Daily Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
Title: How “just forward the request” turns into a surprisingly complicated job
════════════════════════
𐀪 Author: Gaurirai
════════════════════════
Time: Wed, 12 Aug 2026 09:57:24 GMT
════════════════════════
Tags: #jwt_authentication #reverse_proxy #api_security #ruby_on_rails #api_gateway
Title: Lab Write-up: Information Disclosure on Debug Page
════════════════════════
𐀪 Author: Ayeshaaghafoor
════════════════════════
Time: Wed, 12 Aug 2026 13:42:50 GMT
════════════════════════
Tags: #penetration_testing #cybersecurity_awareness #bug_bounty #api #cybersecurity
Title: The OWASP API Top 10, Translated Into Bugs You’ve Actually Written
════════════════════════
𐀪 Author: Daniel Valev
════════════════════════
Time: Wed, 12 Aug 2026 12:31:01 GMT
════════════════════════
Tags: #programming #api_security #software_engineering #fastapi #application_security
Title: Lab Write-up: Information Disclosure in Error Messages
════════════════════════
𐀪 Author: Ayeshaaghafoor
════════════════════════
Time: Wed, 12 Aug 2026 13:40:52 GMT
════════════════════════
Tags: #cybersecurity_awareness #api #penetration_testing #web_development #cybersecurity
Title: How Unauthenticated Queries Exposed User PII and Privileged Accounts
════════════════════════
𐀪 Author: Sudheer
════════════════════════
Time: Thu, 13 Aug 2026 07:26:04 GMT
════════════════════════
Tags: #authorization #api_security #bug_bounty #authentication #web_security_testing
Title: Hunting IDOR & BOLA in REST APIs: A Practical Authorization Testing Methodology
════════════════════════
𐀪 Author: Ishant
════════════════════════
Time: Thu, 13 Aug 2026 11:08:37 GMT
════════════════════════
Tags: #web_security #cybersecurity #api_security
Title: 5 min read
════════════════════════
𐀪 Author: Rhuber
════════════════════════
Time: Thu, 13 Aug 2026 16:45:33 GMT
════════════════════════
Tags: #api #api_security #devportal #api_portal
Title: Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
════════════════════════
𐀪 Author: Rhuber
════════════════════════
Time: Thu, 13 Aug 2026 16:45:33 GMT
════════════════════════
Tags: #api #api_security #devportal #api_portal
Title: How Would You Prevent Unauthorized Users From Accessing Other Users’ Data?
════════════════════════
𐀪 Author: Gokulapriyan
════════════════════════
Time: Fri, 14 Aug 2026 02:19:19 GMT
════════════════════════
Tags: #security #api_security #prevention #unauthorized_access #rest_api_security
Title: Beyond OAuth Scopes: Fine-Grained Authorization with RAR in WSO2 Identity Server
════════════════════════
𐀪 Author: Sanjula Herath
════════════════════════
Time: Fri, 14 Aug 2026 07:36:38 GMT
════════════════════════
Tags: #oauth2 #wso2 #api_security #identity_and_access #open_banking