Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: Understanding Hacking GraphQL — Part 2
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 11:24:54 GMT
════════════════════════
⌗ Tags: #graphql_security #graphql #bug_bounty #ethical_hacking #apihacking
Medium
Understanding Hacking GraphQL — Part 2
In part 1, we introduced GraphQL, explored why it’s gaining popularity, and examined its security implications. We also covered the basics…
20 views
Daily Writeups
⤷ Title: Understanding Hacking GraphQL — Part 3
════════════════════════
𐀪 Author: Redfox Security
════════════════════════
ⴵ Time: Thu, 31 Jul 2025 09:59:59 GMT
════════════════════════
⌗ Tags: #idor #graphql #ssrf #sql_injection_attack #graphql_security
Medium
Understanding Hacking GraphQL — Part 3
SSRF, IDOR, and Injection Attacks in GraphQL
64 views
Daily Writeups
⤷ Title: GraphQL Security: Complete Guide to Finding Hidden Vulnerabilities
════════════════════════
𐀪 Author: Muhammad Haider Tallal
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 17:53:13 GMT
════════════════════════
⌗ Tags: #web_application_security #cybersecurity #graphql_security #api_security #bug_bounty
Medium
GraphQL Security: Complete Guide to Finding Hidden Vulnerabilities
How to detect hidden schema leaks, stop deep-query DoS, and enforce field auth.
19 views
Daily Writeups
⤷ Title: Mapping the GraphQL Attack Surface: Schema Enumeration, Batch Abuse, and Resolver Explosions
════════════════════════
𐀪 Author: Ommkoli
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 19:37:50 GMT
════════════════════════
⌗ Tags: #graphql_security #ai #graphql #security #bug_bounty
Medium
Mapping the GraphQL Attack Surface: Schema Enumeration, Batch Abuse, and Resolver Explosions
A technical taxonomy of GraphQL attack classes that most security tools still miss.
28 views
Daily Writeups
⤷ Title: CVE-2026-5423: Authentication Bypass Hits Neo4j GraphQL Subscriptions
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 13:30:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_5423 #GraphQL security #JWT #Neo4j GraphQL
Daily CyberSecurity
CVE-2026-5423: Authentication Bypass Hits Neo4j GraphQL Subscriptions
TL;DR A high-severity authentication bypass affects the Neo4j GraphQL Library before versions 7.5.6 and 5.12.14. Tracked as CVE-2026-5423 (CVSS 8.2), it lets an unauthenticated attacker forge JWT …
13 views
Daily Writeups
⤷ Title: $12,000 for one GraphQL field: unauthenticated RCE on the servers that build Firefox
════════════════════════
𐀪 Author: Pawan Jaiswal
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 15:49:38 GMT
════════════════════════
⌗ Tags: #infosec #graphql_security #bug_bounty #hacking #cybersecurity
Medium
$12,000 for one GraphQL field: unauthenticated RCE on the servers that build Firefox
No login. No token. No special header. Just a filter argument nobody validated.
11 views