Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: WhatsApp Flaw Exposes 3.5 Billion Users: Scrapers Mapped Profiles Worldwide
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:35:27 +0000
════════════════════════
⌗ Tags: #Data Leak #Contact Lookup #data scraping #Meta #Phone Number Leak #Privacy Flaw #Rate Limit #Vienna University #vulnerability #WhatsApp
Penetration Testing Tools
WhatsApp Flaw Exposes 3.5 Billion Users: Scrapers Mapped Profiles Worldwide
A design flaw in WhatsApp's contact-lookup feature allowed researchers to scrape 3.5 billion user profiles globally, including photos and statuses, with no rate limits.
27 views
Daily Writeups
⤷ Title: Protect your APIs from unauthorized access and Overuse
════════════════════════
𐀪 Author: Garima Gupta
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 16:57:43 GMT
════════════════════════
⌗ Tags: #oauth2 #api_gateway #api_security #rate_limiting
Medium
Protect your APIs from unauthorized access and Overuse
Security in 3 layers — Authentication ( WHO ) , Authorization ( WHAT ) and Rate Limiting ( HOW often )
6 views
Daily Writeups
⤷ Title: Rate Limiting: The API Security Control Everyone Forgets
════════════════════════
𐀪 Author: Adnan taşdemir
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 22:07:25 GMT
════════════════════════
⌗ Tags: #api_rate_limiting #api_security #rate_limiting
Medium
Rate Limiting: The API Security Control Everyone Forgets
Rate limiting is one of the simplest security controls in an API. It is also one of the most commonly missing. Many real incidents could…
27 views
Daily Writeups
⤷ Title: “Better Auth” Framework Alert: The Double-Slash Trick That Bypasses Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:33:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Better Auth #CVSS 8.6 #javascript #Path Normalization #Proxy Security #Rate Limit Evasion #rou3 #TypeScript #Web Security
Daily CyberSecurity
"Better Auth" Framework Alert: The Double-Slash Trick That Bypasses Security Controls
A normalization flaw in Better Auth's router allows attackers to bypass access controls and rate limits using simple double-slash URLs.
26 views
Daily Writeups
⤷ Title: Why API Gateways Are Critical for Securing Public APIs
════════════════════════
𐀪 Author: Charmaine Mangorima
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 19:09:59 GMT
════════════════════════
⌗ Tags: #api_gateway #kong_api_gateway #api #rate_limiting #api_security
Medium
Why API Gateways Are Critical for Securing Public APIs
APIs are the backbone of modern applications, enabling communication between mobile apps, web platforms and backend services. However, when…
44 views
Daily Writeups
⤷ Title: Rate Limiting & Throttling: What Developers Need to Know
════════════════════════
𐀪 Author: Hasan Chinthaka
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 04:31:12 GMT
════════════════════════
⌗ Tags: #rate_limiting #api_security #web_development #api #backend_development
Medium
Rate Limiting & Throttling: What Developers Need to Know
When building APIs or web services, controlling traffic is crucial to maintain performance, stability, and security.
6 views
Daily Writeups
⤷ Title: API SECURITY #3: Securing APIs in Real Systems
════════════════════════
𐀪 Author: Sarah Nzeshi
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 10:17:43 GMT
════════════════════════
⌗ Tags: #authorization #stripe #rate_limiting #api_security #authentication
Medium
API SECURITY #3: Securing APIs in Real Systems
If you’ve used an app that pulls weather data, lets you log in with Google, or processes payments without re-entering your card details…
53 views
Daily Writeups
⤷ Title: NestJS Rate Limiting Without Angry Users
════════════════════════
𐀪 Author: Bhagya Rana
════════════════════════
ⴵ Time: Sat, 07 Feb 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #nestjs #backend_engineering #redis #api_security #rate_limiting
Medium
NestJS Rate Limiting Without Angry Users
Build abuse-resistant throttling in NestJS that stops bots, respects real humans, and avoids nuking everyone behind the same IP.
