Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: [Android] Root Detection Bypass Using Frida — Writeup 1
════════════════════════
𐀪 Author: MrEhAcKeR
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 05:46:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #reverse_engineering #source_code #mobile_pentesting #penetration_testing
Medium
[Android] Root Detection Bypass Using Frida — Writeup 1
Root Detection Bypass Using Reverse Engineering & Frida Scripts
26 views
Daily Writeups
⤷ Title: React Patches Two New Flaws Risking Server-Crashing DoS and Source Code Disclosure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 03:38:57 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_55184 #dos #Infinite Loop #React Server Components #security vulnerability #Source Code Disclosure
Daily CyberSecurity
React Patches Two New Flaws Risking Server-Crashing DoS and Source Code Disclosure
New flaws found in React Server Components risk a Server-Crashing DoS (CVSS 7.5) via infinite loop and Source Code Disclosure (CVE-2025-55183). Update to v19.0.3/19.1.4/19.2.3 immediately.
26 views
Daily Writeups
⤷ Title: React2Shell Saga Continues: New DoS Flaw & Source Code Leak Discovered in React Server Components
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:47:41 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_55184 #Denial of Service #DoS #Next.js #React Server Components #React2Shell #Source Code Leak #Vercel #Web Vulnerability
Penetration Testing Tools
React2Shell Saga Continues: New DoS Flaw & Source Code Leak Discovered in React Server Components
The long-running React2Shell saga—which has continued to disrupt many web projects—has taken another turn: it has emerged that
15 views
Daily Writeups
⤷ Title: India’s Source Code Demand Sparks Tech Revolt
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 01:40:28 +0000
════════════════════════
⌗ Tags: #Technology #android #Apple #Cybersecurity 2026 #India #ios #MAIT #Make in India #MeitY #Narendra Modi #samsung #Smartphone Security #source code #Tech Policy
Daily CyberSecurity
India’s Source Code Demand Sparks Tech Revolt
India faces a revolt from Apple and Samsung over a 2026 proposal to mandate source code disclosure for security audits, sparking a major IP standoff.
15 views
Daily Writeups
⤷ Title: The Source Code Standoff: India’s New Security Rules Alarm Apple and Samsung
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:17:22 +0000
════════════════════════
⌗ Tags: #Information Security #Apple #Data Privacy 2026 #India #MeitY #Mobile Infrastructure #Narendra Modi #Samsung #Smartphone Security #source code #Tech Regulation
Penetration Testing Tools
The Source Code Standoff: India’s New Security Rules Alarm Apple and Samsung
A formidable confrontation is brewing in India between the state and preeminent smartphone manufacturers. The nation’s authorities are
19 views
Daily Writeups
⤷ Title: Insomnia HTB Web Challenge — Walkthrough
════════════════════════
𐀪 Author: Sooraj Mohan
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 03:31:01 GMT
════════════════════════
⌗ Tags: #hackthebox #ctf_writeup #source_code_review #webchallenge #hackthebox_writeup
Medium
Insomnia HTB Web Challenge — Walkthrough
Insomnia HTB Web Challenge — Walkthrough Insomnia is a web challenge from Hack The Box website. The challenge is to find the flag from the Insomnia website. It’s an Easy web challenge focusing on …
40 views
Daily Writeups
⤷ Title: Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:44:03 +0000
════════════════════════
⌗ Tags: #Data Leak #.git folder #Credential Theft #data leak #DevOps Security #Git #misconfiguration #Mysterium VPN #source code exfiltration #Tech News 2026 #version control #web server hardening
Penetration Testing Tools
Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
Approximately five million web servers globally have been identified as misconfigured, exposing sensitive Git administrative metadata and precipitating
39 views
Daily Writeups
⤷ Title: From YAML to RCE: The PyYAML Deserialization Story
════════════════════════
𐀪 Author: Amr
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 21:33:32 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #cybersecurity #source_code #serialization
Medium
From YAML to RCE: The PyYAML Deserialization Story
Hi, I’m Amr Kadry, a Red Team Consultant and bug hunter, acknowledged by over 50 companies including Mozilla, CrowdStrike, Canva, Vimeo…
32 views
Daily Writeups
⤷ Title: The Unsafe Send: How an HTTP Client Library Led to Remote Code Execution
════════════════════════
𐀪 Author: Alperen
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 02:44:52 GMT
════════════════════════
⌗ Tags: #hackerone #source_code_security #source_code #ruby #bugbounty_writeup
Medium
The Unsafe Send: How an HTTP Client Library Led to Remote Code Execution
Finding a vulnerability in a core library is always a “hold your breath” moment. You realize that the impact isn’t just limited to one…
45 views
Daily Writeups
⤷ Title: IDOR in a JWT-Protected Card Viewer API | CodeReviewLab Writeup
════════════════════════
𐀪 Author: Zaid Arif
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 03:59:48 GMT
════════════════════════
⌗ Tags: #idor #source_code_review #code_review #bug_bounty
Medium
