Daily Writeups
@Daily_Writeups
3.92K subscribers
4 photos
135K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.92K subscribers
Daily Writeups
⤷ Title: Penetration Testing in the Real World What No One Tells You
════════════════════════
𐀪 Author: Securium Academy
════════════════════════
ⴵ Time: Mon, 11 May 2026 10:15:59 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_penetration_testing #api_penetration_testing #penetration_testing_tools #cloud_penetration_testing
Medium
Penetration Testing in the Real World What No One Tells You
hese days, almost everything we do is connected to the internet — whether it’s banking, shopping, or even storing personal data. Because of…
15 views
Daily Writeups
⤷ Title: Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 16 May 2026 16:54:23 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #api_penetration_testing #broken_authentication #owasp_api_security_top_10 #bug_bounty
Medium
Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
Introduction: Why Broken Authentication Still Wins
28 views
Daily Writeups
⤷ Title: Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 10:22:57 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #api_penetration_testing #broken_authentication #owasp_api_security_top_10 #bug_bounty
Medium
Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
Introduction: Why Broken Authentication Still Wins
16 views
Daily Writeups
⤷ Title: SQL & NoSQL Injection in APIs — The Vulnerability That Still Puts YOUR Data at Risk
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 11:16:33 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
Medium
SQL & NoSQL Injection in APIs — The Vulnerability That Still Puts YOUR Data at Risk
Introduction
15 views
Daily Writeups
⤷ Title: SQL & NoSQL Injection in APIs-The Vulnerability That Still Puts YOUR Data at Risk
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 11:16:33 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
Medium
SQL & NoSQL Injection in APIs — The Vulnerability That Still Puts YOUR Data at Risk
Introduction
22 views
Daily Writeups
⤷ Title: Insecure Direct Object Reference (IDOR) in User Management Allows Unauthorized Access and…
════════════════════════
𐀪 Author: Hemant Raj Bhati
════════════════════════
ⴵ Time: Mon, 18 May 2026 15:28:02 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #web_penetration_testing #web_security #api_penetration_testing
Medium
Insecure Direct Object Reference (IDOR) in User Management Allows Unauthorized Access and Modification of Arbitrary User Accounts
Summary
55 views
Daily Writeups
⤷ Title: SQL & NoSQL Injection in APIs-The Vulnerability That Still Puts YOUR Data at Risk
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Tue, 19 May 2026 09:01:42 GMT
════════════════════════
⌗ Tags: #sql_injection #non_sql_injection #owasp_top_10 #api_penetration_testing #bug_bounty
Medium
SQL & NoSQL Injection in APIs-The Vulnerability That Still Puts YOUR Data at Risk
Introduction
12 views
Daily Writeups
⤷ Title: SSRF in APIs: How a Single URL Parameter Can Expose Internal Systems
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Fri, 22 May 2026 12:32:27 GMT
════════════════════════
⌗ Tags: #ssrf_attack #bug_bounty #api_penetration_testing #ssrf_walkthrough #ssrf_vulnerability
Medium
SSRF in APIs: How a Single URL Parameter Can Expose Internal Systems
A single misconfigured URL parameter can allow an attacker to abuse server-side requests and potentially access internal services, cloud…
15 views
Daily Writeups
⤷ Title: SSRF in APIs: How a Single URL Parameter Can Expose Internal Systems
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 23 May 2026 08:19:23 GMT
════════════════════════
⌗ Tags: #ssrf_attack #bug_bounty #api_penetration_testing #ssrf_walkthrough #ssrf_vulnerability
Medium
SSRF in APIs: How a Single URL Parameter Can Expose Internal Systems
A single misconfigured URL parameter can allow an attacker to abuse server-side requests and potentially access internal services, cloud…
29 views
Daily Writeups
⤷ Title: API Pentesting | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sat, 30 May 2026 08:30:36 GMT
════════════════════════
⌗ Tags: #pentesting #api_penetration_testing #tryhackme #cybersecurity
Medium
API Pentesting | TryHackMe
Explore how to identify and exploit common API security vulnerabilities.
