Daily Writeups
@Daily_Writeups
3.59K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.59K subscribers
Daily Writeups
⤷ Title: Example XSS Vulnerability in a Form Input
════════════════════════
𐀪 Author: Ikhlasul
════════════════════════
ⴵ Time: Sun, 11 May 2025 23:35:10 GMT
════════════════════════
⌗ Tags: #xs #linux #wesbite #attack
Medium
Example XSS Vulnerability in a Form Input
For educational purposes and to help you understand how XSS (Cross-Site Scripting) attacks work, here’s an example of an XSS script…
37 views
Daily Writeups
⤷ Title: xpid: Linux Process Discovery
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:25:29 +0000
════════════════════════
⌗ Tags: #Data Forensics #Linux Process Discovery
Penetration Testing Tools
xpid: Linux Process Discovery
xpid is nmap but for pids. It gives a user the ability to "investigate" for process details on a Linux system.
26 views
Daily Writeups
⤷ Title: MLOKit: MLOps Attack Toolkit
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:20:45 +0000
════════════════════════
⌗ Tags: #Ethical Hacking #attack #attack MLOps platforms #MLOps #MLOps platforms
Penetration Testing Tools
MLOKit: MLOps Attack Toolkit
MLOps Attack Toolkit - MLOKit is a toolkit that can be used to attack MLOps platforms by taking advantage of the available REST API
23 views
Daily Writeups
⤷ Title: PoC Released: CVE-2024-26809 Exploits nftables Double-Free to Achieve Root Shell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:50:56 +0000
════════════════════════
⌗ Tags: #Linux #Vulnerability #CVE_2024_26809 #double_free #heap corruption #Kernel Exploit #Linux Kernel #Netfilter #nftables #root shell #security advisory
Daily CyberSecurity
PoC Released: CVE-2024-26809 Exploits nftables Double-Free to Achieve Root Shell
CVE-2024-26809 affects Linux nftables with a double-free bug in nft_pipapo_destroy, enabling kernel-level exploitation and potential root access.
14 views
Daily Writeups
⤷ Title: Critical Security Flaws Found in ASUS DriverHub: Update Immediately
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:46:49 +0000
════════════════════════
⌗ Tags: #Vulnerability #Armoury Crate #ASUS DriverHub #CVE_2025_3462 #CVE_2025_3463 #HTTP request #motherboard vulnerability #remote attack #security update
Daily CyberSecurity
Critical Security Flaws Found in ASUS DriverHub: Update Immediately
CVE-2025-3462 and CVE-2025-3463 in ASUS DriverHub expose motherboards to remote system manipulation via crafted HTTP requests—update now.
14 views
Daily Writeups
⤷ Title: Defendnot: New Tool Directly Disables Windows Defender
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:40:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #antivirus #Defendnot #PoC #reverse engineering #security #Windows Defender #WSC
Daily CyberSecurity
Defendnot: New Tool Directly Disables Windows Defender
Defendnot disables Windows Defender using a novel method, directly interacting with the WSC. Learn how this new security tool works.
15 views
Daily Writeups
⤷ Title: VS Code in the Browser at Risk: code-server Security Alert
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:38:47 +0000
════════════════════════
⌗ Tags: #Vulnerability #code_server #CVE_2025_47269 #proxy #security advisory #session cookie #VS Code
Daily CyberSecurity
VS Code in the Browser at Risk: code-server Security Alert
A security flaw in code-server can expose your VS Code sessions. Learn how attackers can steal credentials and what to do.
16 views
Daily Writeups
⤷ Title: WaterPlum’s OtterCookie Malware Upgrades to v4 with Credential Theft and Sandbox Detection Features
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:33:54 +0000
════════════════════════
⌗ Tags: #Malware #Chrome DPAPI #credential stealer #cryptocurrency targeting #North Korea APT #OtterCookie #sandbox detection #WaterPlum
Daily CyberSecurity
WaterPlum’s OtterCookie Malware Upgrades to v4 with Credential Theft and Sandbox Detection Features
OtterCookie malware by North Korea-linked WaterPlum group evolves to target Chrome, MetaMask, and system files on both Windows and macOS platforms.
16 views
Daily Writeups
⤷ Title: Malicious npm Packages Target BullX Crypto Traders via Telegram-Backdoored Payloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:29:04 +0000
════════════════════════
⌗ Tags: #Malware
Daily CyberSecurity
Malicious npm Packages Target BullX Crypto Traders via Telegram-Backdoored Payloads
Warning! Malicious npm packages pumptoolforvolumeandcomment & debugdogs steal crypto keys and trading data, sending it via Telegram. Stay safe!
28 views
Daily Writeups
⤷ Title: FreeDrain: Silent Crypto Theft on Google? Massive Phishing Network Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:24:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #crypto phishing #cryptocurrency #Cybercrime #google #Ledger #MetaMask #SEO Poisoning #Trezor #wallet theft #web hosting abuse
Daily CyberSecurity
FreeDrain: Silent Crypto Theft on Google? Massive Phishing Network Exposed
Massive FreeDrain crypto phishing campaign uses Google SEO and free hosting to steal wallets. Trezor, Ledger users beware!
