Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Understanding JWT Tokens: The Beginner’s Guide to Modern Authentication
════════════════════════
𐀪 Author: Atharva Baheti
════════════════════════
ⴵ Time: Tue, 18 Nov 2025 12:54:05 GMT
════════════════════════
⌗ Tags: #secure_coding #cybersecurity #web_development #jwt_authentication #jwt_token
Medium
Understanding JWT Tokens: The Beginner’s Guide to Modern Authentication
What Is a JWT Token?
16 views
Daily Writeups
⤷ Title: JWT KID Vulnerability
════════════════════════
𐀪 Author: Yash Pawar @HackersParadise
════════════════════════
ⴵ Time: Fri, 28 Nov 2025 11:34:11 GMT
════════════════════════
⌗ Tags: #bug_bounty #jwt_bugs #jwt_bypass #penetration_testing #jwt_token
Medium
JWT KID Vulnerability
JWT KID attack happens when the server dynamically loads the signing key using the kid value from the token header, without validating or…
44 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via Algorithm Confusion
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sun, 07 Dec 2025 00:30:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #jwt_algorithm_confusion #bug_bounty #jwt_token #jwt_authentication_bypass
Medium
JWT Authentication Bypass via Algorithm Confusion
How a Single Algorithm Switch (RS256 → HS256) Can Turn a JWT Into an Administrator Account.
24 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via Algorithm Confusion With No Exposed Key
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 15:37:45 GMT
════════════════════════
⌗ Tags: #jwt_authentication_bypass #jwt_token #bug_bounty #bug_bounty_tips #jwt_algorithm_confusion
Medium
JWT Authentication Bypass via Algorithm Confusion With No Exposed Key
How weak JWT algorithm handling exposes admin-level access without leaking a private key.
16 views
Daily Writeups
⤷ Title: Tokens are just digital wristbands that apps use to remember you.
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Sun, 14 Dec 2025 16:35:23 GMT
════════════════════════
⌗ Tags: #jwt_token #information_security #cybersecurity #bug_bounty_tips #begginer
Medium
Tokens are just digital wristbands that apps use to remember you.
🎢 Imagine a Theme Park, Not a Textbook
41 views
Daily Writeups
⤷ Title: How to Exploit JWT Tokens with Weak Signing Keys (Step-by-Step Guide)
════════════════════════
𐀪 Author: CyberSec Xploit | Prasangam
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 07:23:12 GMT
════════════════════════
⌗ Tags: #jwt_token #hacker #jwt_authentication #bug_bounty #jwt
Medium
🔑 How to Exploit JWT Tokens with Weak Signing Keys (Step-by-Step Guide)
JSON Web Tokens (JWTs) are widely used for authentication and session management in modern web applications. But if implemented poorly —…
26 views
Daily Writeups
⤷ Title: [Rabbit Store]  —  JWT Manipulation, SSRF, SSTI Leading to RCE and Root Access via a Vulnerable…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sun, 18 Jan 2026 21:51:31 GMT
════════════════════════
⌗ Tags: #rce #ssrf #privilege_escalation #ssti #jwt_token
Medium
[Rabbit Store] — JWT Manipulation, SSRF, SSTI Leading to RCE and Root Access via a Vulnerable Erlang Distribution on RabbitMQ
From SSRF and SSTI to Erlang cookie theft and root compromise.
53 views
Daily Writeups
⤷ Title: Breaking JWT Authentication
════════════════════════
𐀪 Author: Odunlade Adeola
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 06:01:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security_testing #jwt_token #jwt_authentication #api_security
Medium
Breaking JWT Authentication
How I Identified and Exploited Authentication Flaws in a Test API (Week 2)
30 views
Daily Writeups
⤷ Title: TryHeartMe: Write-Up (JWT Exploitation)
════════════════════════
𐀪 Author: Georgi Hadzhinikiforov
════════════════════════
ⴵ Time: Sun, 15 Feb 2026 10:18:34 GMT
════════════════════════
⌗ Tags: #burpsuite #tryhackme #bulgaria #cybersecurity #jwt_token
Medium
TryHeartMe: Write-Up (JWT Exploitation)
This write-up covers the exploitation of a Broken Access Control vulnerability via JWT (JSON Web Token) manipulation.
34 views
Daily Writeups
⤷ Title: Writeup | TryHeartMe | TryHackMe
════════════════════════
𐀪 Author: Tommy S
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 03:01:01 GMT
════════════════════════
⌗ Tags: #jwt_token #ctf_writeup #tryhackme
Medium
Writeup | TryHeartMe | TryHackMe
Challenge Overview
38 views