19 views
Daily Writeups
⤷ Title: Penetration Testing Services: Strengthening Your Business Against Cyber Threats
════════════════════════
𐀪 Author: SmartCLOUD Australia
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 11:32:34 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #penetration_test #api_penetration_testing #penetration_testing_tools #penetration_testing
Medium
Penetration Testing Services: Strengthening Your Business Against Cyber Threats
Cyber threats continue to evolve, making it essential for businesses to proactively identify and address security weaknesses before they…
17 views
Daily Writeups
⤷ Title: Open Redirect Vulnerabilities: How Whitelist Validation Gets Bypassed
════════════════════════
𐀪 Author: Hasyyb
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 10:13:46 GMT
════════════════════════
⌗ Tags: #web_application_security #application_security #api_penetration_testing #secure_coding
Medium
Open Redirect Vulnerabilities: How Whitelist Validation Gets Bypassed
Open redirect bugs are deceptively simple — and deceptively easy to get wrong. A single string-matching mistake in a “safe domain” check…
13 views
Daily Writeups
⤷ Title: When an AI Backend Forgot to Ask Who You Were: Finding Unauthenticated LLM Invocation in a FigmaBot…
════════════════════════
𐀪 Author: PaulHaykeens
════════════════════════
ⴵ Time: Wed, 02 Sep 2026 19:58:04 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #information_security #ethical_hacking #web_penetration_testing #bug_bounty
Medium
When an AI Backend Forgot to Ask Who You Were: Finding Unauthenticated LLM Invocation in a FigmaBot Backend
Hello, my name is Godwin Akinyomi, although I use Paul Haykeens as my public identity as a security researcher.
42 views
Daily Writeups
⤷ Title: What Does a Penetration Test Actually Find? A Practical Guide for Australian Businesses
════════════════════════
𐀪 Author: Seosubmissions
════════════════════════
ⴵ Time: Mon, 07 Sep 2026 09:15:31 GMT
════════════════════════
⌗ Tags: #penetration_testing #austrelia #web_penetration_testing #api_penetration_testing
Medium
What Does a Penetration Test Actually Find? A Practical Guide for Australian Businesses
Cyberattacks are becoming increasingly sophisticated, and businesses can no longer rely only on antivirus software, firewalls, or automated…
16 views
Daily Writeups
⤷ Title: DFSA Penetration Testing: Strengthening Cybersecurity for DIFC Firms
════════════════════════
𐀪 Author: Piyush Bhuyan
════════════════════════
ⴵ Time: Fri, 25 Sep 2026 10:00:50 GMT
════════════════════════
⌗ Tags: #penetration_testing #api_penetration_testing #difc_firms #dfsa_penetration
Medium
DFSA Penetration Testing: Strengthening Cybersecurity for DIFC Firms
Financial firms operating in the Dubai International Financial Centre (DIFC) manage sensitive customer information, financial transactions…
30 views
Daily Writeups
⤷ Title: Top Penetration Testing Companies in India (2026): Q&A Guide
════════════════════════
𐀪 Author: Sam Edward
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 03:27:31 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #cloud_penetration_testing #penetration_testing_tools #penetration_testing #api_penetration_testing
Medium
Top Penetration Testing Companies in India (2026): Q&A Guide
Cyberattacks are becoming more sophisticated, and organizations in India are increasingly using penetration testing to identify security…
13 views
Daily Writeups
⤷ Title: Deconstructing Enterprise Identity Portals: A Deep-Dive into Angular, WAFs, and Okta OIDC Runtime…
════════════════════════
𐀪 Author: Ali Ahmadi
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 16:56:00 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #openid_connect #application_security #cybersecurity
Medium
Deconstructing Enterprise Identity Portals: A Deep-Dive into Angular, WAFs, and Okta OIDC Runtime Mechanics
Subtitle / Description: A systematic security assessment methodology mapping edge WAF bypasses, client-side SPA state manipulation, and…
25 views