Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Secure Coding in Practice: The 10 Mistakes That Cause 90% of Web Vulnerabilities
════════════════════════
𐀪 Author: Parth Patel
════════════════════════
ⴵ Time: Sun, 17 May 2026 02:31:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #programming #secure_coding #application_security #web_development
Medium
🔒 Secure Coding in Practice: The 10 Mistakes That Cause 90% of Web Vulnerabilities
The OWASP Top 10 was first published in 2003. It’s been updated multiple times since. And the same fundamental vulnerability classes appear…
19 views
Daily Writeups
⤷ Title: OWASP Top 10 for .NET Developers - Part 2: Preventing Cryptographic Failures
════════════════════════
𐀪 Author: Surya Raj Ghimire
════════════════════════
ⴵ Time: Tue, 19 May 2026 18:11:38 GMT
════════════════════════
⌗ Tags: #secure_coding #application_security #owasp_top_10 #aspnetcore #fintech
Medium
OWASP Top 10 for .NET Developers - Part 2: Preventing Cryptographic Failures
Modern applications process enormous amounts of sensitive information - passwords, banking details, customer identities, API tokens…
24 views
Daily Writeups
⤷ Title: Password Reset Tokens in URLs: A Small Mistake That Can Lead to Account Takeover
════════════════════════
𐀪 Author: Abdulshakoor
════════════════════════
ⴵ Time: Wed, 20 May 2026 18:13:31 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #authentication #web_security #secure_coding
Medium
Password Reset Tokens in URLs: A Small Mistake That Can Lead to Account Takeover
How password reset tokens can leak through browser history, logs, analytics tools, and Referer headers — and what developers should do to…
35 views
Daily Writeups
⤷ Title: The Hidden Risk Inside Password Reset Links
════════════════════════
𐀪 Author: Abdulshakoor
════════════════════════
ⴵ Time: Thu, 21 May 2026 17:26:08 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #secure_coding #application_security #authentication
Medium
The Hidden Risk Inside Password Reset Links
Why password reset tokens in URLs can quietly expose user accounts — and what developers should do differently.
27 views
Daily Writeups
⤷ Title: Is it safe to use only ORM?
════════════════════════
𐀪 Author: oxcsec
════════════════════════
ⴵ Time: Thu, 28 May 2026 13:39:34 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #software_development #secure_coding #appsec
Medium
Is it safe to use only ORM?
Introduction
23 views
Daily Writeups
⤷ Title: Proactive Vulnerability Mitigation: Anthropic Integrates Security Guardrails into Claude Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:19:11 +0000
════════════════════════
⌗ Tags: #Technology #Anthropic security_guidance extension #automated SAST developer tool #background threat pattern analysis #Claude Agent SDK integration #Claude Code security plugin #custom security policy YAML #git diff vulnerability scanning #real_time AI code auditing #secure coding practices #terminal vulnerability annotations
Information Security News
Claude Code Security Plugin: Real-Time AI Code Auditing
Anthropic launches a native Claude Code security plugin. Learn how this real-time AI security-guidance tool checks your code for bugs before you commit.
14 views
Daily Writeups
⤷ Title: From Quantity Manipulation to Negative Shipping Costs: A Business Logic Flaw in an E-Commerce…
════════════════════════
𐀪 Author: Hangga Aji Sayekti
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 04:39:00 GMT
════════════════════════
⌗ Tags: #secure_coding #bugbounty_writeup #pentesting
Medium
From Quantity Manipulation to Negative Shipping Costs: A Business Logic Flaw in an E-Commerce…
One of the most dangerous assumptions in software development is believing that users will only interact with an application through the…
34 views
Daily Writeups
⤷ Title: OWASP Top 10 for .NET Developers -Part 4: Preventing Insecure Design
════════════════════════
𐀪 Author: Surya Raj Ghimire
════════════════════════
ⴵ Time: Sun, 14 Jun 2026 18:08:08 GMT
════════════════════════
⌗ Tags: #secure_coding #owasp_top_10 #application_security #dotnet #cybersecurity
Medium
OWASP Top 10 for .NET Developers -Part 4: Preventing Insecure Design
Many developers think security vulnerabilities are introduced when writing code. In reality, some of the most dangerous security flaws are…
19 views
Daily Writeups
⤷ Title: Stop Ignoring Brakeman Warnings: The Hidden Meaning Behind CWE Codes
════════════════════════
𐀪 Author: J3
════════════════════════
ⴵ Time: Sat, 20 Jun 2026 15:50:42 GMT
════════════════════════
⌗ Tags: #cwecodes #ruby_on_rails #application_security #brakeman #secure_coding
Medium
Stop Ignoring Brakeman Warnings: The Hidden Meaning Behind CWE Codes
Learn how CWE mappings expose critical vulnerabilities like SQL Injection and XSS before they reach production.
