Daily Writeups
@Daily_Writeups
3.54K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.54K subscribers
Daily Writeups
⤷ Title: The Rise of Vibecoding: AI-Generated Malware Exploits React2Shell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:27:57 +0000
════════════════════════
⌗ Tags: #Malware #AI_generated malware #artificial intelligence #CloudyPots #CVE_2025_55182 #Darktrace #Docker Security #Monero mining #React2Shell #Vibecoding #XMRig
Daily CyberSecurity
The Rise of Vibecoding: AI-Generated Malware Exploits React2Shell
Darktrace detects AI-generated "vibecoding" malware exploiting React2Shell (CVE-2025-55182). Attackers use AI to deploy XMRig miners on Docker.
14 views
Daily Writeups
⤷ Title: TryHackMe Writeup (Love at First Breach 2026): Corp Website
════════════════════════
𐀪 Author: Sahand Babali
════════════════════════
ⴵ Time: Sat, 14 Feb 2026 18:31:14 GMT
════════════════════════
⌗ Tags: #react2shell #tryhackme #rce #ctf_writeup #privilege_escalation
Medium
TryHackMe Writeup (Love at First Breach 2026): Corp Website
This challenge is part of TryHackMe’s Love at First Breach 2026 Valentine event.
17 views
Daily Writeups
⤷ Title: JavaScript’s DNA
════════════════════════
𐀪 Author: Anandhu Kannan
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 07:12:22 GMT
════════════════════════
⌗ Tags: #hacking #react2shell #javascript #cybersecurity #react
Medium
JavaScript’s DNA
How Objects, Prototypes, and Constructors Form the Engine Behind Everything
19 views
Daily Writeups
⤷ Title: Understanding React2Shell (CVE-2025–55182)
════════════════════════
𐀪 Author: Indigo Shadow
════════════════════════
ⴵ Time: Sun, 01 Mar 2026 04:45:15 GMT
════════════════════════
⌗ Tags: #ethical_hacking #react2shell #cve202555182 #react_server_component #javascript_nextjs
Medium
Understanding React2Shell (CVE-2025–55182)
The Critical RCE in React Server Components
61 views
Daily Writeups
⤷ Title: Suspected North Korean Actors Target the Cryptocurrency Supply Chain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 00:18:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AWS Kill Chain #Cloud Security #cryptocurrency #Ctrl_Alt_Intel #CVE_2025_55182 #cybersecurity #DPRK Hackers #infosec #Kubernetes #React2Shell #supply chain attack
Daily CyberSecurity
Suspected North Korean Actors Target the Cryptocurrency Supply Chain
Ctrl-Alt-Intel exposes a suspected DPRK campaign using an 'Amazon Kill Chain' and React2Shell to systematically breach crypto exchanges and steal code.
13 views
Daily Writeups
⤷ Title: The 48-Hour Window: Google’s H1 2026 Report Warns of “Spectrally Stealthy” Cloud Breaches
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 07:08:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cloud security #google cloud #Identity_Aware Proxy #NIST 800_207 #QUIETVAULT #ransomware #React2Shell #supply chain attack #Threat Horizons 2026 #UNC3944 #UNC4899 #Vishing
18 views
Daily Writeups
⤷ Title: The RaaS Pivot: Pro-Iranian Hacktivists Abandon Sicarii for the BQTLock Extortion Engine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 09:31:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BQTLock #Cyber Islamic Resistance #Double Extortion #Karim Fayad #Liwaa Mohammad #Pro_Iranian Hacktivism #RaaS #Ransomware 2026 #React2Shell #Sicarii #threat intelligence
Penetration Testing Tools
The RaaS Pivot: Pro-Iranian Hacktivists Abandon Sicarii for the BQTLock Extortion Engine
Pro-Iranian ransomware syndicates are orchestrating a strategic pivot in their digital weaponry. Abandoning the Sicarii architecture, these factions
15 views
Daily Writeups
⤷ Title: UAT-10608 Collective Hijacked 700+ Next.js Servers in Hours
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:57:14 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #Cisco Talos #cloud security #Credential Harvesting #CVE_2025_55182 #Cybersecurity 2026 #Next.js #React2Shell #remote code execution #supply chain attack #UAT_10608
Penetration Testing Tools
UAT-10608 Collective Hijacked 700+ Next.js Servers in Hours
Cybersecurity specialists have chronicled a voluminous, automated campaign for credential harvesting that, within a mere matter of hours,
8 views
Daily Writeups
⤷ Title: UAT-10608 Uses a Next.js “React2Shell” Flaw to Map Your Entire Cloud
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:30:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #Cloud Security #Credential Harvesting #CVE_2025_55182 #infosec #Next.js #NEXUS Listener #React2Shell #supply chain attack #UAT_10608 #Web Security
Daily CyberSecurity
UAT-10608 Uses a Next.js "React2Shell" Flaw to Map Your Entire Cloud
Cisco Talos uncovers UAT-10608, an automated campaign using "NEXUS Listener" to harvest Next.js credentials via React2Shell. Patch your cloud tokens now!
9 views
Daily Writeups
⤷ Title: AI in the Driver’s Seat: How the ‘Bissa’ Scanner Hijacked 900+ Firms in Weeks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:00:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.env file theft #AI Cyber Attack #AWS #Bissa Scanner #Claude Code #Cloud Security #CVE_2025_55182 #Dr. Tube #OpenAI #OpenClaw #React2Shell #Stripe #Telegram bot #The DFIR Report
Daily CyberSecurity
AI in the Driver’s Seat: How the ‘Bissa’ Scanner Hijacked 900+ Firms in Weeks
Dr. Tube’s AI-assisted Bissa scanner exploited 900+ companies using React2Shell (CVE-2025-55182) to steal 30,000 .env files. See the AI-led attack workflow.
16 views