Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Malicious Kong Ingress Controller Image Found on DockerHub
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 14 Jan 2025 09:33:33 +0000
════════════════════════
⌗ Tags: #Security #breach #Cyber Attack #Cybersecurity #DockerHub #Kong Ingress
Hackread - Latest Cybersecurity, Hacking News, Tech, AI & Crypto
Malicious Kong Ingress Controller Image Found on DockerHub
Follow us on Bluesky, Twitter (X) and Facebook at @Hackread
42 views
Daily Writeups
⤷ Title: Certificação Gratuita em Segurança de APIs REST: Securing API Servers
════════════════════════
𐀪 Author: Renato Groffe
════════════════════════
ⴵ Time: Fri, 17 Jan 2025 11:02:04 GMT
════════════════════════
⌗ Tags: #kong #api_security #azure_api_management #api_gateway #rest_api
Medium
Certificação Gratuita em Segurança de APIs REST: Securing API Servers
No dia 18/12/2024 (quarta-feira) concluí mais um treinamento/certificação da APIsec University: Securing API Servers! Assim como outras…
38 views
Daily Writeups
⤷ Title: [個案學習] API Server 未經授權連線透過Kong API Gateway 的HMAC-Auth快速排除手段
════════════════════════
𐀪 Author: 邱繼平
════════════════════════
ⴵ Time: Tue, 25 Mar 2025 03:01:50 GMT
════════════════════════
⌗ Tags: #api_security #hacking #hmac #kong #http_request
Medium
[個案學習] API Server 未經授權連線透過Kong API Gateway 的HMAC-Auth快速排除手段
這是一篇結合了Mobile APP安全性架構設計探討，將懷疑是異常流量進行解封包剖析之後，利用Kong 的作為API Gateway作為API Server的緩衝架構設計，結合 HMAC Auth Plugin套件與APP 開發人員協作之後，完成一次疑似異常流量的排除故事。
30 views
Daily Writeups
⤷ Title: CVE-2025-1087: Critical Template Injection in Insomnia API Client Enables Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 May 2025 00:42:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #API security #CVE_2025_1087 #Developer Tools #Insomnia #JavaScript RCE #Kong #Template Injection
Daily CyberSecurity
CVE-2025-1087: Critical Template Injection in Insomnia API Client Enables Remote Code Execution
CVE-2025-1087: Critical flaw in Kong Insomnia allows template injection and arbitrary code execution. Users urged to update to v11.0.2 immediately.
15 views
Daily Writeups
⤷ Title: Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
════════════════════════
𐀪 Author: Amanuel Eshete
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:48:41 GMT
════════════════════════
⌗ Tags: #kong_api_gateway #api_security #openid_connect #microservices #angular
Medium
Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
Integrating OpenID Connect (OIDC) into a microservices platform can feel straightforward — until subtle issues put your UI, APIs, and…
26 views
Daily Writeups
⤷ Title: Why API Gateways Are Critical for Securing Public APIs
════════════════════════
𐀪 Author: Charmaine Mangorima
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 19:09:59 GMT
════════════════════════
⌗ Tags: #api_gateway #kong_api_gateway #api #rate_limiting #api_security
Medium
Why API Gateways Are Critical for Securing Public APIs
APIs are the backbone of modern applications, enabling communication between mobile apps, web platforms and backend services. However, when…
44 views
Daily Writeups
⤷ Title: Kong Gateway Veri Düzleminde Gerçek Zamanlı Dolandırıcılık Tespiti: Fraud Guard
════════════════════════
𐀪 Author: Recep Baykara
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 09:18:53 GMT
════════════════════════
⌗ Tags: #kong_plugin #api_security #fraud_detection #kong_api_gateway
Medium
Kong Gateway Veri Düzleminde Gerçek Zamanlı Dolandırıcılık Tespiti: Fraud Guard
Finansal bir API’nin trafiğini analiz ettiğinizde üç farklı istek profiliyle karşılaşırsınız: meşru kullanıcılar, kötü niyetli botlar ve…
42 views
Daily Writeups
⤷ Title: The consequences of an insecure KongAPI Gateways: A virtual lab exploring security…
════════════════════════
𐀪 Author: Paul Volosen
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 17:27:25 GMT
════════════════════════
⌗ Tags: #api_gateway #api_security #kong_gateway
Medium
A virtual lab exploring an insecure Kong API Gateway
An in-depth security analysis of Kong Gateway
26 views
Daily Writeups
⤷ Title: SEO Poisoning & NativeAOT: Unmasking the “Kong RAT” Campaign Targeting IT Professionals
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:13:58 +0000
════════════════════════
⌗ Tags: #Malware #.NET 10.0 NativeAOT #Alibaba Cloud OSS #cyber_espionage #eSentire TRU #FinalShell #infosec #IT security #Kong RAT #malware #SEO Poisoning #Trojanized Installers #Xshell
Daily CyberSecurity
SEO Poisoning & NativeAOT: Unmasking the "Kong RAT" Campaign Targeting IT Professionals
Kong RAT: A year-long SEO poisoning campaign targeting developers with trojanized SSH/VPN tools and .NET NativeAOT stealth. Learn how to stay protected.
10 views