17 views
Daily Writeups
⤷ Title: Building a Secure Consent-Based Webcam Recording System with Flask, OpenCV, and Dropbox
════════════════════════
𐀪 Author: Muhammad Bilal Ashiq
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 01:52:06 GMT
════════════════════════
⌗ Tags: #information_security #secure_coding #webcam #hacking #opencv
Medium
Building a Secure Consent-Based Webcam Recording System with Flask, OpenCV, and Dropbox
Exploring Camera Permissions, Secure API Management, Privacy Protection, and Cloud Storage
19 views
Daily Writeups
⤷ Title: Security is a feature. Most teams just don’t build it like one.
════════════════════════
𐀪 Author: Mike Salari
════════════════════════
ⴵ Time: Sat, 27 Jun 2026 22:28:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #devops #application_security #software_development #secure_coding
Medium
Security is a feature. Most teams just don’t build it like one.
The 2026 case for treating security like any other feature, plus a free field guide to get you started.
20 views
Daily Writeups
⤷ Title: How to Apply OWASP ASVS in Your Code, A Developer’s Verification Checklist
════════════════════════
𐀪 Author: FOLAKE SOWONOYE
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 11:36:27 GMT
════════════════════════
⌗ Tags: #web_development #secure_coding #application_security #owasp #nodejs
Medium
How to Apply OWASP ASVS in Your Code, A Developer’s Verification Checklist
Mapping of OWASP ASVS requirements for auth, injection, CORS, business logic, request smuggling to real Express/Node examples, plus how to…
10 views
Daily Writeups
⤷ Title: The Power Duo of Cybersecurity: A Deep Dive into Burp Suite and Wireshark
════════════════════════
𐀪 Author: N0aziXss
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 14:12:53 GMT
════════════════════════
⌗ Tags: #wireshark #burpsuite #web_security #secure_coding #bug_bounty
Medium
The Power Duo of Cybersecurity: A Deep Dive into Burp Suite and Wireshark
Byline:
19 views
Daily Writeups
⤷ Title: OpenSSL Error Handling Defect Breaks apt HTTPS Access in FIPS Mode
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 13:23:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #APT #Debian #ERR_clear_error #error queue #FIPS mode #openssl #OpenSSL error handling #Secure Coding #tls
Daily CyberSecurity
OpenSSL Error Handling Defect Breaks apt HTTPS Access in FIPS Mode
TL;DR A Debian maintainer flagged a widespread OpenSSL error handling problem across the open-source ecosystem. It surfaced when apt failed HTTPS repository access on FIPS-only systems, then trace…
10 views
Daily Writeups
⤷ Title: Broken Access Control: The #1 Most Critical Web Application Vulnerability
════════════════════════
𐀪 Author: GraySentinel- Cyber Defence Lab
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 05:43:15 GMT
════════════════════════
⌗ Tags: #web_application_security #api_security #secure_coding #owasp_top_10 #cybersecurity
Medium
Broken Access Control: The #1 Most Critical Web Application Vulnerability
What Is Broken Access Control?
Access control is the gatekeeper of your application. It enforces the policy that users can only act within…
39 views
Daily Writeups
⤷ Title: INJECTION TÜRLERİ
════════════════════════
𐀪 Author: Emineero
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 08:27:19 GMT
════════════════════════
⌗ Tags: #secure_coding #web_security #cybersecurity #sql_injection #siber_guvenlik
41 views
Daily Writeups
⤷ Title: CWE vs CVE in Cybersecurity: What’s the Difference?
════════════════════════
𐀪 Author: Bhaskar katara
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 16:37:06 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #secure_coding #ethical_hacking #owasp
Medium
CWE vs CVE in Cybersecurity: What’s the Difference?
If you’ve spent five minutes looking at a vulnerability report or a bug bounty write-up, you’ve seen these tags everywhere: CWE-79…
10 views
Daily Writeups
⤷ Title: Breaking VulnBank: A complete web application penetration testing walkthrough
════════════════════════
𐀪 Author: Akwaeze Odera Gerald
════════════════════════
ⴵ Time: Thu, 23 Jul 2026 11:14:24 GMT
════════════════════════
⌗ Tags: #secure_coding #cybersecurity #cloud_security #penetration_testing #application_security
Medium
Breaking VulnBank: A complete web application penetration testing walkthrough
Introduction
9 views
Daily Writeups
⤷ Title: Upload de arquivos não é apenas uma funcionalidade: é uma fronteira de segurança
════════════════════════
𐀪 Author: Cristiano Junior
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 12:58:03 GMT
════════════════════════
⌗ Tags: #application_security #secure_coding #file_upload_security #cybersecurity #web_security
20 views
Daily Writeups
⤷ Title: Open Redirect Vulnerabilities: How Whitelist Validation Gets Bypassed
════════════════════════
𐀪 Author: Hasyyb
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 10:13:46 GMT
════════════════════════
⌗ Tags: #web_application_security #application_security #api_penetration_testing #secure_coding
Medium
Open Redirect Vulnerabilities: How Whitelist Validation Gets Bypassed
Open redirect bugs are deceptively simple — and deceptively easy to get wrong. A single string-matching mistake in a “safe domain” check…
12 views