Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: A SaaS Pentest Isn’t Buyer-Ready Until Authorization Is Proven
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 10:59:42 GMT
════════════════════════
⌗ Tags: #api_security #access_control #b2b_saas #penetration_testing #saas_security
Medium
A SaaS Pentest Isn’t Buyer-Ready Until Authorization Is Proven
Enterprise security reviews care less about whether users can log in and more about whether tenants, roles, objects, exports, and…
12 views
Daily Writeups
⤷ Title: Testing the Authentication Boundary: A Case Study in Session and Identity Security
════════════════════════
𐀪 Author: Mdporschaa
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 10:14:30 GMT
════════════════════════
⌗ Tags: #authentication #jwt_authentication #identity_management #api_security #penetration_testing
Medium
Testing the Authentication Boundary: A Case Study in Session and Identity Security
The security properties I need to establish, the attack categories I test against, and the harness that makes it repeatable.
16 views
Daily Writeups
⤷ Title: How “just forward the request” turns into a surprisingly complicated job
════════════════════════
𐀪 Author: Gaurirai
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 09:57:24 GMT
════════════════════════
⌗ Tags: #jwt_authentication #reverse_proxy #api_security #ruby_on_rails #api_gateway
Medium
How “just forward the request” turns into a surprisingly complicated job
You send a request: Get /orders Authorization: Bearer eyfghj…..
39 views
Daily Writeups
⤷ Title: The OWASP API Top 10, Translated Into Bugs You’ve Actually Written
════════════════════════
𐀪 Author: Daniel Valev
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #programming #api_security #software_engineering #fastapi #application_security
Medium
The OWASP API Top 10, Translated Into Bugs You’ve Actually Written
Your ORM will happily hand an attacker another customer’s row. It’s doing exactly what you asked.
17 views
Daily Writeups
⤷ Title: How Unauthenticated Queries Exposed User PII and Privileged Accounts
════════════════════════
𐀪 Author: Sudheer
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 07:26:04 GMT
════════════════════════
⌗ Tags: #authorization #api_security #bug_bounty #authentication #web_security_testing
Medium
How Unauthenticated Queries Exposed User PII and Privileged Accounts
Unauthenticated API queries exposed sensitive user data and enabled enumeration of the application’s entire observed userbase.
17 views
Daily Writeups
⤷ Title: Hunting IDOR & BOLA in REST APIs: A Practical Authorization Testing Methodology
════════════════════════
𐀪 Author: Ishant
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 11:08:37 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #api_security
Medium
Hunting IDOR & BOLA in REST APIs: A Practical Authorization Testing Methodology
A method for detecting broken authorization in REST APIs is shown using the OWASP crAPI.
47 views
Daily Writeups
⤷ Title: 5 min read
════════════════════════
𐀪 Author: Rhuber
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 16:45:33 GMT
════════════════════════
⌗ Tags: #api #api_security #devportal #api_portal
Medium
5 min read
Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
34 views
Daily Writeups
⤷ Title: Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
════════════════════════
𐀪 Author: Rhuber
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 16:45:33 GMT
════════════════════════
⌗ Tags: #api #api_security #devportal #api_portal
Medium
5 min read
Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
20 views
Daily Writeups
⤷ Title: How Would You Prevent Unauthorized Users From Accessing Other Users’ Data?
════════════════════════
𐀪 Author: Gokulapriyan
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 02:19:19 GMT
════════════════════════
⌗ Tags: #security #api_security #prevention #unauthorized_access #rest_api_security
Medium
How Would You Prevent Unauthorized Users From Accessing Other Users’ Data?
One of the most important responsibilities of a backend application is protecting user data.
23 views
Daily Writeups
⤷ Title: Beyond OAuth Scopes: Fine-Grained Authorization with RAR in WSO2 Identity Server
════════════════════════
𐀪 Author: Sanjula Herath
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 07:36:38 GMT
════════════════════════
⌗ Tags: #oauth2 #wso2 #api_security #identity_and_access #open_banking
Medium
Beyond OAuth Scopes: Fine-Grained Authorization with RAR in WSO2 Identity Server
Build an OAuth flow that authorizes a specific action, amount, recipient, and API — not an ambiguous category of access.
12 views