IDOR in a JWT-Protected Card Viewer API | CodeReviewLab Writeup
Secure code review, for AppSec engineers, is in many ways our version of LeetCode. It’s not about solving well-defined problems, but about…
22 views
Daily Writeups
⤷ Title: Anthropic Issues Mass DMCA to Erase 8,100 Claude Code Repositories
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 07:47:39 +0000
════════════════════════
⌗ Tags: #Data Leak #AI security #Anthropic #Claude Code #Coding News 2026 #Copyright Infringement #DMCA #Github #Intellectual Property #Repository Takedown #Source Code Leak
Penetration Testing Tools
Anthropic Issues Mass DMCA to Erase 8,100 Claude Code Repositories
The GitHub platform has received a formal grievance under the Digital Millennium Copyright Act (DMCA) from the artificial
7 views
Daily Writeups
⤷ Title: The DevSecOps Paradox: How the TeamPCP Supply Chain Attack Turned Cisco’s Security Tools Into Trojan Horses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 02 Apr 2026 07:45:06 +0000
════════════════════════
⌗ Tags: #Data Leak #AWS #Checkmarx #Cisco #cloud security #Cybersecurity 2026 #Github #Infosec #LiteLLM #Source Code Leak #supply chain attack #TeamPCP #Trivy
Information Security News
The DevSecOps Paradox: How the TeamPCP Supply Chain Attack Turned Cisco’s Security Tools Into Trojan Horses
A cyber offensive targeting one of the preeminent information technology conglomerates originated from a seemingly mundane instrument for vulnerability assessment. Consequently, adversaries succes…
6 views
Daily Writeups
⤷ Title: The Claude Code Leak: How a 500,000-Line npm Blunder Became a Golden Ticket for Hackers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:41:30 +0000
════════════════════════
⌗ Tags: #Malware #Anthropic #Claude Code #Cybersecurity 2026 #GhostSocks #malware #npm Leak #Source Code Disclosure #supply chain attack #Vidar Stealer #Zscaler ThreatLabz
Penetration Testing Tools
The Claude Code Leak: How a 500,000-Line npm Blunder Became a Golden Ticket for Hackers
The recent inadvertent exposure of the internal source code for one of the most prominent artificial intelligence instruments
9 views
Daily Writeups
⤷ Title: WolfSSL Hunting Experience: Cerita Dari Seorang Bug Hunter Pengangguran :V
════════════════════════
𐀪 Author: MostReal
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 11:35:13 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #hacking #source_code_review #bug_bounty_tips
Medium
WolfSSL Hunting Experience: Cerita Dari Seorang Bug Hunter Pengangguran :V
Wkwk, jadi gini… gw udah lama banget hunting di wolfSSL ini. Buat yang gak tau, wolfSSL itu library SSL/TLS yang dipake di banyak embedded…
25 views
Daily Writeups
⤷ Title: From Recon to Letter of Recognition | NASA VDP
════════════════════════
𐀪 Author: Wahyu Priambodo
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 02:04:17 GMT
════════════════════════
⌗ Tags: #source_code_disclosure #nasa_vdp #bugcrowd #bug_bounty
Medium
From Recon to Letter of Recognition | NASA VDP
Full Source Code Disclosure from a “.git” Repository
12 views
Daily Writeups
⤷ Title: Trellix Investigates Unauthorized Breach of Internal Source Code Repository
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 08:05:21 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber attack 2026 #cybersecurity news #Data Theft #digital forensics #Endpoint Protection #Infosec #Repository Security #Source Code Breach #Supply Chain Risk #Trellix #XDR
Penetration Testing Tools
Trellix Investigates Unauthorized Breach of Internal Source Code Repository
Cybersecurity giant Trellix confirms an incursion into its internal code repository. Independent experts are investigating potential risks to XDR and endpoint logic.
16 views
Daily Writeups
⤷ Title: Grafana Says It Rejected Ransom Demand After Source Code Theft
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Sun, 17 May 2026 10:17:46 +0000
════════════════════════
⌗ Tags: #Data Breaches #Cyber Attack #Cyber Crime #Cybersecurity #GitHub #Grafana #Ransom #Source Code #Vulnerability
Hackread
Grafana Says It Rejected Ransom Demand After Source Code Theft
Grafana says hackers stole its source code after accessing a GitHub token, but no customer data or systems were affected.
34 views
Daily Writeups
⤷ Title: The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 04:06:15 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber Security #GitHub Token Rotation #Grafana Labs #Incident Response #infosec #Mini Shai_Hulud #npm Worm #Ransom Demand #Source Code Theft #supply chain attack
Daily CyberSecurity
The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign
Grafana Labs confirms a targeted cyberattack and source code theft after a missed token from the Mini Shai-Hulud npm worm left a repository exposed.
23 views
Daily Writeups
⤷ Title: Four-Way PHP Domino-Fall: Unchecked Input to Full Root Compromise
════════════════════════
𐀪 Author: Xia0checkmate
════════════════════════
ⴵ Time: Fri, 29 May 2026 17:39:38 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #critical_thinking #bug_bounty_writeup #source_code_review #php
Medium
Four-Way PHP Domino-Fall: Unchecked Input to Full Root Compromise
A single, seemingly innocent HTTP endpoint can form a critical business-impact chain when multiple structural PHP weaknesses are stitched…
36 views