Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Understanding BOLA — The #1 API Security Risk You Can’t Ignore
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 09 May 2026 13:24:36 GMT
════════════════════════
⌗ Tags: #owasp_api_top_10 #bola #api_testing #bug_bounty #api_penetration_testing
Medium
Understanding BOLA — The #1 API Security Risk You Can’t Ignore
Welcome back to my API pentesting series! In this third blog, we’re diving into BOLA (Broken Object Level Authorization) — the #1 API…
41 views
Daily Writeups
⤷ Title: Beyond XSS and SQLi: Why Business Logic Is the Real Frontier of Web Security Testing
════════════════════════
𐀪 Author: Shubhomrawat
════════════════════════
ⴵ Time: Fri, 15 May 2026 17:48:35 GMT
════════════════════════
⌗ Tags: #business_logic #owasp_api_security_top_10 #cybersecurity #penetration_testing #web_application_security
Medium
Beyond XSS and SQLi: Why Business Logic Is the Real Frontier of Web Security Testing
What a week of hands-on API testing taught me about thinking like an attacker, not just scanning like a tool
17 views
Daily Writeups
⤷ Title: What is BOLA? API Broken Object Level Authorization Explained for Beginners
════════════════════════
𐀪 Author: Abrar Bin Habib
════════════════════════
ⴵ Time: Fri, 15 May 2026 17:36:40 GMT
════════════════════════
⌗ Tags: #owasp_api_top_10 #api_vulnerabilities #authorization #bola #api_security
Medium
What is BOLA? API Broken Object Level Authorization Explained for Beginners
“Imagine changing the number 1 to 2 in a website link and suddenly seeing someone else’s private data. That’s BOLA.”
42 views
Daily Writeups
⤷ Title: Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 16 May 2026 16:54:23 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #api_penetration_testing #broken_authentication #owasp_api_security_top_10 #bug_bounty
Medium
Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
Introduction: Why Broken Authentication Still Wins
28 views
Daily Writeups
⤷ Title: What is Broken Authentication? API2:2023 Explained for Beginners
════════════════════════
𐀪 Author: Abrar Bin Habib
════════════════════════
ⴵ Time: Sat, 16 May 2026 16:11:38 GMT
════════════════════════
⌗ Tags: #broken_authentication #owasp_api_top_10 #cybersecurity #api_security #ethical_hacking
Medium
What is Broken Authentication? API2:2023 Explained for Beginners
The API security flaw that lets attackers become anyone they want
36 views
Daily Writeups
⤷ Title: Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Mon, 18 May 2026 10:22:57 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #api_penetration_testing #broken_authentication #owasp_api_security_top_10 #bug_bounty
Medium
Broken Authentication: How Attackers Gain Unauthorized Access to Your Application.
Introduction: Why Broken Authentication Still Wins
16 views
Daily Writeups
⤷ Title: OWASP crAPI Walkthrough Series
════════════════════════
𐀪 Author: Boluwatife Dada
════════════════════════
ⴵ Time: Tue, 19 May 2026 22:22:40 GMT
════════════════════════
⌗ Tags: #api_security #crapi #owasp_api_security_top_10 #crapi_walkthrough
Medium
OWASP crAPI Walkthrough Series
Broken Object Level Authorization (BOLA) — API 1:2023
33 views
Daily Writeups
⤷ Title: I Found a Way to Access Company Data Without Logging In
════════════════════════
𐀪 Author: Abdullahbinzarshaid
════════════════════════
ⴵ Time: Wed, 20 May 2026 22:09:59 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #ethical_hacking #cybersecurity #web_security #owasp_api_security_top_10
Medium
I Found a Way to Access Company Data Without Logging In
By Abdullah Bin Zarshaid
24 views
Daily Writeups
⤷ Title: Bypassing the Vault: How SQLi, BOLA, BOPLA and PCI DSS Failures Broke a Vuln-bank API
════════════════════════
𐀪 Author: Divine
════════════════════════
ⴵ Time: Wed, 27 May 2026 05:38:04 GMT
════════════════════════
⌗ Tags: #api #api_security #owasp_api_security_top_10
Medium
Bypassing the Vault: How SQLi, BOLA, BOPLA and PCI DSS Failures Broke a Vuln-bank API
This is the final post in my vuln-bank series. Over the past four weeks I have worked through recon, JWT attacks, rate limiting, and PIN…
27 views
Daily Writeups
⤷ Title: GraphQL Introspection: The Feature That Hands Attackers Your API Blueprint
════════════════════════
𐀪 Author: johnnattakit 0xDD
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 12:56:35 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #penetration_testing #vulnerability #graphql #cybersecurity
Medium
GraphQL Introspection: The Feature That Hands Attackers Your API Blueprint
TL;DR: GraphQL introspection is a built-in, spec-compliant feature that — when left enabled on production endpoints — gives attackers a…
22 views