Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: The Anatomy of React2Shell: Understanding the CVE-2025–55182 Critical RCE
════════════════════════
𐀪 Author: SecureSlate
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 08:49:00 GMT
════════════════════════
⌗ Tags: #cve #react2shell #rce_vulnerability #cybersecurity #anatomy
Medium
The Anatomy of React2Shell: Understanding the CVE-2025–55182 Critical RCE
The Flaw That Gives Hackers Your Server Keys
46 views
Daily Writeups
⤷ Title: “React2Shell” Exploited: New EtherRAT Malware Hunts for Crypto via Node.js
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:21:31 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #Blockchain C2 #Cryptocurrency Theft #CVE_2025_55182 #cyber_espionage #Ethereum #EtherRAT #Node.js #React2Shell #Remote Code Execution
Daily CyberSecurity
“React2Shell” Exploited: New EtherRAT Malware Hunts for Crypto via Node.js
A new, sophisticated malware campaign is sweeping across the internet, leveraging a recently disclosed vulnerability to install cryptocurrency-stealing software on unsuspecting servers. The AhnLab…
25 views
Daily Writeups
⤷ Title: Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:11:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Beelzebub Research #botnet #Cloud Security #CVE_2025_29927 #CVE_2025_55182 #cyber_espionage #data exfiltration #Next.js #PCPcat #rce #React #React2Shell
Daily CyberSecurity
Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours
A highly automated and ruthlessly efficient cyber-espionage campaign is tearing through the cloud infrastructure of modern web applications, leaving tens of thousands of compromised servers in its…
17 views
Daily Writeups
⤷ Title: React2Shell — React Server Components RCE CVE-2025–55182
════════════════════════
𐀪 Author: Zabed Ullah Poyel
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 09:09:16 GMT
════════════════════════
⌗ Tags: #react2shell_vulnerability #poc #cve_2025_55182 #react2shell #rce
Medium
React2Shell — React Server Components RCE CVE-2025–55182
Summary
60 views
Daily Writeups
⤷ Title: “RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:33:19 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CloudSEK #CVE_2025_55182 #IoT security #Next.js #Prototype Pollution #rce #React2Shell #RondoDox #Server Actions #Web Framework Security #XMRig
Daily CyberSecurity
“RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
The RondoDoX botnet has resurfaced with a potent new arsenal, shifting its sights from simple routers to enterprise-grade web frameworks. A new intelligence report from CloudSEK details a sprawlin…
20 views
Daily Writeups
⤷ Title: RondoDox Botnet is Using React2Shell to Hijack Thousands of Unpatched Devices
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 03 Jan 2026 14:59:09 +0000
════════════════════════
⌗ Tags: #Security #Botnet #Cyber Attack #Cybersecurity #Malware #Mirai #Next.js #React2Shell #RondoDox #Vulnerability
Hackread
RondoDox Botnet is Using React2Shell to Hijack Thousands of Unpatched Devices
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
48 views
Daily Writeups
⤷ Title: “Sliver” in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:40:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Bangladesh #Bangladesh Airforce #c0baltstrik3d #CVE_2025_55182 #cyber_espionage #Edge Security #Fast Reverse Proxy #FortiWeb #FRP #Pakistan #React2Shell #Sliver C2
Daily CyberSecurity
"Sliver" in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
Threat actor uses React2Shell to deploy Sliver C2 on FortiWeb devices, using a Bangladesh Airforce decoy to target govt and financial sectors.
32 views
Daily Writeups
⤷ Title: React2Shell (CVE-2025–55182): From React Server Components to Unauthenticated RCE
════════════════════════
𐀪 Author: Mr. Spider
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 17:29:52 GMT
════════════════════════
⌗ Tags: #react2shell #cve_2025_55182 #rce #rce_vulnerability #reactjs
Medium
React2Shell (CVE-2025–55182): From React Server Components to Unauthenticated RCE
In December 2025, security researchers disclosed one of the most critical vulnerabilities ever discovered in the React ecosystem…
64 views
Daily Writeups
⤷ Title: React2Shell turned the harmless OopsSec Store page into full server access
════════════════════════
𐀪 Author: OopsSec Store
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 07:46:57 GMT
════════════════════════
⌗ Tags: #react2shell #hacking #cybersecurity #technology #web_development
Medium
React2Shell Turned the Harmless OopsSec Store Page into Full Server Access
Breaking React Server Components felt way too easy today
17 views
Daily Writeups
⤷ Title: The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:37:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Asia top_level domains #Baota Panel #CVE_2025_55182 #Cyber Espionage #Datadog #man_in_the_middle #MITM #Nginx #React2Shell #Tech News 2026 #traffic hijacking #web server security
Penetration Testing Tools
The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
Security analysts at Datadog have unmasked an ongoing traffic interception campaign targeting NGINX servers and hosting management interfaces,
21 views
Daily Writeups
⤷ Title: The Rise of Vibecoding: AI-Generated Malware Exploits React2Shell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:27:57 +0000
════════════════════════
⌗ Tags: #Malware #AI_generated malware #artificial intelligence #CloudyPots #CVE_2025_55182 #Darktrace #Docker Security #Monero mining #React2Shell #Vibecoding #XMRig
Daily CyberSecurity
The Rise of Vibecoding: AI-Generated Malware Exploits React2Shell
Darktrace detects AI-generated "vibecoding" malware exploiting React2Shell (CVE-2025-55182). Attackers use AI to deploy XMRig miners on Docker.
