Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: Major Airline Data Dump
════════════════════════
𐀪 Author: L4ZZ3RJ0D
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 11:13:52 GMT
════════════════════════
⌗ Tags: #infosec #ctf #api #bug_bounty #information_security
Medium
Major Airline Data Dump
An airline booking system this time, with the brief claiming developers left something exposed that reveals more than it should. Same…
9 views
Daily Writeups
⤷ Title: Are AI agent skills free? Check the API key behind them first
════════════════════════
𐀪 Author: Skillselion.com
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 12:24:30 GMT
════════════════════════
⌗ Tags: #api_security #claude_code #ai_agent
Medium
Are AI agent skills free? Check the API key behind them first
Most priced AI agent skills cost nothing to run. In Skillselion’s pricing census of October 16, 2026, 70.4% of the 4,902 skills that carry…
36 views
Daily Writeups
⤷ Title: 10 Rate-Limiting Mistakes That Leave Your Backend Exposed
════════════════════════
𐀪 Author: TechByRahmat
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 13:22:05 GMT
════════════════════════
⌗ Tags: #software_engineering #api_security #cybersecurity #web_development #backend_development
Medium
10 Rate-Limiting Mistakes That Leave Your Backend Exposed
Your API can have authentication, input validation, and a solid database architecture and still be vulnerable to abuse if you get rate…
46 views
Daily Writeups
⤷ Title: BOLA: The API Flaw Hiding in Plain Sight
════════════════════════
𐀪 Author: Dishanevare
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:44:35 GMT
════════════════════════
⌗ Tags: #api_security #idor_vulnerability #bola #owasp_api_security_top_10
Medium
BOLA: The API Flaw Hiding in Plain Sight
Broken Object Level Authorization (BOLA) is the number one risk in the OWASP API Security Top 10. It is simple to exploit, hard to detect…
28 views
Daily Writeups
⤷ Title: Chatbot Security: What I Changed Before a Client Demo
════════════════════════
𐀪 Author: Biplove Yadav
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:18:51 GMT
════════════════════════
⌗ Tags: #software_engineering #api_security #cybersecurity #chatbots #artificial_intelligence
Medium
Chatbot Security: What I Changed Before a Client Demo
Login gates, role checks, internal routes and the limits of a deployment-hardening pass.
33 views
Daily Writeups
⤷ Title: JWT Security 101: Verification vs. Authorization
════════════════════════
𐀪 Author: Rishabh Raj Singh
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 21:54:49 GMT
════════════════════════
⌗ Tags: #backend_development #web_security #jwt #security #api_security
Medium
JWT Security 101: Verification vs. Authorization
The most common JWT misconception, what signature verification actually proves, and the gaps that let valid tokens attack real systems.
31 views
Daily Writeups
⤷ Title: Twenty Security Checks Before Your MCP Server Goes Public
════════════════════════
𐀪 Author: Camp
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 02:17:43 GMT
════════════════════════
⌗ Tags: #mcp_server #ai_agent #api_security #model_context_protocol #security
Medium
Twenty Security Checks Before Your MCP Server Goes Public
An MCP server is effectively an API that agents call for people, and that gives it an unusual set of risks. The caller is a model that text…
38 views
Daily Writeups
⤷ Title: The Dangerous Side of Caching: When Authorization Goes Wrong
════════════════════════
𐀪 Author: Amarjeet Prajapati
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 07:31:53 GMT
════════════════════════
⌗ Tags: #distributed_systems #api_security #authorization_cache #backend_engineering #security_vulnerabilities
Medium
The Dangerous Side of Caching: When Authorization Goes Wrong
QA reported in staging:
34 views
Daily Writeups
⤷ Title: Inside a Bug Bounty Investigation : From Reconnaissance to a Reproducible Security Finding
════════════════════════
𐀪 Author: Akarsh_¢haturvedi
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 19:25:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #api_security #web_security #bug_bounty
Medium
Inside a Bug Bounty Investigation : From Reconnaissance to a Reproducible Security Finding
1.1 The Security Question
41 views
Daily Writeups
⤷ Title: OpenCode’s Breach Ran Up Users’ AI Bills Overnight. Here Is the 20 Minute Key Lockdown.
════════════════════════
𐀪 Author: Chinmay Shringi
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 13:12:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #software_engineering #artificial_intelligence #developer_tools
Medium
OpenCode’s Breach Ran Up Users’ AI Bills Overnight. Here Is the 20 Minute Key Lockdown.
Keys saved in OpenCode Console leaked from a legacy system, and a copied key works anywhere. Only caps at the provider and one key per tool…
54 views