Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: From Token to Takeover: Exploiting Weak HS256 Secrets (POC)
════════════════════════
𐀪 Author: Satheesh
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 07:09:15 GMT
════════════════════════
⌗ Tags: #secure_code_review #application_security #cybersecurity #jwt_exploitation #jwt_authentication
Medium
From Token to Takeover: Exploiting Weak HS256 Secrets (POC)
🔓 Cracking a Weak HS256 JWT: How I Forged a Token and Retrieved the Masterkey
27 views
Daily Writeups
⤷ Title: Understanding JWT Tokens: The Beginner’s Guide to Modern Authentication
════════════════════════
𐀪 Author: Atharva Baheti
════════════════════════
ⴵ Time: Tue, 18 Nov 2025 12:54:05 GMT
════════════════════════
⌗ Tags: #secure_coding #cybersecurity #web_development #jwt_authentication #jwt_token
Medium
Understanding JWT Tokens: The Beginner’s Guide to Modern Authentication
What Is a JWT Token?
16 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via Weak Signing Key
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 11:25:36 GMT
════════════════════════
⌗ Tags: #json_web_token #bug_bounty #jwt_brute_force_attack #weak_jwt_secret #jwt_authentication_bypass
Medium
JWT Authentication Bypass via Weak Signing Key
How a Single Weak JWT Secret Can Hand Over the Keys to Any Account.
16 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via JWK Header Injection
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 03:40:35 GMT
════════════════════════
⌗ Tags: #json_web_token #jwt_exploitation #jwt_authentication_bypass #jwk_header_injection #bug_bounty
Medium
JWT Authentication Bypass via JWK Header Injection
A detailed look at how insecure JWK handling leads to full authentication compromise.
20 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via jku Header Injection
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Wed, 03 Dec 2025 08:51:54 GMT
════════════════════════
⌗ Tags: #jwt_authentication_bypass #jku_header_injection #json_web_token #jwks_manipulation #bug_bounty
Medium
JWT Authentication Bypass via jku Header Injection
Inside the JWT Misconfiguration That Lets Attackers Become Admins with a Single Header Injection
15 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via kid Header Path Traversal
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:09:35 GMT
════════════════════════
⌗ Tags: #authentication_bypass #jwt_authentication_bypass #bug_bounty #jwt_kid_vulnerability #path_traversal_exploit
Medium
JWT Authentication Bypass via kid Header Path Traversal
Understanding how insecure key lookups enable forged tokens and admin-level compromise.
13 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via Algorithm Confusion
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Sun, 07 Dec 2025 00:30:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #jwt_algorithm_confusion #bug_bounty #jwt_token #jwt_authentication_bypass
Medium
JWT Authentication Bypass via Algorithm Confusion
How a Single Algorithm Switch (RS256 → HS256) Can Turn a JWT Into an Administrator Account.
24 views
Daily Writeups
⤷ Title: JWT Authentication Bypass via Algorithm Confusion With No Exposed Key
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 15:37:45 GMT
════════════════════════
⌗ Tags: #jwt_authentication_bypass #jwt_token #bug_bounty #bug_bounty_tips #jwt_algorithm_confusion
Medium
JWT Authentication Bypass via Algorithm Confusion With No Exposed Key
How weak JWT algorithm handling exposes admin-level access without leaking a private key.
16 views
Daily Writeups
⤷ Title: JWT Attack CTF Challenge (Bugforge)
════════════════════════
𐀪 Author: blackm4c
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 07:37:50 GMT
════════════════════════
⌗ Tags: #web_ctf_writeup #jwt_authentication #jwt_attack #hacking #bugforge
Medium
JWT Attack CTF Challenge (Bugforge)
Hello guys 👋
17 views
Daily Writeups
⤷ Title: How to Exploit JWT Tokens with Weak Signing Keys (Step-by-Step Guide)
════════════════════════
𐀪 Author: CyberSec Xploit | Prasangam
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 07:23:12 GMT
════════════════════════
⌗ Tags: #jwt_token #hacker #jwt_authentication #bug_bounty #jwt
Medium
🔑 How to Exploit JWT Tokens with Weak Signing Keys (Step-by-Step Guide)
JSON Web Tokens (JWTs) are widely used for authentication and session management in modern web applications. But if implemented poorly —…
26 views