Daily Writeups
@Daily_Writeups
3.63K subscribers
4 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.63K subscribers
Daily Writeups
⤷ Title: 5 Ways You Can Get Hacked, and How to Avoid Each One
════════════════════════
𐀪 Author: CiberEdu
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:09:15 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #cybersecurity #hacking #cyberattack #cybercrime
Medium
5 Ways You Can Get Hacked, and How to Avoid Each One
We tend to imagine hackers as hoodie-wearing geniuses typing at lightspeed in a dark room, but in reality Most hacks don’t require elite…
9 views
Daily Writeups
⤷ Title: TheHarvester in Hacking | Find Emails, Domains & Targets Fast!
════════════════════════
𐀪 Author: Shahzaib
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:31:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #osint #theharvester
Medium
TheHarvester in Hacking | Find Emails, Domains & Targets Fast!
Simple Tool Became My Secret Weapon for Cracking Tough Cases
16 views
Daily Writeups
⤷ Title: From College Dorms to Red Team Powerhouse, The FourCore Journey
════════════════════════
𐀪 Author: Cyber Unbound
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:27:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #threat_intelligence #startups_in_india #entrepreneurship #technology
Medium
From College Dorms to Red Team Powerhouse, The FourCore Journey
FourCore started in a college dorm room during the pandemic and has since grown into a cutting-edge red teaming platform trusted by…
16 views
Daily Writeups
⤷ Title: Why I Switched to Arch Linux: A Developer’s Perspective
════════════════════════
𐀪 Author: Murat Kurkoglu
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:06:23 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux #engineering #arch_linux #tiling_window_manager
Medium
Why I Switched to Arch Linux: A Developer’s Perspective
I left stable distros for Arch Linux. Here is how building my OS from scratch taught me more about Linux internals than any textbook.
11 views
Daily Writeups
⤷ Title: Testing Registry Persistence Detection: When Rules Exist But Never Fire
════════════════════════
𐀪 Author: Raynard Waits
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:02:10 GMT
════════════════════════
⌗ Tags: #soc_analyst #soc_analyst_training #homelab #blue_team #cybersecurity
Medium
Testing Registry Persistence Detection: When Rules Exist But Never Fire
After discovering that reconnaissance commands had spotty detection in my previous tests, I expected persistence mechanisms to fare better…
12 views
Daily Writeups
⤷ Title: Static Routing vs. OSPF — A Hands-On Comparison in My CCNA Lab
════════════════════════
𐀪 Author: Jahson Jno-Baptiste
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 00:45:07 GMT
════════════════════════
⌗ Tags: #homelab #cisco #ccna #networking #cybersecurity
Medium
🚦 Static Routing vs. OSPF — A Hands-On Comparison in My CCNA Lab
I spent today working through a routing lab in GNS3 where I compared static routing and OSPF (Open Shortest Path First) across a small…
19 views
Daily Writeups
⤷ Title: What is the difference between authentication and authorization?
════════════════════════
𐀪 Author: Deon Orina
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 00:32:21 GMT
════════════════════════
⌗ Tags: #tech #cybersecurity #database #web_development #technology
Medium
What is the difference between authentication and authorization?
Photo by Markus Spiske on Unsplash
28 views
Daily Writeups
⤷ Title: MyTown Media Solutions — Full Network Deployment (Capstone Project)
════════════════════════
𐀪 Author: Jahson Jno-Baptiste
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 00:16:34 GMT
════════════════════════
⌗ Tags: #networking #cisco #ccna #homelab #cybersecurity
Medium
MyTown Media Solutions — Full Network Deployment (Capstone Project)
Designed and Implemented by JB
15 views
Daily Writeups
⤷ Title: X de Elon Musk presenta una función de ubicación real para combatir las cuentas falsas y la…
════════════════════════
𐀪 Author: Sherlock
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 01:53:20 GMT
════════════════════════
⌗ Tags: #elon_musk #chatgpt #xs
Medium
X de Elon Musk presenta una función de ubicación real para combatir las cuentas falsas y la…
Elon Musk revoluciona el panorama de las redes sociales una vez más con la última actualización de su plataforma, X. La nueva función "…
23 views
Daily Writeups
⤷ Title: DCOMRunAs: Covert Technique for Remote Code Execution in a Logged-on Session
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:31:40 +0000
════════════════════════
⌗ Tags: #Open Source Tool #DCOM #DCOMRunAs #DLL hijacking #Lateral Movement #post_exploitation #remote code execution #Windows Security
Penetration Testing Tools
DCOMRunAs: Covert Technique for Remote Code Execution in a Logged-on Session
DCOMRunAs is a covert technique that exploits DCOM and DLL hijacking to execute payloads in the context of a remote, logged-on user's session without new process creation.
