Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Protect Your Rails API with Rack-Attack Rate Limiting (Step-by-Step)️
════════════════════════
𐀪 Author: Ahmet Kaptan
════════════════════════
ⴵ Time: Wed, 12 Nov 2025 09:32:21 GMT
════════════════════════
⌗ Tags: #rest_api #api_security #ruby_on_rails #software_development #backend_development
Medium
Protect Your Rails API with Rack-Attack Rate Limiting (Step-by-Step)🛡️
A while back, while working at a company that handled one of our biggest enterprise clients, I ran into one of those production nightmares…
45 views
Daily Writeups
⤷ Title: Critical Authentication Bypass Flaws Discovered in Ruby SAML Library (CVE-2025-66567 & CVE-2025-66568)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 02:29:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Canonicalization #CVE_2025_66567 #Digest Bypass #Ruby SAML #XML Parser Differential
Daily CyberSecurity
Critical Authentication Bypass Flaws Discovered in Ruby SAML Library (CVE-2025-66567 & CVE-2025-66568)
A pair of critical security vulnerabilities has been disclosed in the Ruby SAML library, a foundational tool used by developers to implement client-side SAML authorization. Both flaws carry a crit…
31 views
Daily Writeups
⤷ Title: Ruby 4.0 Unwrapped: Meet ZJIT and the Game-Changing Ruby Box
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 02:26:41 +0000
════════════════════════
⌗ Tags: #Technology #Backend #JIT Compiler #Memory Safety #performance #Programming 2026 #Ractor #Ruby 4.0 #Ruby Box #Web Development #ZJIT
Penetration Testing Tools
Ruby 4.0 Unwrapped: Meet ZJIT and the Game-Changing Ruby Box
Ruby has almost settled into a festive tradition of its own: each Christmas, the developers unveil a new
18 views
Daily Writeups
⤷ Title: How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE
════════════════════════
𐀪 Author: Ahmed Tarek
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 19:06:39 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #dependency_confusion #bug_bounty_tips #ruby
Medium
How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE
hey there,
22 views
Daily Writeups
⤷ Title: Secure Query Practices in Ruby on Rails
════════════════════════
𐀪 Author: Muhammad Bin Hussain
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 20:30:29 GMT
════════════════════════
⌗ Tags: #ruby_on_rails #web_security #secure_coding_practice #sql_injection #backend_development
Medium
Secure Query Practices in Ruby on Rails
Preventing SQL Injection Through Understanding, Not Fear
45 views
Daily Writeups
⤷ Title: The Unsafe Send: How an HTTP Client Library Led to Remote Code Execution
════════════════════════
𐀪 Author: Alperen
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 02:44:52 GMT
════════════════════════
⌗ Tags: #hackerone #source_code_security #source_code #ruby #bugbounty_writeup
Medium
The Unsafe Send: How an HTTP Client Library Led to Remote Code Execution
Finding a vulnerability in a core library is always a “hold your breath” moment. You realize that the impact isn’t just limited to one…
45 views
Daily Writeups
⤷ Title: Unsafe Deserialization in Ruby Background Workers Leading to Deterministic Remote Code Execution
════════════════════════
𐀪 Author: NullSecurityX
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 16:57:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf_writeup #json #bug_bounty #ruby
Medium
Unsafe Deserialization in Ruby Background Workers Leading to Deterministic Remote Code Execution
Object Injection via Oj.load Allows Command Execution in RubitMQ Job Workers
23 views
Daily Writeups
⤷ Title: Rate Limiting Your Rails API with Rack::Attack gem
════════════════════════
𐀪 Author: Talha Khalid
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 00:52:59 GMT
════════════════════════
⌗ Tags: #api_rate_limiting #api_security #ruby_on_rails #web_development #rubygems
Medium
Rate Limiting Your Rails API with Rack::Attack gem
Rate limiting is a fundamental aspect of API security and stability. Without it, endpoints are vulnerable to brute force attacks…
25 views
Daily Writeups
⤷ Title: Bridging the Gap: North Korean APT37 Deploys ‘Ruby Jumper’ to Infiltrate Isolated Air-Gapped Networks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 00:05:18 +0000
════════════════════════
⌗ Tags: #Malware #Air_gap attack #APT37 #Cloud C2 #infosec #North Korean APT #Ruby Jumper #ScarCruft #SNAKEDROPPER #THUMBSBD #USB malware #VIRUSTASK
Daily CyberSecurity
Bridging the Gap: North Korean APT37 Deploys 'Ruby Jumper' to Infiltrate Isolated Air-Gapped Networks
Zscaler unmasked APT37's "Ruby Jumper" campaign, which uses weaponized USBs and cloud services to bypass network isolation and steal data from air-gapped systems.