14 views
Daily Writeups
⤷ Title: Stack Overflow Alert! XML Flaw in libexpat Threatens Widespread Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:20:50 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2024_8176 #Denial of Service #dos #libexpat #memory corruption #patch #Software security #stack overflow #XML
Daily CyberSecurity
Stack Overflow Alert! XML Flaw in libexpat Threatens Widespread Software
Critical stack overflow in libexpat (CVE-2024-8176) allows DoS and potential memory corruption via malicious XML. Update to 2.7.0 now!
14 views
Daily Writeups
⤷ Title: Sneaky Email Attack Targets Spain, Italy, Portugal with RATty Trojan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:14:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #dropbox #email campaign #evasion #geolocation #Italy #malware #Mediafire #Ngrok #phishing #Portugal #RATty #Spain #Trojan
Daily CyberSecurity
Sneaky Email Attack Targets Spain, Italy, Portugal with RATty Trojan
New email campaign uses tricky tactics and legitimate services to deliver the RATty Trojan in Spain, Italy, and Portugal. Stay alert for invoice scams!
10 views
Daily Writeups
⤷ Title: Fake Crypto Platforms on Facebook Steal Your Data! Beware Celebrity Endorsements
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:09:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #Binance #crypto scam #cryptocurrency #Elon Musk #Facebook Ads #fake trading platform #Malvertising #malware #MetaMask #phishing #TradingView
Daily CyberSecurity
Fake Crypto Platforms on Facebook Steal Your Data! Beware Celebrity Endorsements
Watch out! Sophisticated Facebook ads lure crypto users to download malware via fake platforms and celebrity endorsements. Bitdefender warns of data theft.
14 views
Daily Writeups
⤷ Title: Legitimate Remote Tools Weaponized in Sophisticated Spam Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:03:19 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Brazil #Cybercrime #initial access broker #malware #N_able #PDQ Connect #phishing #Remote Access #RMM #spam campaign
Daily CyberSecurity
Legitimate Remote Tools Weaponized in Sophisticated Spam Campaign
Cisco Talos warns of a Brazil-focused spam campaign abusing legitimate remote access tools (N-able, PDQ) to gain full system control. Stay vigilant!
23 views
Daily Writeups
⤷ Title: $25,000 SSRF in HackerOne’s Analytics Reports
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Mon, 12 May 2025 01:41:22 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #cybersecurity #technology #penetration_testing
Medium
$25,000 SSRF in HackerOne’s Analytics Reports
Exploiting SSRF via HTML Templates in PDF Reports — A $25,000 HackerOne Vulnerability
13 views
Daily Writeups
⤷ Title: GenLayer: Infrastruktur Otak Dunia untuk AI dan Blockchain
════════════════════════
𐀪 Author: Ching
════════════════════════
ⴵ Time: Mon, 12 May 2025 01:50:52 GMT
════════════════════════
⌗ Tags: #software_engineering #blockchain #web_development #cybersecurity #cryptocurrency
Medium
GenLayer: Infrastruktur Otak Dunia untuk AI dan Blockchain
Di tengah ledakan kecerdasan buatan (AI) dan web3, kita menghadapi satu tantangan besar: bagaimana membuat agen AI dapat dipercaya, dapat…
15 views
Daily Writeups
⤷ Title: The Red Teaming: 30-Day Challenge[28]
════════════════════════
𐀪 Author: Bl@ckC!pH3r
════════════════════════
ⴵ Time: Mon, 12 May 2025 01:42:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #automation #red_team #automation_testing
Medium
The Red Teaming: 30-Day Challenge[28]
Day 28: Red Team Automation and Tooling
12 views
Daily Writeups
⤷ Title: Sleepwalking Botnets Are Real — and They’re Coming for Your Business
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Mon, 12 May 2025 01:41:18 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cyberattack #small_business #cybersecurity #lessons_learned
Medium
Sleepwalking Botnets Are Real — and They’re Coming for Your Business
A thriving small business. A bizarre attack. A wake-up call for the digital age.
11 views
Daily Writeups
⤷ Title: The $45,000 Vacuum Cleaner That Hacked a Business
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Mon, 12 May 2025 01:41:13 GMT
════════════════════════
⌗ Tags: #cyberattack #cybersecurity #lessons_learned #cyber_security_awareness #small_business
Medium
The $45,000 Vacuum Cleaner That Hacked a Business
They thought it was cleaning the floor. It was actually sweeping up their data.
19 views
Daily Writeups
⤷ Title: The Drone That Took Down a $1M Business: A 2025 Cybersecurity Nightmare
════════════════════════
𐀪 Author: Noel
════════════════════════
ⴵ Time: Mon, 12 May 2025 01:41:10 GMT
════════════════════════
⌗ Tags: #financial #cyber_security_awareness #cybersecurity #small_business #lessons_learned
Medium
The Drone That Took Down a $1M Business: A 2025 Cybersecurity Nightmare
What started as a marketing tool turned into a cyberattack that grounded an entire business.
16 views
Daily Writeups
⤷ Title: Multivariate Polynomial Cryptography: Quadratic Equations vs. Quantum Computers
════════════════════════
𐀪 Author: Jay Pandit
════════════════════════
ⴵ Time: Mon, 12 May 2025 01:36:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #quantum_computing #digital_signatures #post_quantum_cryptography #multivariate_cryptography
Medium
Multivariate Polynomial Cryptography: Quadratic Equations vs. Quantum Computers
Paper‑Airplane Puzzles
16 views