43 views
Daily Writeups
⤷ Title: How a User Enumeration Vulnerability was found in an OTP Authentication API
════════════════════════
𐀪 Author: Philip James
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 05:38:24 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #reconnaissance #rate_limit_bypass #enumeration #bugs
Medium
How a User Enumeration Vulnerability was found in an OTP Authentication API
Endpoint
54 views
Daily Writeups
⤷ Title: Escalating a Duplicate Finding to a CVSS 10.0: Chaining Logic and Session Flaws for Persistent ATO
════════════════════════
𐀪 Author: K4r33m
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:27:02 GMT
════════════════════════
⌗ Tags: #session_misconfiguration #ato #bug_bounty #account_takeover #rate_limiting
Medium
Escalating a Duplicate Finding to a CVSS 10.0: Chaining Logic and Session Flaws for Persistent ATO
In bug bounty and penetration testing, a “duplicate” finding is often viewed as a dead end. However, a duplicate bug is essentially a known…
17 views
Daily Writeups
⤷ Title: NestJS Rate Limiting Using @nestjs/throttler
════════════════════════
𐀪 Author: Ravi Mewada
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #backend #rate_limiting #nodejs #api_security #nestjs
Medium
NestJS Rate Limiting Using @nestjs/throttler
When we build APIs, one thing that is really important, for security is rate limiting.
32 views
Daily Writeups
⤷ Title: Understanding Rate Limiting: A Deep Dive
════════════════════════
𐀪 Author: Dimuthu Harshamal
════════════════════════
ⴵ Time: Sun, 31 May 2026 11:46:55 GMT
════════════════════════
⌗ Tags: #api_security #java #spring_boot #api #rate_limiting
Medium
Understanding Rate Limiting: A Deep Dive
Background
35 views
Daily Writeups
⤷ Title: Codex Rate Limit Reset: OpenAI Introduces Flexible Limits
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 03:21:42 +0000
════════════════════════
⌗ Tags: #Technology #Claude Code #Codex #Developer Tools #OpenAI #Rate Limits
Daily CyberSecurity
Codex Rate Limit Reset: OpenAI Introduces Flexible Limits
OpenAI introduces a flexible Codex rate limit reset mechanism for premium subscribers to maximize quotas and counter Claude Code competition.
18 views
Daily Writeups
⤷ Title: Pentesting Rate Limits with Precision
════════════════════════
𐀪 Author: Cyril Shaji
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 18:31:01 GMT
════════════════════════
⌗ Tags: #burpsuite #penetration_testing #automation #ethical_hacking #rate_limiting
Medium
Pentesting Rate Limits with Precision
Testing for rate limits can be incredibly frustrating when your primary tool feels like it’s holding you back. Burp Suite Intruder is a…
17 views
Daily Writeups
⤷ Title: Bypassing Rate Limits: Known Techniques
════════════════════════
𐀪 Author: Pranav
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:26:04 GMT
════════════════════════
⌗ Tags: #web_application_security #vapt #rate_limiting #penetration_testing #bug_bounty
Medium
Bypassing Rate Limits: Known Techniques
SPYxPG
10 views
Daily Writeups
⤷ Title: Sliding Window Counter
════════════════════════
𐀪 Author: PINAR BİLDİRİCİ
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 20:48:51 GMT
════════════════════════
⌗ Tags: #rate_limiting #api_security #design_systems #sliding_window_counter
Medium
Sliding Window Counter
A Sliding Window Counter is a rate-limiting algorithm. It is used to control how many requests a user can send in a specific period of…
34 views
Daily Writeups
⤷ Title: Android 17 Rate Limiting Blocks PIN Guessing
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 10:48:38 +0000
════════════════════════
⌗ Tags: #Android #android #Android 17 #google #PIN Security #Rate Limiting
Daily CyberSecurity
Android 17 Rate Limiting Blocks PIN Guessing
Google’s Android engineering team has quietly rolled out one of the platform’s most meaningful security upgrades yet: a far tighter limit on how many times someone can guess your unloc…
25 views
Daily Writeups
⤷ Title: Security Controls Most Users Never Notice: Understanding API Rate Limiting
════════════════════════
𐀪 Author: Gertrude Abagale
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 12:23:58 GMT
════════════════════════
⌗ Tags: #security_control #api_security #information_security #rate_limiting #design_systems
Medium
Security Controls Most Users Never Notice: Understanding API Rate Limiting
When we think about cybersecurity, our minds often go to familiar concepts like encryption, passwords, firewalls, and multi-factor…
25 views