Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sun, 02 Apr 2023 10:23:04 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Stored XSS Vulnerability Discovered in SAS 9.4 Admin Console β€” CVE -2023–24724
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/5680e9e4062c
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cybersecurity #xss_vulnerability #data_protection #secure_development
Medium
Stored XSS Vulnerability Discovered in SAS 9.4 Admin Console β€” CVE -2023–24724
Abstract: In this article, we discuss a recently discovered stored Cross-Site Scripting (XSS) vulnerability in the SAS 9.4 Admin Console, a…
5 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Fri, 22 Sep 2023 08:45:14 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Secure Development: Shift-left with SAST
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/a791ca39fca8
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #secure_development #cybersecurity #application_security #devsecops #devops
Medium
Secure Development: Shift-left with SAST
Secure development is a set of practices which integrates security in the early stage of development and across each phase of the…
9 views
Daily Writeups
β€· Title: Desenvolvimento de software seguro
════════════════════════
π€ͺ Author: Leonel Marcos
════════════════════════
β΄΅ Time: Fri, 21 Mar 2025 20:47:15 GMT
════════════════════════
βŒ— Tags: #programação #development #secure_development #ciberseguranΓ§a #cybersecurity
Medium
Desenvolvimento de software seguro
A ciberseguranΓ§a costuma ser uma reflexΓ£o tardia. Afinal, muita das vezes, Γ© vista como uma inconveniΓͺncia (…)
43 views
Daily Writeups
β€· Title: Technavors Security Launches AppSec as a Service: Redefining the Future of Application Security
════════════════════════
π€ͺ Author: Technavors Security
════════════════════════
β΄΅ Time: Tue, 17 Jun 2025 07:35:09 GMT
════════════════════════
βŒ— Tags: #cybersecurity #product_security #application_security #secure_development #infosec
Medium
πŸš€ Technavors Security Launches AppSec as a Service: Redefining the Future of Application Security
In an age where digital transformation drives innovation, cybersecurity can’t be an afterthoughtβ€Šβ€”β€Šit must be embedded into the DNA of…
16 views
Daily Writeups
‷ Title: O Elo Perdido: Por que a Cultura e a Falta de Talentos Minam a Segurança de Produtos Digitais
════════════════════════
π€ͺ Author: Leonardo Nunes Beda
════════════════════════
β΄΅ Time: Thu, 17 Jul 2025 20:01:06 GMT
════════════════════════
βŒ— Tags: #security_leadership #application_security #software_development #secure_development #product_security
Medium
O Elo Perdido: Por que a Cultura e a Falta de Talentos Minam a Segurança de Produtos Digitais
A pressΓ£o por entregas rΓ‘pidas e a escassez de profissionais qualificados criaram uma dΓ­vida de seguranΓ§a que ameaΓ§a o crescimento das…
13 views
Daily Writeups
β€· Title: Threat Modeling for Developers
════════════════════════
π€ͺ Author: Cyber Security Details
════════════════════════
β΄΅ Time: Fri, 01 Aug 2025 10:40:31 GMT
════════════════════════
βŒ— Tags: #application_security #devsecops #threat_modeling #secure_development #software_security
Medium
Threat Modeling for Developers
In the fast-paced world of software development, the focus often gravitates towards features, performance, and user experience. While these…
18 views
Daily Writeups
β€· Title: Why I’m Writing About Secure Development and VAPT
════════════════════════
π€ͺ Author: Krutik Thakar β€” Secure Developer | VAPT Associate
════════════════════════
β΄΅ Time: Sun, 16 Nov 2025 09:36:19 GMT
════════════════════════
βŒ— Tags: #red_team #secure_development #application_security #pentesting #cybersecurity
Medium
Why I’m Writing About Secure Development and VAPT
A new weekly series on real-world AppSec, Red Teaming, and practical security patterns.
29 views
Daily Writeups
β€· Title: The 5 Node.js Input Mistakes Attackers Loveβ€Šβ€”β€ŠAnd How to Fix Them
════════════════════════
π€ͺ Author: Krutik Thakar β€” Secure Developer | VAPT Associate
════════════════════════
β΄΅ Time: Tue, 25 Nov 2025 12:51:48 GMT
════════════════════════
βŒ— Tags: #secure_development #cybersecurity #nodejs #application_security #javascript
Medium
The 5 Node.js Input Mistakes Attackers Love -And How to Fix Them
Practical patterns for preventing injection flaws, bypasses, and supply-chain risks in modern Node.js applications.
16 views
Daily Writeups
β€· Title: How Misconfigured Authentication Broke One App - And How We Fixed It (Sanitized Walkthrough)
════════════════════════
π€ͺ Author: Krutik Thakar β€” Secure Developer | VAPT Associate
════════════════════════
β΄΅ Time: Fri, 05 Dec 2025 05:37:22 GMT
════════════════════════
βŒ— Tags: #application_security #cybersecurity #vapt #secure_development #authentication
Medium
How Misconfigured Authentication Broke One App - And How We Fixed It (Sanitized Walkthrough)
A safe VAPT case study showing how authentication misconfigurations are discovered, abused conceptually, and fixed with secure patterns.
16 views
Daily Writeups
β€· Title: Application Security β€” Risks in AI-Generated (β€œVibe Coded”) Applications
════════════════════════
π€ͺ Author: Christina Hurley
════════════════════════
β΄΅ Time: Sat, 12 Sep 2026 21:36:01 GMT
════════════════════════
βŒ— Tags: #application_security #secure_development #vibe_coding #ai_generated_code
Medium
Application Security β€” Risks in AI-Generated (β€œVibe Coded”) Applications
MamΓ­ Christina is stirring the arroz with one hand and holding her nephew Reinaldo’s laptop with the other, and mija, the screen is doing…
20 views
Daily Writeups
β€· Title: File Upload Mechanisms and Security Testing
════════════════════════
π€ͺ Author: oxcsec
════════════════════════
β΄΅ Time: Thu, 17 Sep 2026 12:36:10 GMT
════════════════════════
βŒ— Tags: #application_security #pentesting #secure_coding #secure_development #security
Medium
File Upload Mechanisms and Security Testing
1. Introduction
14 views