14 views
Daily Writeups
⤷ Title: TryHackMe Writeup (Love at First Breach 2026): Corp Website
════════════════════════
𐀪 Author: Sahand Babali
════════════════════════
ⴵ Time: Sat, 14 Feb 2026 18:31:14 GMT
════════════════════════
⌗ Tags: #react2shell #tryhackme #rce #ctf_writeup #privilege_escalation
Medium
TryHackMe Writeup (Love at First Breach 2026): Corp Website
This challenge is part of TryHackMe’s Love at First Breach 2026 Valentine event.
17 views
Daily Writeups
⤷ Title: JavaScript’s DNA
════════════════════════
𐀪 Author: Anandhu Kannan
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 07:12:22 GMT
════════════════════════
⌗ Tags: #hacking #react2shell #javascript #cybersecurity #react
Medium
JavaScript’s DNA
How Objects, Prototypes, and Constructors Form the Engine Behind Everything
19 views
Daily Writeups
⤷ Title: Understanding React2Shell (CVE-2025–55182)
════════════════════════
𐀪 Author: Indigo Shadow
════════════════════════
ⴵ Time: Sun, 01 Mar 2026 04:45:15 GMT
════════════════════════
⌗ Tags: #ethical_hacking #react2shell #cve202555182 #react_server_component #javascript_nextjs
Medium
Understanding React2Shell (CVE-2025–55182)
The Critical RCE in React Server Components
61 views
Daily Writeups
⤷ Title: Suspected North Korean Actors Target the Cryptocurrency Supply Chain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 00:18:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AWS Kill Chain #Cloud Security #cryptocurrency #Ctrl_Alt_Intel #CVE_2025_55182 #cybersecurity #DPRK Hackers #infosec #Kubernetes #React2Shell #supply chain attack
Daily CyberSecurity
Suspected North Korean Actors Target the Cryptocurrency Supply Chain
Ctrl-Alt-Intel exposes a suspected DPRK campaign using an 'Amazon Kill Chain' and React2Shell to systematically breach crypto exchanges and steal code.
13 views
Daily Writeups
⤷ Title: The 48-Hour Window: Google’s H1 2026 Report Warns of “Spectrally Stealthy” Cloud Breaches
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 07:08:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cloud security #google cloud #Identity_Aware Proxy #NIST 800_207 #QUIETVAULT #ransomware #React2Shell #supply chain attack #Threat Horizons 2026 #UNC3944 #UNC4899 #Vishing
18 views
Daily Writeups
⤷ Title: The RaaS Pivot: Pro-Iranian Hacktivists Abandon Sicarii for the BQTLock Extortion Engine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 09:31:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BQTLock #Cyber Islamic Resistance #Double Extortion #Karim Fayad #Liwaa Mohammad #Pro_Iranian Hacktivism #RaaS #Ransomware 2026 #React2Shell #Sicarii #threat intelligence
Penetration Testing Tools
The RaaS Pivot: Pro-Iranian Hacktivists Abandon Sicarii for the BQTLock Extortion Engine
Pro-Iranian ransomware syndicates are orchestrating a strategic pivot in their digital weaponry. Abandoning the Sicarii architecture, these factions
15 views
Daily Writeups
⤷ Title: UAT-10608 Collective Hijacked 700+ Next.js Servers in Hours
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:57:14 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #Cisco Talos #cloud security #Credential Harvesting #CVE_2025_55182 #Cybersecurity 2026 #Next.js #React2Shell #remote code execution #supply chain attack #UAT_10608
Penetration Testing Tools
UAT-10608 Collective Hijacked 700+ Next.js Servers in Hours
Cybersecurity specialists have chronicled a voluminous, automated campaign for credential harvesting that, within a mere matter of hours,
8 views
Daily Writeups
⤷ Title: UAT-10608 Uses a Next.js “React2Shell” Flaw to Map Your Entire Cloud
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 08:30:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cisco Talos #Cloud Security #Credential Harvesting #CVE_2025_55182 #infosec #Next.js #NEXUS Listener #React2Shell #supply chain attack #UAT_10608 #Web Security
Daily CyberSecurity
UAT-10608 Uses a Next.js "React2Shell" Flaw to Map Your Entire Cloud
Cisco Talos uncovers UAT-10608, an automated campaign using "NEXUS Listener" to harvest Next.js credentials via React2Shell. Patch your cloud tokens now!
8 views
Daily Writeups
⤷ Title: AI in the Driver’s Seat: How the ‘Bissa’ Scanner Hijacked 900+ Firms in Weeks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:00:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.env file theft #AI Cyber Attack #AWS #Bissa Scanner #Claude Code #Cloud Security #CVE_2025_55182 #Dr. Tube #OpenAI #OpenClaw #React2Shell #Stripe #Telegram bot #The DFIR Report
Daily CyberSecurity
AI in the Driver’s Seat: How the ‘Bissa’ Scanner Hijacked 900+ Firms in Weeks
Dr. Tube’s AI-assisted Bissa scanner exploited 900+ companies using React2Shell (CVE-2025-55182) to steal 30,000 .env files. See the AI-led attack workflow.
15 views