Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 14 Jul 2026 09:30:30 +0000
════════════════════════
⌗ Tags: #Security #Microsoft #Cyber Attack #Cybersecurity #Microsoft Entra #OAuth #Privacy #Proofpoint #security
Hackread
Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns
Proofpoint details how attackers spoof OAuth client IDs to probe Microsoft Entra accounts, test credentials and bypass common sign-in detections at cloud scale.
18 views
Daily Writeups
⤷ Title: OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 14:02:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Enumeration #Cloud Security #Microsoft Entra ID #OAuth Client ID Spoofing #Proofpoint
Daily CyberSecurity
OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace
At a Glance Field Detail Actors UNK_pyreq2323 and UNK_OutFlareAZ (two independent, unattributed clusters) Activity Account enumeration and credential validation via OAuth client ID spoofing Target…
15 views
Daily Writeups
⤷ Title: OAuth 2.1 Security Improvements Over OAuth 2.0: What Changed and Why It Matters
════════════════════════
𐀪 Author: writtenbyniv
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 15:42:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #oauth #web_development #penetration_testing #application_security
Medium
OAuth 2.1 Security Improvements Over OAuth 2.0: What Changed and Why It Matters
OAuth 2.0 was designed to support a wide range of applications, including web apps, mobile apps, desktop applications, and IoT devices. To…
5 views
Daily Writeups
⤷ Title: CERT/CC Warns of Six Logto Vulnerabilities in SSO and MFA Handling
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 02:20:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CERT/CC #Identity and Access Management #Logto #MFA Bypass #OAuth 2.1 #OIDC #SAML #Silverhand #SSO
Daily CyberSecurity
CERT/CC Warns of Six Logto Vulnerabilities in SSO and MFA Handling
TL;DR CERT/CC published vulnerability note VU#492466 on 23 July 2026, covering six flaws in the Logto identity platform. The Logto vulnerabilities let attackers hijack accounts through unverified …
22 views
Daily Writeups
⤷ Title: Open Redirect & Bypass Techniques: A Practical Methodology for Security Testing
════════════════════════
𐀪 Author: N0aziXss
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 11:54:35 GMT
════════════════════════
⌗ Tags: #oauth #bug_bounty #open_redirect #pentesting #methodology
Medium
Open Redirect & Bypass Techniques: A Practical Methodology for Security Testing
Subtitle:
17 views
Daily Writeups
⤷ Title: The Bug Bounty Playbook: OAuth Callback and Redirect Manipulation
════════════════════════
𐀪 Author: Abhishek meena
════════════════════════
ⴵ Time: Mon, 03 Aug 2026 04:56:01 GMT
════════════════════════
⌗ Tags: #web_security #hackerone #oauth #bug_bounty #bug_bounty_tips
Medium
The Bug Bounty Playbook: OAuth Callback and Redirect Manipulation
The Bug Bounty Playbook · Part 3.1 of 8. 13 disclosed HackerOne reports. One protocol. Five ways it breaks.
26 views
Daily Writeups
⤷ Title: Kali365 Exploits Microsoft Device Login to Access US Corporate Data
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 07:39:25 +0000
════════════════════════
⌗ Tags: #Security #Microsoft #Phishing Scam #ANY RUN #Cyber Attack #Cybersecurity #Kali365 #OAuth #PaaS #Phishing #Phishing Kit #Scam #security #Threat Intelligence
Hackread
Kali365 Exploits Microsoft Device Login to Access US Corporate Data
Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.
20 views
Daily Writeups
⤷ Title: The OAuth token that outlived three employees
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Wed, 05 Aug 2026 13:31:01 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #oauth #security
Medium
The OAuth token that outlived three employees
A short horror story about a credential nobody killed, and the offboarding gap almost every organization has
9 views
Daily Writeups
⤷ Title: Stop Trusting Bearer Tokens: Build a DPoP-Protected API in .NET 10
════════════════════════
𐀪 Author: Michael Maurice
════════════════════════
ⴵ Time: Thu, 06 Aug 2026 21:54:49 GMT
════════════════════════
⌗ Tags: #api_security #oauth #dotnet #aspnetcore #cybersecurity
Medium
Stop Trusting Bearer Tokens: Build a DPoP-Protected API in .NET 10
Bind OAuth access tokens to a client key, validate per-request proofs, and stop replay attacks with ASP.NET Core.
6 views
Daily Writeups
⤷ Title: OAuth 2.0 Vulnerability Hunting: A Pentester’s Field Guide
════════════════════════
𐀪 Author: Dev
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 12:57:41 GMT
════════════════════════
⌗ Tags: #oauth #cybersecurity #application_security #penetration_testing #bug_bounty
Medium
OAuth 2.0 Vulnerability Hunting: A Pentester’s Field Guide
OAuth 2.0 is everywhere — “Login with Google,” “Login with Microsoft,” third-party API integrations. It’s an authorization framework, not…
13 views