Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Getting Keycloak working in a Strict CSP Environment
════════════════════════
𐀪 Author: Dinuka Salwathura
════════════════════════
ⴵ Time: Sun, 29 Dec 2024 13:17:57 GMT
════════════════════════
⌗ Tags: #keycloak #csp #javascript
Medium
Getting Keycloak working in a Strict CSP Environment
Some companies have requirements like enforcing a string Content Security Policy(CSP) to increase security of its hosted web applications.
20 views
Daily Writeups
⤷ Title: WSO2 APIM 4.4.0 & Keycloak v24: The Heist-Proof Plan for Your APIs
════════════════════════
𐀪 Author: Minura Kariyawasam
════════════════════════
ⴵ Time: Sat, 08 Mar 2025 17:24:51 GMT
════════════════════════
⌗ Tags: #wso2_api_manager #wso2 #sso #api_security #keycloak
Medium
WSO2 APIM 4.4.0 & Keycloak v24: The Heist-Proof Plan for Your APIs
Steal This Guide to Lock Down Your APIs and Wow Your Users
25 views
Daily Writeups
⤷ Title: Keycloak and Spring Boot OAuth 2.0 and OpenID Connect (OIDC) Authentication
════════════════════════
𐀪 Author: Nicholas YG Kim
════════════════════════
ⴵ Time: Mon, 17 Mar 2025 18:05:24 GMT
════════════════════════
⌗ Tags: #api_security #keycloak #microservices #spring_boot #oauth2
Medium
Keycloak and Spring Boot OAuth 2.0 and OpenID Connect (OIDC) Authentication
Introduction
31 views
Daily Writeups
⤷ Title: Social Login with Keycloak and Google
════════════════════════
𐀪 Author: Dennis Kalaygian
════════════════════════
ⴵ Time: Mon, 07 Apr 2025 23:06:55 GMT
════════════════════════
⌗ Tags: #google #keycloak #social_login #saas_development #application_security
Medium
Social Login with Keycloak and Google
Goal
32 views
Daily Writeups
⤷ Title: Demystifying Identity Management (IDM): The Backbone of Modern Digital Security
════════════════════════
𐀪 Author: Rajkumar Govindasamy
════════════════════════
ⴵ Time: Sat, 14 Jun 2025 06:01:23 GMT
════════════════════════
⌗ Tags: #identity_management #spring_boot_project #keycloak #cybersecurity #devsecops
Medium
Demystifying Identity Management (IDM): The Backbone of Modern Digital Security
In an age where data breaches are a daily headline and digital experiences span multiple platforms, Identity Management (IDM) plays the…
74 views
Daily Writeups
⤷ Title: Securing Keycloak Against Reverse Proxy Vulnerabilities
════════════════════════
𐀪 Author: Toni Huttunen
════════════════════════
ⴵ Time: Thu, 21 Aug 2025 12:47:47 GMT
════════════════════════
⌗ Tags: #web_security #keycloak #application_security
Medium
Securing Keycloak Against Reverse Proxy Vulnerabilities
Keycloak identity and access management solution is often configured insecurely. This article discusses how to avoid this mistake.