7 views
Daily Writeups
⤷ Title: Jumping the Gap: APT37’s “Ruby Jumper” Campaign Weaponizes Cloud Storage and USBs to Breach Isolated Networks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 07:01:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #air_gapped network #APT37 #Cybersecurity 2026 #RESTLEAF #Ruby Jumper #ScarCruft #SNAKEDROPPER #THUMBSBD #USB Malware #Velvet Chollima #VIRUSTASK #Zoho WorkDrive #Zscaler ThreatLabz
Penetration Testing Tools
Jumping the Gap: APT37’s "Ruby Jumper" Campaign Weaponizes Cloud Storage and USBs to Breach Isolated Networks
The DPRK-affiliated syndicate APT37 has augmented its arsenal dedicated to breaching air-gapped networks. The Zscaler ThreatLabz vanguard has
13 views
Daily Writeups
⤷ Title: Rocket — CVE-2021–22911 NoSQL Injection + Ruby cap_setuid to Root | TryHackMe
════════════════════════
𐀪 Author: Roshan Rajbanshi
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 14:46:42 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ethical_hacking #sql #ruby
Medium
Rocket — CVE-2021–22911 NoSQL Injection + Ruby cap_setuid to Root | TryHackMe
The Rocket machine presents a layered, multi-service attack surface that rewards methodical enumeration and precise exploit chaining. The…
12 views
Daily Writeups
⤷ Title: GemStuffer: Attackers Weaponize RubyGems as a Covert Data Drop for UK Gov Scraping
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 04:21:32 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #data exfiltration #GemStuffer #infosec #Malware Analysis #ModernGov #Ruby Security #RubyGems #Socket #supply chain attack #UK Council Security
Daily CyberSecurity
GemStuffer: Attackers Weaponize RubyGems as a Covert Data Drop for UK Gov Scraping
GemStuffer exploits RubyGems as an illicit data transport to scrape UK council portals. Discover how this supply chain attack bypasses standard defenses.
23 views
Daily Writeups
⤷ Title: RubyGems Under Siege: New Account Registrations Suspended After Massive Malware Incursion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 09:00:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Security News #Infosec #Maciej Mensfeld #Malware 2026 #Mend.io #open source security #Package Manager Security #Ruby on Rails #RubyGems #supply chain attack #TeamPCP
Penetration Testing Tools
RubyGems Under Siege: New Account Registrations Suspended After Massive Malware Incursion
RubyGems has temporarily suspended the registration of new accounts following a pervasive assault on the Ruby ecosystem. According
27 views
Daily Writeups
⤷ Title: Before You Deploy, Ask One Question: Are Your Gems Secure?
════════════════════════
𐀪 Author: J3
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 20:04:58 GMT
════════════════════════
⌗ Tags: #devsecops #ruby_on_rails #cybersecurity #application_security #bundleraudit
Medium
Before You Deploy, Ask One Question: Are Your Gems Secure?
A hands-on introduction to Bundler Audit, CVEs, dependency security, and safer Ruby deployments.
17 views
Daily Writeups
⤷ Title: Stop Ignoring Brakeman Warnings: The Hidden Meaning Behind CWE Codes
════════════════════════
𐀪 Author: J3
════════════════════════
ⴵ Time: Sat, 20 Jun 2026 15:50:42 GMT
════════════════════════
⌗ Tags: #cwecodes #ruby_on_rails #application_security #brakeman #secure_coding
Medium
Stop Ignoring Brakeman Warnings: The Hidden Meaning Behind CWE Codes
Learn how CWE mappings expose critical vulnerabilities like SQL Injection and XSS before they reach production.
17 views
Daily Writeups
⤷ Title: Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 01:11:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #admin panel #Authorization Bypass #Avo #CVE_2026_55518 #Missing Authorization #privilege escalation #Rails Security #ruby on rails
Daily CyberSecurity
Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps
CVE-2026-55518 is a critical Avo authorization bypass flaw enabling privilege escalation in Ruby on Rails admin panels. Update to Avo 3.32.1 now.
22 views
Daily Writeups
⤷ Title: Rails Active Storage Flaw CVE-2026-66066 Enables Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 03:01:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Storage #Arbitrary File Read #CVE_2026_66066 #libvips #Remote Code Execution #ruby on rails
Daily CyberSecurity
Rails Active Storage Flaw CVE-2026-66066 Enables Remote Code Execution
TL;DR Ruby on Rails has patched a critical Rails Active Storage flaw. Tracked as CVE-2026-66066 and rated 9.5 CVSS, it lets an unauthenticated attacker read arbitrary files from the server. Stolen…
7 views
Daily Writeups
⤷ Title: Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 31 Jul 2026 07:30:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #depthfirst #gitlab #GitLab RCE #ipynbdiff #memory corruption #Oj #proof_of_concept #Remote Code Execution #Ruby
Daily CyberSecurity
Public PoC Exploits GitLab RCE via Two Oj Memory Corruption Bugs
TL;DR: Researchers at depthfirst released a working proof-of-concept for a GitLab RCE that runs commands as the git user. The chain abuses two memory corruption bugs in Oj, a native Ruby JSON pars…
26 views
Daily Writeups
⤷ Title: CVE-2026-66066: Rails Active Storage RCE Exploit Code Now Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 10:17:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Storage #Arbitrary File Read #CVE_2026_66066 #KindaRails2Shell #libvips #metasploit #Remote Code Execution #ruby on rails
Daily CyberSecurity
CVE-2026-66066: Rails Active Storage RCE Exploit Code Now Public
TL;DR: A critical Rails Active Storage RCE flaw, CVE-2026-66066 (CVSS 9.5), lets an unauthenticated attacker read server files and potentially run code through crafted image uploads. A public Meta…
17 views
Daily Writeups
⤷ Title: KindaRails2Shell: Ruby on Rails CVE-2026-66066 RCE Flaw
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 07:28:06 +0000
════════════════════════
⌗ Tags: #Vulnerability #Active Storage #CVE_2026_66066 #cybersecurity #KindaRails2Shell #Ruby on Rails
Information Security News
KindaRails2Shell: Ruby on Rails CVE-2026-66066 RCE Flaw
A crafted image can turn a standard avatar upload form into a covert conduit for stealing web application secrets. A vulnerable Ruby on Rails server may expose encryption keys, database passwords,…
23 views