Daily Writeups
@Daily_Writeups
3.79K subscribers
4 photos
133K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.79K subscribers
Daily Writeups
⤷ Title: Eleven Organizations in Twenty-Six Seconds: What GreyNoise’s PaperCut Campaign Confirms
════════════════════════
𐀪 Author: Duncan Ndegwa
════════════════════════
ⴵ Time: Tue, 15 Sep 2026 11:31:13 GMT
════════════════════════
⌗ Tags: #security_credentials #papercut #ai #grey_noise #api_security
Medium
Eleven Organizations in Twenty-Six Seconds: What GreyNoise’s PaperCut Campaign Confirms
GreyNoise Traced an AI-Orchestrated Attack Across 395 Organizations. The Credentials It Stole Were Already Real.
32 views
Daily Writeups
⤷ Title: OWASP JUICE SHOP Detailed Writeup Part-1
════════════════════════
𐀪 Author: 0xcybersoldier
════════════════════════
ⴵ Time: Tue, 15 Sep 2026 19:08:26 GMT
════════════════════════
⌗ Tags: #owasp #api_security #ctf #pentesting #owasp_juice_shop
Medium
OWASP JUICE SHOP Detailed Writeup Part-1
hello Everyone this is 0xcybersoldier
48 views
Daily Writeups
⤷ Title: API — RTA 2026: Passing the API — Red Team Analyst
════════════════════════
𐀪 Author: Jason Gomez
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 08:22:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyberwarfare_labs #api_security #api #penetration_testing
Medium
API — RTA 2026: Passing the API — Red Team Analyst
The API Red Team Analyst (API-RTA) certification by CyberWarFare Labs wasn’t originally on my bucket list alongside C-APIPen, C-AI/MLPen…
15 views
Daily Writeups
⤷ Title: API SECURITY: THE DIGITAL DOORWAY BUSINESSES CAN’T IGNORE
════════════════════════
𐀪 Author: Gabriel Odusanya
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 11:41:44 GMT
════════════════════════
⌗ Tags: #pentesting #application_security #gabriel_odusanya #api_security #api
Medium
API SECURITY: THE DIGITAL DOORWAY BUSINESSES CAN’T IGNORE
Application Programming Interfaces (APIs) have become one of the most important components of modern software. Almost every application we…
15 views
Daily Writeups
⤷ Title: The Five-Month Window
════════════════════════
𐀪 Author: Alexius McMullin
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 20:49:44 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_vulnerabilities #jwt #api_security #enterprise_security
Medium
The Five-Month Window
WSO2 patched it in April. Attackers exploited it in September.
28 views
Daily Writeups
⤷ Title: REST, GraphQL, or gRPC? How I Actually Choose API Architecture for Enterprise Software
════════════════════════
𐀪 Author: Sizan Mahmud
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 08:35:49 GMT
════════════════════════
⌗ Tags: #software_architecture #api_security #software_development
Medium
REST, GraphQL, or gRPC? How I Actually Choose API Architecture for Enterprise Software
A practical framework from years of building custom SaaS and ERP systems — not a textbook comparison.
30 views
Daily Writeups
⤷ Title: The OTP Attack That Taught Me a Lesson About Security
════════════════════════
𐀪 Author: Umar Farook J
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 10:15:00 GMT
════════════════════════
⌗ Tags: #secure_coding #authentication #application_security #real_application_security #api_security
Medium
The OTP Attack That Taught Me a Lesson About Security
One unexpected incident. One small exception. And a lesson I will never forget.
15 views
Daily Writeups
⤷ Title: How to Inventory and Lock Down the API Surfaces on Your Network Appliances
════════════════════════
𐀪 Author: Anthony Bahn
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 13:59:46 GMT
════════════════════════
⌗ Tags: #attack_surface_management #api_security #network_appliance #cybersecurity #access_control_list
Medium
How to Inventory and Lock Down the API Surfaces on Your Network Appliances
Infrastructure ACLs only work if you know every listener an appliance exposes. Six steps to enumerate API surfaces, map their…
42 views
Daily Writeups
⤷ Title: From IDOR to Fraud: Breaking Access Control in a Travel Booking Platform
════════════════════════
𐀪 Author: Romene Mohtadi It
════════════════════════
ⴵ Time: Thu, 17 Sep 2026 18:32:59 GMT
════════════════════════
⌗ Tags: #pentesting #api_security #cybersecurity #bug_bounty #owasp
Medium
From IDOR to Fraud: Breaking Access Control in a Travel Booking Platform
Introduction
23 views
Daily Writeups
⤷ Title: Why Admin Panel Subdomain vs Path Isn’t a Security Decision
════════════════════════
𐀪 Author: FOLAKE SOWONOYE
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 18:55:31 GMT
════════════════════════
⌗ Tags: #backend_development #cybersecurity #access_control #web_development #api_security
Medium
Why Admin Panel Subdomain vs Path Isn’t a Security Decision
A decision framework for backend and frontend teams weighing where the admin portal should live, and the RBAC, MFA, and gateway controls
❤1
43 views