Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Sat, 28 Oct 2023 02:25:11 GMT
———————————————
✏️Title: Developers — You’re Swaggering to Trouble: The Open Invitation Your API Docs Extend
———————————————
📎Link: https://medium.com/p/76acd9b7be6f
———————————————
Tags: #swagger #penetration_testing #swagger_ui #api_development #bounty_hunter

Medium

Developers — You’re Swaggering to Trouble: The Open Invitation Your API Docs Extend

In the digital realm, sharing is caring. But sometimes, over-sharing could lead to unforeseen trouble, especially when it comes to your…

17 views05:02

Daily Writeups

⤷ Title: apidetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 01:42:35 +0000
════════════════════════
⌗ Tags: #Web AppSec #APIDetector #Swagger endpoints

Penetration Testing Tools

apidetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains

APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains

26 views03:04

Daily Writeups

⤷ Title: OAuth and Swagger in Modern Web Applications
════════════════════════
𐀪 Author: Herbert Moroni Gois
════════════════════════
ⴵ Time: Thu, 06 Mar 2025 13:42:58 GMT
════════════════════════
⌗ Tags: #expressjs #oauth2 #firebaseauthentication #swagger #api_security

Medium

OAuth and Swagger in Modern Web Applications

Picture this: You’ve just built a robust API that provides valuable services and data. Your API works perfectly and passes all tests, but…

65 views14:05

Daily Writeups

⤷ Title: Hacking Swagger UI - 101
════════════════════════
𐀪 Author: RivuDon
════════════════════════
ⴵ Time: Thu, 13 Mar 2025 07:25:26 GMT
════════════════════════
⌗ Tags: #swagger_ui #bug_bounty #infosec #bug_bounty_tips #bug_bounty_writeup

Medium

Hacking Swagger UI - 101

A Hands-on practical guide to earning rewards.

35 views08:04

Daily Writeups

⤷ Title: Exposing Shadow APIs: The Hidden Attack Surface in Modern Web Apps
════════════════════════
𐀪 Author: tezp
════════════════════════
ⴵ Time: Thu, 08 May 2025 16:53:42 GMT
════════════════════════
⌗ Tags: #owasp #api #api_documentation #swagger #bug_bounty

Medium

Exposing Shadow APIs: The Hidden Attack Surface in Modern Web Apps

“You can’t protect what you don’t know exists.” — A golden rule in cybersecurity, and the core reason shadow APIs are so dangerous.

12 views18:04

Daily Writeups

⤷ Title: Geliştirici Hatalarıyla Zafiyet Bulma: Açıkta Kalan Debug Paneller, Swagger UI ve .git Sızıntıları
════════════════════════
𐀪 Author: Onur Civan
════════════════════════
ⴵ Time: Tue, 03 Jun 2025 11:51:10 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #swagger #hacking #git

Medium

Geliştirici Hatalarıyla Zafiyet Bulma: Açıkta Kalan Debug Paneller, Swagger UI ve .git Sızıntıları

Modern web uygulamarında geliştiricilerin hayatlarını kolaylaştırmak için geliştirilen bazı araçlar, yanlış konfigürasyon ve unutulan…

15 views12:04

Daily Writeups

⤷ Title: Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties
════════════════════════
𐀪 Author: TSxNINJA
════════════════════════
ⴵ Time: Sun, 29 Jun 2025 05:36:33 GMT
════════════════════════
⌗ Tags: #infosec #bounties #cybersecurity #swagger #bug_bounty

Medium

Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties

जय श्री राम 🚩

18 views07:04

Daily Writeups

⤷ Title: We Thought Swagger Was Safe — 7 Traps That Nearly Exposed Our API
════════════════════════
𐀪 Author: Serxan Hamzayev
════════════════════════
ⴵ Time: Wed, 02 Jul 2025 08:40:39 GMT
════════════════════════
⌗ Tags: #api_security #swagger #spring_boot #java #backend_development

Medium

We Thought Swagger Was Safe — 7 Traps That Nearly Exposed Our API

“We only use Swagger for development — it’s not dangerous.” That’s what we believed… until we discovered that Swagger was quietly…

65 views09:04

Daily Writeups

⤷ Title: How I Tricked a Swagger UI into Showing a Fake Login Page
════════════════════════
𐀪 Author: Shafayat Ahmed Alif
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 06:44:48 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #swagger_ui #bug_bounty_tips #cybersecurity

Medium

How I Tricked a Swagger UI into Showing a Fake Login Page

Hey, bug hunters and tech nerds! So, I was recently digging into a web app for a bug bounty program, and I stumbled onto something wild…

26 views07:04

Daily Writeups

⤷ Title: Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties
════════════════════════
𐀪 Author: TSxNINJA
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 04:10:45 GMT
════════════════════════
⌗ Tags: #infosec #bounties #cybersecurity #swagger #bug_bounty

Medium

Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties

जय श्री राम 🚩

18 views05:04

Daily Writeups

⤷ Title: How Swagger UI Can Accidentally Expose Your API
════════════════════════
𐀪 Author: Ibtissam hammadi
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 15:22:20 GMT
════════════════════════
⌗ Tags: #swagger #api_security #cybersecurity #web_security #bug_bounty

Medium

How Swagger UI Can Accidentally Expose Your API

I’ve spent a considerable amount of time examining how APIs are built and documented. Again and again, one of the most common surprises I…

24 views16:04

Daily Writeups

⤷ Title: How I Hunt for Swagger UI on Real Targets (A Practical Guide for Bug Bounty Hunters)
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Sat, 20 Dec 2025 14:41:41 GMT
════════════════════════
⌗ Tags: #swagger_ui #bugbounty_tips #bugbounty_writeup #cybersecurity #bug_bounty

Medium

🔍 How I Hunt for Swagger UI on Real Targets (A Practical Guide for Bug Bounty Hunters)

Yesterday, we talked about what Swagger UI is — that clean little interface that shows all the API endpoints and lets you hit “Try it out”…

24 views16:04

About

Blog

Apps

Platform