15 views
Daily Writeups
⤷ Title: GTA VI ‘Leaks’ Go Viral: Users Mistake AI-Generated Gameplay for Real Footage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:22:24 +0000
════════════════════════
⌗ Tags: #Data Leak #AI Generation #Fake Leak #Gaming News #Generative Content #Grand Theft Auto #GTA VI #Rockstar Games #Social media
Penetration Testing Tools
GTA VI 'Leaks' Go Viral: Users Mistake AI-Generated Gameplay for Real Footage
A fresh controversy has unfolded on platform X around the long-awaited Grand Theft Auto VI — users spent
12 views
Daily Writeups
⤷ Title: 1,000+ Amazon Employees Sign Open Letter Against ‘Aggressive’ AI Strategy
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:18:13 +0000
════════════════════════
⌗ Tags: #Technology #AI Dissent #Amazon #Climate Justice #data centers #Employee Activism #Generative AI #layoffs #Tech Ethics
Penetration Testing Tools
1,000+ Amazon Employees Sign Open Letter Against 'Aggressive' AI Strategy
Amazon is facing a new wave of internal dissent over its rapid embrace of artificial intelligence. The group
11 views
Daily Writeups
⤷ Title: Scattered Lapsus$ Hunters Attack Zendesk Users with 40+ Fake SSO Phishing Portals
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:17:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Customer Support #phishing #ReliaQuest #Scattered LapSus Hunters #SSO #supply chain attack #Typosquatting #Zendesk
Penetration Testing Tools
Scattered Lapsus$ Hunters Attack Zendesk Users with 40+ Fake SSO Phishing Portals
ReliaQuest specialists have uncovered more than forty fraudulent domains masquerading as Zendesk portals, attributing them to the cyber-criminal
10 views
Daily Writeups
⤷ Title: AI Flunks Security Test: LLMs are Ineffective at Guessing Passwords from Personal Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:14:25 +0000
════════════════════════
⌗ Tags: #Information Security #Adversarial AI #AI security #Cyber Security #Falcon #Flan_T5 #LLaMA #LLM #password guessing #research
Penetration Testing Tools
AI Flunks Security Test: LLMs are Ineffective at Guessing Passwords from Personal Data
Australian researchers have tested whether large language models can infer passwords from personal information — and found that,
4 views
Daily Writeups
⤷ Title: Tomiris APT Infiltrates Governments Via Phishing, Uses Telegram/Discord for C2 Espionage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:10:48 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #CIS #Cyber Espionage #Discord C2 #kaspersky #phishing #reverse shell #Russia #Telegram C2 #Tomiris
Penetration Testing Tools
Tomiris APT Infiltrates Governments Via Phishing, Uses Telegram/Discord for C2 Espionage
The Tomiris group launched a new wave of cyber-espionage in early 2025, targeting high-level political and diplomatic institutions.
10 views
Daily Writeups
⤷ Title: OpenAI Users Warned of Phishing Risk After Mixpanel Analytics Provider Breach
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:08:27 +0000
════════════════════════
⌗ Tags: #Data Leak #Analytics Leak #API Users #data breach #Mixpanel #OpenAI #Phishing Risk #security incident #Third_Party Vendor
Penetration Testing Tools
OpenAI Users Warned of Phishing Risk After Mixpanel Analytics Provider Breach
OpenAI has disclosed a security incident at the third-party web-analytics provider Mixpanel that affected a subset of users
9 views
Daily Writeups
⤷ Title: Microsoft Entra ID to Block All Third-Party Scripts on Login Page via Strict CSP
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:07:00 +0000
════════════════════════
⌗ Tags: #Microsoft #Authentication #Azure AD #Content Security Policy #CSP #Microsoft Entra ID #Secure Future Initiative #security update #XSS Attack
Penetration Testing Tools
Microsoft Entra ID to Block All Third-Party Scripts on Login Page via Strict CSP
Microsoft is tightening the security of Microsoft Entra ID sign-ins, planning to block all third-party script execution on
9 views
Daily Writeups
⤷ Title: Apple Podcasts Auto-Launch Flaw Exposes Users to XSS Attacks via Malicious Shows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:04:39 +0000
════════════════════════
⌗ Tags: #Apple #Vulnerability #Apple Podcasts #Auto Launch #Cross_Site Scripting #ios #macos #Remote Delivery #security flaw #XSS Attack
Penetration Testing Tools
Apple Podcasts Auto-Launch Flaw Exposes Users to XSS Attacks via Malicious Shows
Apple Podcasts has begun launching itself spontaneously, displaying peculiar religious and “educational” programs and, in some cases, directing
13 views
Daily Writeups
⤷ Title: Asahi Cyberattack: Qilin Ransomware Exposes 1.5M People, Cripples Production
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 03:00:14 +0000
════════════════════════
⌗ Tags: #Data Leak #Asahi #Customer Data #cybersecurity #data breach #Japan #Production Disruption #Qilin Ransomware #Supply Chain
Penetration Testing Tools
Asahi Cyberattack: Qilin Ransomware Exposes 1.5M People, Cripples Production
The Japanese brewing giant Asahi has revealed that a September cyberattack resulted in one of the most significant
6 views
Daily Writeups
⤷ Title: Google Cuts Free Daily Quota for Gemini 3 Pro and Nano Banana Pro AI Models
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 02:46:35 +0000
════════════════════════
⌗ Tags: #Google #AI Limits #Compute Strain #Free Quota #Gemini 3 Pro #Generative AI #google #Monetization #Nano Banana Pro
Penetration Testing Tools
Google Cuts Free Daily Quota for Gemini 3 Pro and Nano Banana Pro AI Models
Google continues to recalibrate the terms of its free AI access amid surging demand. The company has reduced
6 views
Daily Writeups
⤷ Title: Teams Guest Phishing Bypass: Attackers Exploit External Tenants to Defeat Microsoft Defender
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 29 Nov 2025 02:45:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Email Bypass #Guest Access #Microsoft Defender #Microsoft Teams #Office 365 #Ontinue #phishing #security flaw
Penetration Testing Tools
Teams Guest Phishing Bypass: Attackers Exploit External Tenants to Defeat Microsoft Defender
Expanding Microsoft Teams’ capabilities for working with external users brings not only convenience, but also new vulnerabilities. The
14 views