Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Password Hash Leak (owasp juice-shop)
════════════════════════
𐀪 Author: Rajeev Gaddam
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 11:00:36 GMT
════════════════════════
⌗ Tags: #rest_api #sensitive_data #password_leaks #hacking #owasp_juice_shop
Medium
Password Hash Leak (owasp juice-shop)
Introduction
16 views
Daily Writeups
⤷ Title: Unauthorized Account Deletion via HTTP Method Manipulation.A Business Logic Flaw in REST API Design
════════════════════════
𐀪 Author: Moataz
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 15:03:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_writeup #rest_api #penetration_testing #bug_bounty_tips
Medium
Unauthorized Account Deletion via HTTP Method Manipulation.A Business Logic Flaw in REST API Design
Introduction
62 views
Daily Writeups
⤷ Title: API Nedir ve Nasıl Çalışır?
════════════════════════
𐀪 Author: Elify
════════════════════════
ⴵ Time: Sat, 18 Apr 2026 19:30:11 GMT
════════════════════════
⌗ Tags: #api_development #api_security #rest_api #api #api_gateway
Medium
API Nedir ve Nasıl Çalışır?
API (Application Programming Interfaces), dijital dünyada uygulamalar ve cihazlar arasında kesintisiz iletişimi sağlayan dijital köprü…
34 views
Daily Writeups
⤷ Title: New “PowMix” Botnet Preys on Czech Workforce with Lure of Compliance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 09:11:43 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Bypass #botnet #Cisco Talos #cyber_espionage #Czech Republic #EDEKA Phishing #Heroku Abuse #infosec #Malware Analysis #PowerShell Malware #PowMix #REST API Mimicry
Daily CyberSecurity
New "PowMix" Botnet Preys on Czech Workforce with Lure of Compliance
Cisco Talos uncovers PowMix, a stealthy botnet targeting Czech HR via AMSI bypass and Heroku-hosted C2. Learn how this malware evades modern EDR systems.
25 views
Daily Writeups
⤷ Title: Breaking API Security: Attack Surface, Trust Boundaries, and Exploitation Paths
════════════════════════
𐀪 Author: Divine
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 18:09:07 GMT
════════════════════════
⌗ Tags: #api #web_security #bug_bounty #rest_api
Medium
Breaking API Security: Attack Surface, Trust Boundaries, and Exploitation Paths
API security When it comes to API Security and the attack surface our focus shifts from endpoints /login, /profile and the likes to objects, actions and trust assumptions within the API call An API …
14 views
Daily Writeups
⤷ Title: Filtros em APIs REST não são só query params
════════════════════════
𐀪 Author: Erik Barroso
════════════════════════
ⴵ Time: Thu, 07 May 2026 22:11:41 GMT
════════════════════════
⌗ Tags: #filtros #sql_injection #sql #api #rest_api
Medium
Você provavelmente está implementando filtros errado na sua API REST
Filtros parecem apenas query params, mas envolvem validação, segurança, autorização, performance, paginação, cache e consistência de…
20 views
Daily Writeups
⤷ Title: Você provavelmente está implementando filtros errado na sua API REST
════════════════════════
𐀪 Author: Erik Barroso
════════════════════════
ⴵ Time: Thu, 07 May 2026 22:11:41 GMT
════════════════════════
⌗ Tags: #filtros #sql_injection #sql #api #rest_api
Medium
Você provavelmente está implementando filtros errado na sua API REST
Filtros parecem apenas query params, mas envolvem validação, segurança, autorização, performance, paginação, cache e consistência de…
42 views
Daily Writeups
⤷ Title: Under Siege: Critical Auth Bypass Flaw in Burst Statistics Plugin Puts 115,000+ WordPress Sites at Risk
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 06:44:34 +0000
════════════════════════
⌗ Tags: #Vulnerability #Admin Hijacking #authentication bypass #Burst Statistics #CVE_2026_8181 #Patch Update 2026 #Plugin Flaw #REST API Exploit #website security #Wordfence #WordPress Vulnerability
Penetration Testing Tools
Under Siege: Critical Auth Bypass Flaw in Burst Statistics Plugin Puts 115,000+ WordPress Sites at Risk
WordPress websites have once again fallen under siege due to a critical flaw in a popular extension. On
14 views
Daily Writeups
⤷ Title: CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:49:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco Secure Workload #Cisco Security Advisory #CVE_2026_20223 #CVSS 10 #Cyber Security #infosec #Patch Alert #privilege escalation #REST API Exploit #Tenant Cross_Bypass #Zero_Trust Microsegmentation
Daily CyberSecurity
CVSS 10.0 Alert: Critical Cisco Secure Workload Exploit Grants Unauthenticated Site Admin Access
Cisco drops an urgent advisory for CVE-2026-20223 (CVSS 10.0) in Secure Workload. Unauthenticated remote attackers can steal full Site Admin privileges.