13 views
Daily Writeups
⤷ Title: Resources, Scopes, Permissions & Policies in Keycloak — A Practical Guide for Mapping Legacy RBAC
════════════════════════
𐀪 Author: Ajay Kumar
════════════════════════
ⴵ Time: Sat, 18 Oct 2025 10:52:38 GMT
════════════════════════
⌗ Tags: #keycloak #cybersecurity #permission #rbac_access_control #custom_policies
Medium
Resources, Scopes, Permissions & Policies in Keycloak — A Practical Guide for Mapping Legacy RBAC
You’ve got ~250 “capabilities” today (e.g., viewAccount, viewTransaction) granted via user–group membership and the occasional direct…
24 views
Daily Writeups
⤷ Title: A Production-Ready Guide to Securing Spring WebClient With JWT, Refresh Tokens, 401 Retry &…
════════════════════════
𐀪 Author: Igor Sudijovski
════════════════════════
ⴵ Time: Thu, 06 Nov 2025 08:13:39 GMT
════════════════════════
⌗ Tags: #authentication #api_security #keycloak #webclient #jwt
Medium
A Production-Ready Guide to Securing Spring WebClient With JWT, Refresh Tokens, 401 Retry & Scheduled Refresh (Using OpenAPI)
Secure Spring Boot WebClient calls with JWT, OpenAPI codegen, Keycloak, token refresh, retries, caching, and metrics for production-ready…
38 views
Daily Writeups
⤷ Title: Monitoring Keycloak Events in Wazuh — A Complete, Working Integration Guide
════════════════════════
𐀪 Author: Yash Patel
════════════════════════
ⴵ Time: Tue, 18 Nov 2025 16:56:27 GMT
════════════════════════
⌗ Tags: #monitoring #keycloak #integration #wazuh #cybersecurity
Medium
Monitoring Keycloak Events in Wazuh — A Complete, Working Integration Guide
Integrating Keycloak with Wazuh transforms how identity and access management events are monitored. This integration not only provides…
25 views
Daily Writeups
⤷ Title: Hazlo bien o no lo hagas: identidad moderna para arquitecturas sólidas
════════════════════════
𐀪 Author: Erick Arostegui Cunza
════════════════════════
ⴵ Time: Sun, 30 Nov 2025 20:36:48 GMT
════════════════════════
⌗ Tags: #identity_security #azureentraid #devsecops #application_security #keycloak
Medium
Hazlo bien o no lo hagas: identidad moderna para arquitecturas sólidas
Introducción
15 views
Daily Writeups
⤷ Title: A Simple Page Source View Uncovered a Critical Keycloak Vulnerability
════════════════════════
𐀪 Author: Vaibhav Kumar Srivastava
════════════════════════
ⴵ Time: Sat, 06 Dec 2025 16:42:15 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty_tips #bug_bounty #keycloak #cybersecurity
Medium
A Simple Page Source View Uncovered a Critical Keycloak Vulnerability
Some discoveries begin with sophisticated scanners, payloads, or fuzzers.  This one began with something as simple — and old-school — as…
16 views
Daily Writeups
⤷ Title: Apache Camel Patches Critical Keycloak & LevelDB Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 14:09:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #Authentication Bypass #CVE_2026_23552 #CVE_2026_25747 #Deserialization #Integration Framework #Java security #Keycloak #LevelDB #Patch Alert
Daily CyberSecurity
Apache Camel Patches Critical Keycloak & LevelDB Flaws
Apache Camel patches critical flaws in Keycloak (CVE-2026-23552) and LevelDB (CVE-2026-25747) components that allow auth bypass and RCE. Update to 4.18.0.
18 views
Daily Writeups
⤷ Title: Keycloak Under Siege: Patch Now to Stop Token Theft and Account Takeovers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 14:30:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Access Management #CVE_2026_3429 #CVE_2026_4636 #cybersecurity #IAM Security #infosec #Keycloak #MFA Bypass #Open Source Security #Token Theft #UMA #Vert.x
Daily CyberSecurity
Keycloak Under Siege: Patch Now to Stop Token Theft and Account Takeovers
Keycloak 26.5.7 fixes critical flaws including MFA bypass (CVE-2026-3429) and UMA token theft. Protect your IAM infrastructure—upgrade to the latest version.
22 views
Daily Writeups
⤷ Title: From Client Secrets to Certificates — Implementing OAuth2 mTLS Authentication with Keycloak
════════════════════════
𐀪 Author: Aditya Ramaswamy
════════════════════════
ⴵ Time: Wed, 27 May 2026 10:49:49 GMT
════════════════════════
⌗ Tags: #authentication #api_security #oauth2 #keycloak #system_architecture
Medium
From Client Secrets to Certificates — Implementing OAuth2 mTLS Authentication with Keycloak
Introduction
15 views
Daily Writeups
⤷ Title: Dynamic Client Registration in Keycloak: Automating OAuth Client Onboarding at Scale
════════════════════════
𐀪 Author: Aditya Ramaswamy
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 10:31:51 GMT
════════════════════════
⌗ Tags: #identity_management #oauth2 #enterprise_architecture #api_security #keycloak
Medium
Dynamic Client Registration in Keycloak: Automating OAuth Client Onboarding at Scale
Introduction
42 views