows PowerShell — TryHackMe Answers | by Deepti Gupta
Platform: TryHackMe
23 views
Daily Writeups
⤷ Title: Veil#Drop Malware Uses Blogspot to Deliver PureLog Stealer
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 08 Jul 2026 06:14:09 +0000
════════════════════════
⌗ Tags: #Malware #Fileless Malware #information stealer #PowerShell Loader #PureLog Stealer #Securonix #Veil#Drop
Daily CyberSecurity
Veil#Drop Malware Uses Blogspot to Deliver PureLog Stealer
Malware family PureLog Stealer (delivered by the Veil#Drop framework) Threat actor Not attributed by Securonix Targets Windows users; victim count not disclosed Delivery vector Malicious JavaScrip…
18 views
Daily Writeups
⤷ Title: Windows PowerShell: Advanced Object Filtering and Enterprise Automation
════════════════════════
𐀪 Author: Jonathan Sanfer
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 09:56:58 GMT
════════════════════════
⌗ Tags: #infosec #windows #tryhackme #powershell #cybersecurity
Medium
Windows PowerShell: Advanced Object Filtering and Enterprise Automation
Introduction
27 views
Daily Writeups
⤷ Title: ACR Stealer Spreads Through ClickFix Lures in Two Attack Chains
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 06:40:20 +0000
════════════════════════
⌗ Tags: #Malware #ACR Stealer #ClickFix #Credential Theft #EtherHiding #Infostealer #Malware_as_a_Service #Microsoft Defender #powershell
Daily CyberSecurity
ACR Stealer Spreads Through ClickFix Lures in Two Attack Chains
At a glance Malware family ACR Stealer (infostealer; linked to a rebrand of Amatera Stealer) Threat actor No named actor; sold via malware-as-a-service (MaaS) Target / victims Enterprise Windows e…
16 views
Daily Writeups
⤷ Title: The Best 10 PowerShell Obfuscators
════════════════════════
𐀪 Author: Bartosz Wójcik
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 20:08:57 GMT
════════════════════════
⌗ Tags: #obfuscation #powershell_script #windows_powershell #powershell #hacking
28 views
Daily Writeups
⤷ Title: Microsoft Needs To Proactively Prevent Typosquatting (how I almost got owned)
════════════════════════
𐀪 Author: Ethan Word
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 02:39:53 GMT
════════════════════════
⌗ Tags: #microsoft #powershell #infosec #cybersecurity
Medium
Microsoft Needs To Proactively Prevent Typosquatting (how I almost got owned)
Today, as embarrassing as it is to admit, I fell for a typosquatting attack. I got lucky, the PowerShell Module I installed from PowerShell…
35 views
Daily Writeups
⤷ Title: Replace slmgr.vbs: Windows Activation via PowerShell
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 10:11:54 +0000
════════════════════════
⌗ Tags: #Windows #powershell #slmgr.vbs #Windows Activation
Daily CyberSecurity
Replace slmgr.vbs: Windows Activation via PowerShell
Microsoft recently advised enterprise IT administrators to fundamentally reassess their activation automation workflows relying on slmgr.vbs. The corporation strongly recommends transitioning to m…
43 views
Daily Writeups
⤷ Title: Windows Powershell — TryHackMe
════════════════════════
𐀪 Author: Kamatchibalu
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:23:32 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #tryhackme_walkthrough #powershell_tryhackme #tryhackme_pre_security
Medium
Windows Powershell — TryHackMe
Powershell Task2:
21 views
Daily Writeups
⤷ Title: New TASK#STOMP Windows Backdoor Enables Continuous Document Theft
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 11:17:04 +0000
════════════════════════
⌗ Tags: #Security #Malware #backdoor #Cybersecurity #PowerShell #Securonix #TASK#STOMP #Windows
Hackread
New TASK#STOMP Windows Backdoor Enables Continuous Document Theft
TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain remote access.
21 views
Daily Writeups
⤷ Title: New TASK#STOMP PowerShell Backdoor Targets Windows
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 24 Sep 2026 07:11:23 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #new TASK#STOMP PowerShell backdoor #PowerShell Backdoor #Securonix #TASK#STOMP PowerShell backdoor
Daily CyberSecurity
New TASK#STOMP PowerShell Backdoor Targets Windows
At a Glance Attribute Details Malware Family TASK#STOMP Threat Actor Unknown (Unconfirmed attribution) Target Victims Enterprise networks and corporate document repositories Delivery Vector Decept…
17 views
Daily Writeups
⤷ Title: Fileless Infiltration: Executing Powercat via VBA Macros
════════════════════════
𐀪 Author: Sachin Sir
════════════════════════
ⴵ Time: Sat, 26 Sep 2026 03:52:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #powershell #infosec #ethical_hacking #red_teaming
Medium
Fileless Infiltration: Executing Powercat via VBA Macros
🔍 A Step-by-Step Guide to Evading Disk-Based Defenses and Memory-Only Execution 🧠
26 views
Daily Writeups
⤷ Title: It Only Takes a USB Port: Exploring HID-Based Attack Simulation with DigiSpark
════════════════════════
𐀪 Author: hareem khan
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 17:40:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #usb #powershell #ethical_hacking #cybersecurity
Medium
It Only Takes a USB Port: Exploring HID-Based Attack Simulation with DigiSpark
Tracing a controlled attack chain from HID injection and PowerShell execution to endpoint reconnaissance and telemetry.
28 views
Daily Writeups
⤷ Title: Investigating PowerShell Execution: A Deep Blue-Team Investigation Guide
════════════════════════
𐀪 Author: Bhoyarlokesh
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 20:53:49 GMT
════════════════════════
⌗ Tags: #windows_security #powershell #tryhackme #cybersecurity
Medium
Investigating PowerShell Execution: A Deep Blue-Team Investigation Guide
Understanding PowerShell execution, Windows forensic artifacts, event logs, process trees, Script Block Logging, and how SOC analysts…
24 views
Daily Writeups
⤷ Title: Chrome ClickFix Protection Scans Risky Clipboard Commands
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:00:53 +0000
════════════════════════
⌗ Tags: #Technology #chrome #ClickFix #Enhanced Protection #Gemini #phishing #powershell #Safe Browsing #Web Security
Daily CyberSecurity
Chrome ClickFix Protection Scans Risky Clipboard Commands
Google Upgrades Enhanced Protection in Chrome Google has unveiled new Enhanced Protection features for Chrome, detailed in its post on the latest defenses against evolving web scams. The additions…
7 views