Daily Writeups
@Daily_Writeups
4.19K subscribers
4 photos
139K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.19K subscribers
Daily Writeups
⤷ Title: Your MCP IP Rules Won’t Survive the Move Off Kong 3.14 LTS
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Mon, 09 Nov 2026 13:56:43 GMT
════════════════════════
⌗ Tags: #software_architecture #api_gateway #ai_agent #devops #api_security
Medium
Your MCP IP Rules Won’t Survive the Move Off Kong 3.14 LTS
On Kong 3.14, an IP allow list on an MCP tool route seems to work. After the upgrade, it refuses every tool call. Lab-tested on both…
1 view
Daily Writeups
⤷ Title: How to Build a Secure MCP Server in Go: Typed Tools, Stateless HTTP and OAuth Done Right
════════════════════════
𐀪 Author: dk.websolutions
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 18:01:02 GMT
════════════════════════
⌗ Tags: #api_security #ai_agent #golang #model_context_protocol #oauth
Medium
How to Build a Secure MCP Server in Go: Typed Tools, Stateless HTTP and OAuth Done Right
A Hands-On Guide to the Official Go SDK and the Stateless MCP Spec That Landed in July 2026
1 view
Daily Writeups
⤷ Title: No Payment Without Approval
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 14:43:40 GMT
════════════════════════
⌗ Tags: #ai_agent #api_gateway #fintech #open_policy_agent #api_security
Medium
No Payment Without Approval: Sequence Rules for AI Agents, Enforced at the Gateway
Sequence rules for AI agents, enforced at the gateway
2 views
Daily Writeups
⤷ Title: Revoked, Yet Still Acting
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 12:47:17 GMT
════════════════════════
⌗ Tags: #ai_agent #oauth #api_gateway #cybersecurity #api_security
Medium
Revoked, Yet Still Acting: Enforcing Revocation for AI Agents at the Kong Gateway
How many calls a stopped AI agent still gets
3 views
Daily Writeups
⤷ Title: Safe Isn’t the Default: Hardening an AI Agent Route on Kong
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 12:32:29 GMT
════════════════════════
⌗ Tags: #api_security #api_gateway #oauth #platform_engineering #ai_agent
Medium
Safe Isn’t the Default: Hardening an AI Agent Route on Kong, Tested in a Lab
Four gaps, three plugins, tested in a lab
2 views
Daily Writeups
⤷ Title: Kong and Gravitee in One AI Agent Architecture
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 12:23:46 GMT
════════════════════════
⌗ Tags: #identity_management #api_security #api_gateway #ai_agent #oauth
Medium
Kong and Gravitee in One AI Agent Architecture
Gravitee issues the agent’s authority. Kong enforces it
2 views
Daily Writeups
⤷ Title: Who Enforces an AI Agent’s Permissions, and Where?
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Sun, 08 Nov 2026 12:04:06 GMT
════════════════════════
⌗ Tags: #ai_agent #software_architecture #oauth #api_security #cybersecurity
Medium
Who Enforces an AI Agent’s Permissions, and Where?
Five points, one gateway on every call
2 views
Daily Writeups
⤷ Title: Securing the Edge: Implementing JWT Blacklisting and Resilient Authentication in Node.js & Express
════════════════════════
𐀪 Author: Emmanuel Christopher Jallay
════════════════════════
ⴵ Time: Fri, 06 Nov 2026 22:00:19 GMT
════════════════════════
⌗ Tags: #nodejs #api_security #backend_development #software_engineering #javascript
Medium
Securing the Edge: Implementing JWT Blacklisting and Resilient Authentication in Node.js & Express
When building backend APIs, authentication is usually one of the first things we implement. We set up user registration, issue a JSON Web…
2 views
Daily Writeups
⤷ Title: Secure API Gateway connection to AWS
════════════════════════
𐀪 Author: Cabdukayumova
════════════════════════
ⴵ Time: Fri, 06 Nov 2026 12:24:39 GMT
════════════════════════
⌗ Tags: #aws #aws_api_gateway #aws_iam #aws_lambda #api_security
Medium
Secure API Gateway connection to AWS
We all know how an API can be a lifesaver when you want to integrate a few tools together. But how can you be sure you can provide…
3 views
Daily Writeups
⤷ Title: API-P-5: Token Attacks: Breaking Weak Authentication, Predictable Tokens, and JWT Misconfigurations…
════════════════════════
𐀪 Author: Bilal k. Mohammed
════════════════════════
ⴵ Time: Fri, 06 Nov 2026 05:31:01 GMT
════════════════════════
⌗ Tags: #api_token #cybersecurity #api_security #jwt_authentication
Medium
API-P-5: Token Attacks: Breaking Weak Authentication, Predictable Tokens, and JWT Misconfigurations with Burp Suite
A hands-on guide to identifying weak token generation, JWT validation flaws, algorithm confusion, and authentication vulnerabilities using…
4 views