Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Tue, 14 Mar 2023 03:44:23 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Linux Privilege Escalation with LD_PRELOAD (Sudo)
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/a13e0b755ede
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cybersecurity #environment_variables #privilege_escalation #hackthebox #linux
Medium
Linux Privilege Escalation with LD_PRELOAD (Sudo)
PREREQUISITE KNOWLEDGE
11 views
Daily Writeups
β€· Title: Why You Should Never Hardcode Secrets in Your Code
════════════════════════
π€ͺ Author: Prasanth Rao
════════════════════════
β΄΅ Time: Fri, 12 Sep 2025 10:33:08 GMT
════════════════════════
βŒ— Tags: #security #dotenv #application_security #best_practices #environment_variables
Medium
Why You Should Never Hardcode Secrets in Your Code
Why managing secrets securely is crucial for building safe, scalable, and maintainable applications
15 views
Daily Writeups
β€· Title: Frontend Secrets: The Good, The Bad, and The Exposed
════════════════════════
π€ͺ Author: Ali Jahangiri
════════════════════════
β΄΅ Time: Thu, 09 Oct 2025 09:02:50 GMT
════════════════════════
βŒ— Tags: #management_secrets #environment_variables #dotenv #api_security #nextjs
Medium
Frontend Secrets: The Good, The Bad, and The Exposed
If you’ve ever pushed an API key to GitHub, struggled to configure different settings for development and production, or wondered why your…
26 views
Daily Writeups
β€· Title: The β€œlc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 25 Dec 2025 00:22:06 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #AI Agents #CVE_2025_68664 #data exfiltration #Environment Variables #Information Disclosure #LangChain #LLM Security #Prompt injection #Python Security #Serialization Injection
Daily CyberSecurity
The β€œlc” Leak: Critical 9.3 Severity LangChain Flaw Turns Prompt Injections into Secret Theft
A critical vulnerability was found in LangChain, the popular open-source framework used to power Large Language Model (LLM) agents. The flaw, tracked as CVE-2025-68664, carries a severe CVSS score…
32 views
Daily Writeups
β€· Title: The AI Weak Link: How a Third-Party Breach Exposed Vercel Customer Secrets
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Tue, 21 Apr 2026 09:17:43 +0000
════════════════════════
βŒ— Tags: #Data Leak #API Keys #cloud security #Context.ai #Cybersecurity 2026 #data breach #Environment Variables #Mandiant #Next.js #OAuth Security #supply chain attack #Vercel
Penetration Testing Tools
The AI Weak Link: How a Third-Party Breach Exposed Vercel Customer Secrets
The month of April concluded for the American firm Vercel with a distressing incident that precipitously transcended the
22 views
Daily Writeups
β€· Title: New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 21 May 2026 08:40:14 +0000
════════════════════════
βŒ— Tags: #Malware #.NET malware #Cyber Security #Environment Variables #FortiGuard Labs #infosec #Infostealer #PawsRunner #Phishing Lure #PureLogs #Steganography Loader #TXZ Archive
Daily CyberSecurity
New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer
FortiGuard Labs warns of PawsRunner, a new .NET steganography loader hiding PureLogs infostealer payloads inside cat images to bypass corporate EDR.
14 views