Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: Accessing a Private Internal Web Application via SSH SOCKS Proxy (From VPS to Local Machine)
════════════════════════
𐀪 Author: Kokurate
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 14:28:21 GMT
════════════════════════
⌗ Tags: #hacking #ctf #proxy #socks5_proxy #ssh_tunnel
Medium
Accessing a Private Internal Web Application via SSH SOCKS Proxy (From VPS to Local Machine)
Summary:
18 views
Daily Writeups
⤷ Title: Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:01:52 +0000
════════════════════════
⌗ Tags: #Malware #botnet #bulletproof hosting #Coroxy #cybersecurity #Government Security #malware #Perl Variant #ransomware #Silent Push #SOCKS5 Proxy #SystemBC
Daily CyberSecurity
Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks
Silent Push reveals a massive SystemBC botnet with 10,000+ infected IPs. The SOCKS5 proxy malware hit government domains and uses bulletproof hosting.
18 views
Daily Writeups
⤷ Title: Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:49:11 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Active Directory #Cyber Security 2026 #ghostsurf #IIS Security #Kernel_Mode Auth #NTLM Auth #NTLM Relay #Penetration Testing #red teaming #Session Hijacking #SOCKS5 Proxy
Penetration Testing Tools
Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf
Master NTLM relay with ghostsurf. Use a SOCKS5 proxy to hijack browser sessions, bypass kernel-mode auth, and impersonate users on IIS and HTTPS targets.
19 views
Daily Writeups
⤷ Title: VIPERTUNNEL Hijacks Python for Stealthy Ransomware Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:16:49 +0000
════════════════════════
⌗ Tags: #Malware #Base85 Obfuscation #cybersecurity #DragonForce Ransomware #EvilCorp #infosec #Malware Analysis #Python backdoor #sitecustomize.py #SOCKS5 Proxy #UNC2165 #VIPERTUNNEL
Daily CyberSecurity
VIPERTUNNEL Hijacks Python for Stealthy Ransomware Access
InfoGuard unmasks VIPERTUNNEL, a Python backdoor using sitecustomize.py for stealthy persistence in DragonForce ransomware attacks. Learn how to detect it.
9 views
Daily Writeups
⤷ Title: TrickMo’s Stealthy Upgrade: Android Banking Malware is Pivoting to The Open Network
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 12:03:25 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Banking Trojan #cybersecurity #infosec #Malware Analysis #mobile security #network_security #SOCKS5 Proxy #ThreatFabric #TON Network #TrickMo
Daily CyberSecurity
TrickMo’s Stealthy Upgrade: Android Banking Malware is Pivoting to The Open Network
ThreatFabric uncovers TrickMo Variant C, a new Android banking trojan using the decentralized TON network to evade detection and turn phones into proxies.
15 views
Daily Writeups
⤷ Title: Fake Chrome VPN Extensions: 737 Linked to One Operation
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 29 Sep 2026 11:49:07 +0000
════════════════════════
⌗ Tags: #Malware #Brand Impersonation #browser security #Chrome extensions #Chrome Web Store #DNS over HTTPS #Fake VPN #Socket Security #SOCKS5 Proxy
Information Security News
Fake Chrome VPN Extensions: 737 Linked to One Operation
A Free VPN With a Hidden Network Behind It A user installs a free VPN and clicks “Connect.” The familiar message of protection appears. Behind hundreds of different names, however, sat…
26 views