Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Best Practices for Application Security in Ruby on Rails ️
════════════════════════
𐀪 Author: Manoj Prasad
════════════════════════
ⴵ Time: Sat, 01 Mar 2025 18:37:32 GMT
════════════════════════
⌗ Tags: #application_security #rails #ruby_on_rails #ruby_on_rails_development #best_practices
Medium
Best Practices for Application Security in Ruby on Rails 🛡️🚀
Ruby on Rails comes with built-in security features, but developers must follow best practices to prevent vulnerabilities such as SQL…
46 views
Daily Writeups
⤷ Title: From self XSS to RCE in Ruby on rails
════════════════════════
𐀪 Author: handball10
════════════════════════
ⴵ Time: Thu, 10 Apr 2025 06:44:58 GMT
════════════════════════
⌗ Tags: #bug_bounty #remote_code_execution #ruby_on_rails #xss_attack
Medium
From self XSS to RCE in Ruby on rails
Hey there, this is my first blog post here about a recent interesting finding I came accross on a private bug bounty target.
29 views
Daily Writeups
⤷ Title: Heal HTB Write-up
════════════════════════
𐀪 Author: Pr3ach3r
════════════════════════
ⴵ Time: Sat, 17 May 2025 20:39:35 GMT
════════════════════════
⌗ Tags: #pentesting #cybersecurity #limesurvey #hackthebox_writeup #ruby_on_rails
Medium
Heal HTB Write-up
Building a resume can be worse than you think: Exploiting vulnerabilities in Ruby on Rails, LimeSurvey and Consul UI
14 views
Daily Writeups
⤷ Title: HackTheBox Heal Writeup & Walkthrough
════════════════════════
𐀪 Author: Motasem Hamdan
════════════════════════
ⴵ Time: Fri, 23 May 2025 06:59:18 GMT
════════════════════════
⌗ Tags: #hackthebox_walkthrough #ruby #ruby_on_rails #hackthebox #hackthebox_writeup
Medium
HackTheBox Heal Writeup & Walkthrough
HackTheBox Heal begins with reconnaissance revealing two main subdomains: a Ruby on Rails-based API and a PHP-based LimeSurvey application…
55 views
Daily Writeups
⤷ Title: Menganalisis Kerentanan Rails Debug Mode pada Ruby on Rails
════════════════════════
𐀪 Author: Ahmadfaizabdillah
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 13:16:52 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #bug_bounty_writeup #ruby_on_rails_development #ruby_on_rails
Medium
Menganalisis Kerentanan Rails Debug Mode pada Ruby on Rails
Dalam proses pengembangan aplikasi web menggunakan Ruby on Rails, fitur debug mode sering kali menjadi alat bantu penting bagi developer…
20 views
Daily Writeups
⤷ Title: 5 Security Mistakes Developers Make in Ruby on Rails (And How to Fix Them)
════════════════════════
𐀪 Author: Ajey
════════════════════════
ⴵ Time: Wed, 23 Jul 2025 18:04:18 GMT
════════════════════════
⌗ Tags: #web_security #ruby #cybersecurity #devsecops #ruby_on_rails
Medium
5 Security Mistakes Developers Make in Ruby on Rails (And How to Fix Them)
Ruby on Rails is a dream for developers who love to build and iterate quickly. But let’s be honest — moving fast can sometimes mean…
20 views
Daily Writeups
⤷ Title: How to Audit a Ruby on Rails Application You Didn’t Build (Senior Dev Edition)
════════════════════════
𐀪 Author: Ajey
════════════════════════
ⴵ Time: Fri, 25 Jul 2025 03:31:03 GMT
════════════════════════
⌗ Tags: #ruby_on_rails #cybersecurity #ruby #code_audit #app_development
Medium
🧠 How to Audit a Ruby on Rails Application You Didn’t Build (Senior Dev Edition)
As a senior Ruby on Rails developer, you’re sometimes asked to assess an existing application — one you didn’t build. Whether you’re…
29 views
Daily Writeups
⤷ Title: Rails .html_safe — The Hidden XSS Trap (With a Full Example)
════════════════════════
𐀪 Author: Dghim Sami
════════════════════════
ⴵ Time: Sat, 09 Aug 2025 17:10:14 GMT
════════════════════════
⌗ Tags: #ruby #ruby_on_rails #xss_vulnerability #xss_attack
Medium
Rails .html_safe — The Hidden XSS Trap (With a Full Example)
Ruby on Rails has your back when it comes to cross-site scripting (XSS) — by default, it escapes all strings in your views so malicious…
55 views
Daily Writeups
⤷ Title: Essential Rails Security: Protecting Your Application from Top Pitfalls
════════════════════════
𐀪 Author: Anamika
════════════════════════
ⴵ Time: Fri, 29 Aug 2025 09:24:27 GMT
════════════════════════
⌗ Tags: #strong_parameters #backend_development #ruby_on_rails #sql_injection #web_security
Medium
Essential Rails Security: Protecting Your Application from Top Pitfalls
Ruby on Rails, often lauded for its developer-friendliness and convention-over-configuration philosophy, provides a robust foundation for…
12 views
Daily Writeups
⤷ Title: Inside RubyGems’ Silent War Against Malicious Packages: A Developer’s Reality Check
════════════════════════
𐀪 Author: Mi Do
════════════════════════
ⴵ Time: Mon, 01 Sep 2025 00:12:10 GMT
════════════════════════
⌗ Tags: #ruby_on_rails #ruby #devops #devsecops #cybersecurity
Medium
Inside RubyGems’ Silent War Against Malicious Packages: A Developer’s Reality Check
The untold story of how Ruby’s package registry fights supply chain attacks daily — and what it means for your next project
29 views
Daily Writeups
⤷ Title: JetBrains Makes RubyMine Free for Non-Commercial Use
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Sep 2025 03:21:13 +0000
════════════════════════
⌗ Tags: #Technology #Developers #free software #IDE #JetBrains #non_commercial #open_source #ruby on rails #RubyMine
Daily CyberSecurity
JetBrains Makes RubyMine Free for Non-Commercial Use
JetBrains has made its RubyMine IDE free for non-commercial use. The move is designed to lower the barrier for new developers and content creators.
