Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: WhatsApp Flaw Exposes 3.5 Billion Users: Scrapers Mapped Profiles Worldwide
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 09:35:27 +0000
════════════════════════
⌗ Tags: #Data Leak #Contact Lookup #data scraping #Meta #Phone Number Leak #Privacy Flaw #Rate Limit #Vienna University #vulnerability #WhatsApp
Penetration Testing Tools
WhatsApp Flaw Exposes 3.5 Billion Users: Scrapers Mapped Profiles Worldwide
A design flaw in WhatsApp's contact-lookup feature allowed researchers to scrape 3.5 billion user profiles globally, including photos and statuses, with no rate limits.
29 views
Daily Writeups
⤷ Title: Protect your APIs from unauthorized access and Overuse
════════════════════════
𐀪 Author: Garima Gupta
════════════════════════
ⴵ Time: Sat, 22 Nov 2025 16:57:43 GMT
════════════════════════
⌗ Tags: #oauth2 #api_gateway #api_security #rate_limiting
Medium
Protect your APIs from unauthorized access and Overuse
Security in 3 layers — Authentication ( WHO ) , Authorization ( WHAT ) and Rate Limiting ( HOW often )
6 views
Daily Writeups
⤷ Title: Rate Limiting: The API Security Control Everyone Forgets
════════════════════════
𐀪 Author: Adnan taşdemir
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 22:07:25 GMT
════════════════════════
⌗ Tags: #api_rate_limiting #api_security #rate_limiting
Medium
Rate Limiting: The API Security Control Everyone Forgets
Rate limiting is one of the simplest security controls in an API. It is also one of the most commonly missing. Many real incidents could…
27 views
Daily Writeups
⤷ Title: “Better Auth” Framework Alert: The Double-Slash Trick That Bypasses Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:33:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Better Auth #CVSS 8.6 #javascript #Path Normalization #Proxy Security #Rate Limit Evasion #rou3 #TypeScript #Web Security
Daily CyberSecurity
"Better Auth" Framework Alert: The Double-Slash Trick That Bypasses Security Controls
A normalization flaw in Better Auth's router allows attackers to bypass access controls and rate limits using simple double-slash URLs.
28 views
Daily Writeups
⤷ Title: Why API Gateways Are Critical for Securing Public APIs
════════════════════════
𐀪 Author: Charmaine Mangorima
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 19:09:59 GMT
════════════════════════
⌗ Tags: #api_gateway #kong_api_gateway #api #rate_limiting #api_security
Medium
Why API Gateways Are Critical for Securing Public APIs
APIs are the backbone of modern applications, enabling communication between mobile apps, web platforms and backend services. However, when…
44 views
Daily Writeups
⤷ Title: Rate Limiting & Throttling: What Developers Need to Know
════════════════════════
𐀪 Author: Hasan Chinthaka
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 04:31:12 GMT
════════════════════════
⌗ Tags: #rate_limiting #api_security #web_development #api #backend_development
Medium
Rate Limiting & Throttling: What Developers Need to Know
When building APIs or web services, controlling traffic is crucial to maintain performance, stability, and security.
6 views
Daily Writeups
⤷ Title: API SECURITY #3: Securing APIs in Real Systems
════════════════════════
𐀪 Author: Sarah Nzeshi
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 10:17:43 GMT
════════════════════════
⌗ Tags: #authorization #stripe #rate_limiting #api_security #authentication
Medium
API SECURITY #3: Securing APIs in Real Systems
If you’ve used an app that pulls weather data, lets you log in with Google, or processes payments without re-entering your card details…
53 views
Daily Writeups
⤷ Title: NestJS Rate Limiting Without Angry Users
════════════════════════
𐀪 Author: Bhagya Rana
════════════════════════
ⴵ Time: Sat, 07 Feb 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #nestjs #backend_engineering #redis #api_security #rate_limiting
Medium
NestJS Rate Limiting Without Angry Users
Build abuse-resistant throttling in NestJS that stops bots, respects real humans, and avoids nuking everyone behind the same IP.
43 views
Daily Writeups
⤷ Title: How a User Enumeration Vulnerability was found in an OTP Authentication API
════════════════════════
𐀪 Author: Philip James
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 05:38:24 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #reconnaissance #rate_limit_bypass #enumeration #bugs
Medium
How a User Enumeration Vulnerability was found in an OTP Authentication API
Endpoint
55 views
Daily Writeups
⤷ Title: Escalating a Duplicate Finding to a CVSS 10.0: Chaining Logic and Session Flaws for Persistent ATO
════════════════════════
𐀪 Author: K4r33m
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:27:02 GMT
════════════════════════
⌗ Tags: #session_misconfiguration #ato #bug_bounty #account_takeover #rate_limiting
Medium
Escalating a Duplicate Finding to a CVSS 10.0: Chaining Logic and Session Flaws for Persistent ATO
In bug bounty and penetration testing, a “duplicate” finding is often viewed as a dead end. However, a duplicate bug is essentially a known…
18 views