--- title: Best InfoSec Write-ups posts — June 2025 | daily.dev description: The most upvoted InfoSec Write-ups posts from June 2025, curated by the daily.dev community. canonical: https://daily.dev/sources/infosecwriteups/best-of/2025/06 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/sources/infosecwriteups/best-of/2025/06 og:type: website og:site_name: daily.dev og:title: Best InfoSec Write-ups posts — June 2025 | daily.dev og:description: The most upvoted InfoSec Write-ups posts from June 2025, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of InfoSec Write-ups — June 2025 1. 1 [](https://daily.dev/posts/dns-records-ei01jthk2 "DNS Records") Article InfoSec Write-ups · 1y DNS Records DNS records serve different purposes in domain name resolution and security. A and AAAA records map domains to IPv4 and IPv6 addresses respectively. CNAME records create domain aliases, while MX records direct email routing. TXT records store security information like SPF, DKIM, and DMARC for email authentication. NS records identify authoritative name servers, SOA records contain zone management data, SRV records specify service locations and ports, and PTR records enable reverse DNS lookups for security validation. 114 2. 2 [](https://daily.dev/posts/wazuh-the-free-and-open-source-siem-xdr-platform-2gyycxxbc "Wazuh: The Free and Open Source SIEM/XDR Platform") Article InfoSec Write-ups · 1y Wazuh: The Free and Open Source SIEM/XDR Platform Wazuh is a free, open-source security platform offering unified SIEM and XDR capabilities for endpoint and cloud workload protection. The platform consists of four main components: Wazuh Indexer for storing alerts, Wazuh Server for data analysis and agent management, Wazuh Dashboard for visualization, and Wazuh Agents for endpoint protection. The setup process involves installing the server on Ubuntu using a single script command, configuring agents through the web interface, and deploying agents on target systems using generated commands. 19 1 3. 3 [](https://daily.dev/posts/my-laptop-died-so-i-hacked-with-my-phone-no-excuse-wdtw9l9jj "My Laptop Died, So I Hacked with My Phone. No Excuse") Article InfoSec Write-ups · 1y My Laptop Died, So I Hacked with My Phone. No Excuse A cybersecurity researcher demonstrates how to build a complete bug bounty hunting environment on Android using Termux after their laptop broke. The guide covers installing essential tools like subfinder, nuclei, and ffuf, setting up Go development environment, configuring reconnaissance tools for subdomain enumeration and vulnerability scanning, and creating a portable penetration testing lab that runs entirely on a smartphone. 15 4. 4 [](https://daily.dev/posts/browser-in-the-browser-the-new-phishing-frontier-j2y74qiyd "Browser-in-the-Browser: The New Phishing Frontier") Article InfoSec Write-ups · 1y Browser-in-the-Browser: The New Phishing Frontier Browser-in-the-Browser (BitB) attacks create pixel-perfect fake browser windows to steal credentials by mimicking legitimate login popups. These sophisticated phishing techniques exploit user trust in browser security indicators like HTTPS locks and familiar URLs. The article covers technical implementation details, advanced evasion methods, PWA abuse, detection strategies, and defense mechanisms including Content Security Policy configurations and behavioral analysis. 10 1 [See all InfoSec Write-ups archives](/sources/infosecwriteups/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/sources/infosecwriteups/best-of/2025/06#page","url":"https://daily.dev/sources/infosecwriteups/best-of/2025/06","name":"Best InfoSec Write-ups Posts — June 2025","description":"The most upvoted InfoSec Write-ups posts from June 2025, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/sources/infosecwriteups/best-of/2025/06#items","numberOfItems":4,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/dns-records-ei01jthk2","name":"DNS Records"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/wazuh-the-free-and-open-source-siem-xdr-platform-2gyycxxbc","name":"Wazuh: The Free and Open Source SIEM/XDR Platform"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/my-laptop-died-so-i-hacked-with-my-phone-no-excuse-wdtw9l9jj","name":"My Laptop Died, So I Hacked with My Phone. No Excuse"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/browser-in-the-browser-the-new-phishing-frontier-j2y74qiyd","name":"Browser-in-the-Browser: The New Phishing Frontier"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sources","item":"https://daily.dev/sources"},{"@type":"ListItem","position":3,"name":"InfoSec Write-ups","item":"https://daily.dev/sources/infosecwriteups"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/sources/infosecwriteups/best-of"},{"@type":"ListItem","position":5,"name":"June 2025"}]}]} ```