13 views
Daily Writeups
⤷ Title: Protect Your Rails API with Rack-Attack Rate Limiting (Step-by-Step)️
════════════════════════
𐀪 Author: Ahmet Kaptan
════════════════════════
ⴵ Time: Wed, 12 Nov 2025 09:32:21 GMT
════════════════════════
⌗ Tags: #rest_api #api_security #ruby_on_rails #software_development #backend_development
Medium
Protect Your Rails API with Rack-Attack Rate Limiting (Step-by-Step)🛡️
A while back, while working at a company that handled one of our biggest enterprise clients, I ran into one of those production nightmares…
45 views
Daily Writeups
⤷ Title: Secure Query Practices in Ruby on Rails
════════════════════════
𐀪 Author: Muhammad Bin Hussain
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 20:30:29 GMT
════════════════════════
⌗ Tags: #ruby_on_rails #web_security #secure_coding_practice #sql_injection #backend_development
Medium
Secure Query Practices in Ruby on Rails
Preventing SQL Injection Through Understanding, Not Fear
45 views
Daily Writeups
⤷ Title: Rate Limiting Your Rails API with Rack::Attack gem
════════════════════════
𐀪 Author: Talha Khalid
════════════════════════
ⴵ Time: Mon, 02 Mar 2026 00:52:59 GMT
════════════════════════
⌗ Tags: #api_rate_limiting #api_security #ruby_on_rails #web_development #rubygems
Medium
Rate Limiting Your Rails API with Rack::Attack gem
Rate limiting is a fundamental aspect of API security and stability. Without it, endpoints are vulnerable to brute force attacks…
25 views
Daily Writeups
⤷ Title: RubyGems Under Siege: New Account Registrations Suspended After Massive Malware Incursion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 09:00:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Security News #Infosec #Maciej Mensfeld #Malware 2026 #Mend.io #open source security #Package Manager Security #Ruby on Rails #RubyGems #supply chain attack #TeamPCP
Penetration Testing Tools
RubyGems Under Siege: New Account Registrations Suspended After Massive Malware Incursion
RubyGems has temporarily suspended the registration of new accounts following a pervasive assault on the Ruby ecosystem. According
27 views
Daily Writeups
⤷ Title: Before You Deploy, Ask One Question: Are Your Gems Secure?
════════════════════════
𐀪 Author: J3
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 20:04:58 GMT
════════════════════════
⌗ Tags: #devsecops #ruby_on_rails #cybersecurity #application_security #bundleraudit
Medium
Before You Deploy, Ask One Question: Are Your Gems Secure?
A hands-on introduction to Bundler Audit, CVEs, dependency security, and safer Ruby deployments.
17 views
Daily Writeups
⤷ Title: Stop Ignoring Brakeman Warnings: The Hidden Meaning Behind CWE Codes
════════════════════════
𐀪 Author: J3
════════════════════════
ⴵ Time: Sat, 20 Jun 2026 15:50:42 GMT
════════════════════════
⌗ Tags: #cwecodes #ruby_on_rails #application_security #brakeman #secure_coding
Medium
Stop Ignoring Brakeman Warnings: The Hidden Meaning Behind CWE Codes
Learn how CWE mappings expose critical vulnerabilities like SQL Injection and XSS before they reach production.
16 views
Daily Writeups
⤷ Title: Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 01:11:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #admin panel #Authorization Bypass #Avo #CVE_2026_55518 #Missing Authorization #privilege escalation #Rails Security #ruby on rails
Daily CyberSecurity
Avo Flaw CVE-2026-55518 Enables Privilege Escalation in Rails Apps
CVE-2026-55518 is a critical Avo authorization bypass flaw enabling privilege escalation in Ruby on Rails admin panels. Update to Avo 3.32.1 now.
22 views
Daily Writeups
⤷ Title: Rails Active Storage Flaw CVE-2026-66066 Enables Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 30 Jul 2026 03:01:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Storage #Arbitrary File Read #CVE_2026_66066 #libvips #Remote Code Execution #ruby on rails
Daily CyberSecurity
Rails Active Storage Flaw CVE-2026-66066 Enables Remote Code Execution
TL;DR Ruby on Rails has patched a critical Rails Active Storage flaw. Tracked as CVE-2026-66066 and rated 9.5 CVSS, it lets an unauthenticated attacker read arbitrary files from the server. Stolen…
7 views
Daily Writeups
⤷ Title: CVE-2026-66066: Rails Active Storage RCE Exploit Code Now Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 10:17:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Storage #Arbitrary File Read #CVE_2026_66066 #KindaRails2Shell #libvips #metasploit #Remote Code Execution #ruby on rails
Daily CyberSecurity
CVE-2026-66066: Rails Active Storage RCE Exploit Code Now Public
TL;DR: A critical Rails Active Storage RCE flaw, CVE-2026-66066 (CVSS 9.5), lets an unauthenticated attacker read server files and potentially run code through crafted image uploads. A public Meta…
17 views