14 views
Daily Writeups
⤷ Title: API Pentesting | TryHackMe | practical challenge
════════════════════════
𐀪 Author: Jose Praveen
════════════════════════
ⴵ Time: Sun, 24 May 2026 19:36:00 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #pentesting #api_security #rest_api #cybersecurity
Medium
API Pentesting | TryHackMe | practical challenge
Explore how to identify and exploit common API security vulnerabilities.
40 views
Daily Writeups
⤷ Title: Finding and Exploiting an unused API endpoint
════════════════════════
𐀪 Author: Dalila
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 14:00:05 GMT
════════════════════════
⌗ Tags: #rest_api_security #api_security #owasp_api #owasp_api_security_top_10 #api_endpoint_monitoring
Medium
Finding and Exploiting an unused API endpoint
This lab demonstrates how an unused API endpoint can be exploited. By analyzing HTTP requests and taking advantage of gaps revealed in…
35 views
Daily Writeups
⤷ Title: The Security Implications of HTTP QUERY: Analyzing RFC 10008
════════════════════════
𐀪 Author: Kabil Preetham K
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 14:15:54 GMT
════════════════════════
⌗ Tags: #api_security #rest_api #https #web_security #cybersecurity
Medium
The Security Implications of HTTP QUERY: Analyzing RFC 10008
The publication of Request for Comments (RFC) 10008 in June 2026 represents the most fundamental restructuring of HTTP protocol semantics…
13 views
Daily Writeups
⤷ Title: HTTP QUERY Method Explained:
════════════════════════
𐀪 Author: Simran Madhok
════════════════════════
ⴵ Time: Sat, 04 Jul 2026 16:28:50 GMT
════════════════════════
⌗ Tags: #http_query #api_development #rest_api #api_security #web_development
Medium
HTTP QUERY Method Explained: RFC 10008 and the Future of Safe API Queries
Switch to QUERY http method Secure coding should always be the top priority for developers while building applications. Hence it was a welcome news when the HTTP QUERY Method was formally introduced …
23 views
Daily Writeups
⤷ Title: OWASP Top 10
════════════════════════
𐀪 Author: Gamuchirai
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 11:13:08 GMT
════════════════════════
⌗ Tags: #security #rest_api #api #hacking #owasp
Medium
OWASP Top 10
The OWASP Top 10 is one of the most widely used references for understanding critical web application security risks. It is not a complete…
13 views
Daily Writeups
⤷ Title: WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 01:55:40 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60137 #CVE_2026_63030 #Pre_Auth RCE #proof_of_concept #REST API #Searchlight Cyber #sql injection #wordpress #wp2shell
Daily CyberSecurity
WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public
TL;DR WordPress shipped 7.0.2 on July 17, 2026 to fix a critical flaw chain. The bug is a WordPress pre-auth RCE tracked as CVE-2026-63030, built on an SQL injection issue, CVE-2026-60137. Technic…
29 views
Daily Writeups
⤷ Title: wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 21 Jul 2026 01:49:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_60137 #CVE_2026_63030 #Pre_Auth RCE #REST API batch #webshell #WordPress Core RCE #wordpress security #wp2shell exploit
Daily CyberSecurity
wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates
Attackers are already dropping webshells on WordPress sites through a flaw in WordPress Core itself. The bug chain, named wp2shell, delivers an unauthenticated WordPress Core RCE. No plugin, no th…
31 views
Daily Writeups
⤷ Title: The three layers approach to Secure REST API: OpenAPI, MuleSoft configuration and application code
════════════════════════
𐀪 Author: Nunzio Giovinazzi
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 11:28:58 GMT
════════════════════════
⌗ Tags: #api_security #mulesoft #openapi_specification #cybersecurity #rest_api_security
Medium
The three layers approach to Secure REST API: OpenAPI, MuleSoft configuration and application implementation
This is a more in-depth look at the presentation I gave at the Salesforce Agentforce World Tour in Milan last May about REST API security
37 views
Daily Writeups
⤷ Title: What Is an API Gateway? How Does It Work?
════════════════════════
𐀪 Author: Code Crack
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 16:53:24 GMT
════════════════════════
⌗ Tags: #api_gateway #rest_api #api_security #dotnet_core #api_development
Medium
What Is an API Gateway? How Does It Work?
Modern applications often consist of multiple microservices, each responsible for a specific task. Instead of allowing clients to…
31 views
Daily Writeups
⤷ Title: REST API Design Best Practices: Build Reliable APIs
════════════════════════
𐀪 Author: Filemakr
════════════════════════
ⴵ Time: Sat, 01 Aug 2026 18:21:58 GMT
════════════════════════
⌗ Tags: #api_security #api_design #api_quality #rest_api
Medium
REST API Design Best Practices: Build Reliable APIs
Design predictable, secure and backward-compatible REST APIs using resource-oriented endpoints, HTTP semantics, structured errors…
21 views
Daily Writeups
⤷ Title: APIs in 2026: The New Digital Currency
════════════════════════
𐀪 Author: Jits Rit
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 10:21:50 GMT
════════════════════════
⌗ Tags: #api_security #ai #api_development #graphql #rest_api_design
Medium
APIs in 2026: The New Digital Currency
How design, security, and monetization are redefining what an API is for
25 views