Daily Writeups
@Daily_Writeups
4.03K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.03K subscribers
Daily Writeups
⤷ Title: A Practical Guide to Hunting Bugs in GraphQL When Introspection Is Off
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 04:21:17 GMT
════════════════════════
⌗ Tags: #vulnerability_disclosure #path_traversal #web_security #bug_bounty #gitlab
21 views
Daily Writeups
⤷ Title: IDOR / BOLA: How to Find the #1 API Vulnerability — and Actually Prove It
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 04:09:01 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #bug_bounty #programming #api_security
Medium
🔓 IDOR / BOLA: How to Find the #1 API Vulnerability — and Actually Prove It
Broken Object Level Authorization — IDOR, to most of us — is the single most common serious bug in modern APIs. It sits at #1 on the OWASP…
23 views
Daily Writeups
⤷ Title: ️‍♂️ SSRF Deep Dive: Turning a Harmless URL Field into Full Cloud Takeover
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 05:54:25 GMT
════════════════════════
⌗ Tags: #cloud_security #web_security #cybersecurity #bug_bounty #penetration_testing
Medium
🕵️‍♂️🔓 SSRF Deep Dive: Turning a Harmless URL Field into Full Cloud Takeover
How a URL input nobody thinks twice about becomes the keys to your entire cloud account.
20 views
Daily Writeups
⤷ Title: JAuth : CyLab Security Academy CTF Write-Up | Understanding JWT Authentication
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 05:14:47 GMT
════════════════════════
⌗ Tags: #ctf #web_security #jwt #bug_bounty #cybersecurity
Medium
JAuth : CyLab Security Academy CTF Write-Up | Understanding JWT Authentication
Introduction
29 views
Daily Writeups
⤷ Title: 7 Ways Attackers Can Abuse an API Even When Authentication Works
════════════════════════
𐀪 Author: TechByRahmat
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 06:16:01 GMT
════════════════════════
⌗ Tags: #api_security #web_development #software_engineering #programming #cybersecurity
Medium
7 Ways Attackers Can Abuse an API Even When Authentication Works
Valid credentials do not guarantee that a request is safe.
52 views
Daily Writeups
⤷ Title: Chrome ClickFix Protection Scans Risky Clipboard Commands
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:00:53 +0000
════════════════════════
⌗ Tags: #Technology #chrome #ClickFix #Enhanced Protection #Gemini #phishing #powershell #Safe Browsing #Web Security
Daily CyberSecurity
Chrome ClickFix Protection Scans Risky Clipboard Commands
Google Upgrades Enhanced Protection in Chrome Google has unveiled new Enhanced Protection features for Chrome, detailed in its post on the latest defenses against evolving web scams. The additions…
7 views
Daily Writeups
⤷ Title: PHP Prepares Emergency Fix as Cloudflare Reports Early Attacks on Critical Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 23:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloudflare #CVE_2026_109618 #CVE_2026_109619 #exploited in the wild #php #Remote Code Execution #waf #watchTowr #Web Security
Daily CyberSecurity
PHP Prepares Emergency Fix for Two Critical Flaws After Leak Reveals RCE Risk
TL;DR The PHP team will ship a security release on October 21, 2026, at 14:00 UTC to fix two critical flaws rated CVSS v4.0 9.2. Leaks tie them to CVE-2026-109618 and CVE-2026-109619, described as…
9 views
Daily Writeups
⤷ Title: I Let an AI Coding Assistant Build My Web App — Then I Reviewed Every Security Assumption
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:26:42 GMT
════════════════════════
⌗ Tags: #data_science #web_development #python #bug_bounty #machine_learning
Medium
I Let an AI Coding Assistant Build My Web App — Then I Reviewed Every Security Assumption
AI can build a working web app surprisingly fast. The interesting part begins when you stop asking whether the code works and start asking…
6 views
Daily Writeups
⤷ Title: I Used Burp Suite to Understand What My Browser Was Actually Sending
════════════════════════
𐀪 Author: Muhummad Zaki
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:04:17 GMT
════════════════════════
⌗ Tags: #web_development #machine_learning #bug_bounty #python #data_science
Medium
I Used Burp Suite to Understand What My Browser Was Actually Sending
I thought I understood how websites worked until I stopped looking at the page and started looking at the requests behind it.
6 views
Daily Writeups
⤷ Title: A WordPress Website Was Receiving Unexpected Comments. Then We Found Hidden Code in the Theme.
════════════════════════
𐀪 Author: Bhargav Buddh
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:50:11 GMT
════════════════════════
⌗ Tags: #wordpress #cybersecurity #information_security #hacking #web_application_security
Medium
A WordPress Website Was Receiving Unexpected Comments. Then We Found Hidden Code in the Theme.
Investigating suspicious activity, unexpected external links, and hidden SEO spam in a WordPress website.
6 views