Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Wed, 23 Aug 2023 09:45:36 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Secure code review process in 4 steps
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/f9fc0485765e
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #application_security #secure_code_review
Medium
Secure code review process in 4 steps
How it seen by an application security engineer
20 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Tue, 24 Dec 2024 09:27:12 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Bookmark these ultimate learning resources for Secure Coding
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/6a0537198a7f
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #secure_code #learning_resources #cybersecurity #application_security #secure_coding
Medium
Bookmark these ultimate learning resources for Secure Coding
πŸš€ Get a good grip on Secure Coding with these learning resources πŸ”’
38 views
Daily Writeups
β€· Title: Bug Bounty Hunting: Web Vulnerability (Secure Code Review)
════════════════════════
π€ͺ Author: Muhammad Abdullah Niazi
════════════════════════
β΄΅ Time: Fri, 14 Feb 2025 21:42:41 GMT
════════════════════════
βŒ— Tags: #bug_bounty_tips #bug_bounty #secure_code_review #bug_bounty_program #bug_bounty_hunter
Medium
Bug Bounty Hunting: Web Vulnerability (Secure Code Review)
A Guide for Developers and Security Professionals
32 views
Daily Writeups
β€· Title: Arbitrary File Write via Archive Extraction (Zip Slip)- OWASP Juiceshop #1
════════════════════════
π€ͺ Author: DebianHat
════════════════════════
β΄΅ Time: Mon, 31 Mar 2025 08:44:03 GMT
════════════════════════
βŒ— Tags: #application_security #sast #vulnerability #secure_code_review #secure_coding
Medium
Arbitrary File Write via Archive Extraction (Zip Slip)- OWASP Juiceshop #1
Zip Slip is an another path traversal vulnerability that occurs when extracting ZIP (or other archive) files without properly validating…
25 views
Daily Writeups
β€· Title: β˜• How to Perform a Secure Code Review Without Losing Your Mind (or Developer Friends)
════════════════════════
π€ͺ Author: UnpluggedSec
════════════════════════
β΄΅ Time: Thu, 10 Apr 2025 19:54:02 GMT
════════════════════════
βŒ— Tags: #cybersecurity #secure_code_review #appsec #devsecops #application_security
Medium
β˜• How to Perform a Secure Code Review Without Losing Your Mind (or Developer Friends)
By Ayman Abdul Kareem | Security Architecture | Senior Application Security Engineer | DevSecOps Advocate | chai-driven defender of cloud…
38 views
Daily Writeups
β€· Title: Secure Web Development in Go: Preventing SQL Injection, XSS, and CSRF Attacks
════════════════════════
π€ͺ Author: Nova Novriansyah
════════════════════════
β΄΅ Time: Wed, 28 May 2025 03:43:07 GMT
════════════════════════
βŒ— Tags: #xs #csrf #go #secure_code #golang
Medium
Secure Web Development in Go: Preventing SQL Injection, XSS, and CSRF Attacks
When building web applications, security must be treated as a core requirement, not an afterthought. Many developers unintentionally expose…
48 views
Daily Writeups
β€· Title: RoadMap: Source Code Analysisβ€Šβ€”β€ŠWhite Box
════════════════════════
π€ͺ Author: Shwajsophia
════════════════════════
β΄΅ Time: Fri, 11 Jul 2025 21:03:30 GMT
════════════════════════
βŒ— Tags: #secure_coding #penetration_testing #code_review #white_box_testing #secure_code_review
Medium
RoadMap: Source Code Analysisβ€Šβ€”β€ŠWhite Box
Sooooooβ€Šβ€”β€Šhere is a secure code analysis roadmap, it could be short, but probably is going to be long, so sorry not sorry :)
34 views
Daily Writeups
β€· Title: Hackers don’t knock. They exploit.
════════════════════════
π€ͺ Author: Prishusoft
════════════════════════
β΄΅ Time: Wed, 30 Jul 2025 08:35:33 GMT
════════════════════════
βŒ— Tags: #web_security #angular_security #cybersecurity #angular #secure_code
Medium
Hackers don’t knock. They exploit.
Are your Angular apps REALLY secure?
 
From XSS to API abuseβ€Šβ€”β€Ševen the tiniest gap can cost BIG.
20 views
Daily Writeups
β€· Title: How can Windsurf/Cursor help you with your secure code review?
════════════════════════
π€ͺ Author: Cristian
════════════════════════
β΄΅ Time: Wed, 30 Jul 2025 19:08:59 GMT
════════════════════════
βŒ— Tags: #cursor #secure_code_review #ai_agent #application_security #windsurf
Medium
How can Windsurf/Cursor help you with your secure code review?
Hello everyone, in this blog I want to talk about how editors with integrated AI features such as Windsurf / Cursor can help you analyze…
17 views
Daily Writeups
β€· Title: Manual Source Code Review in SAST – My Experience Uncovering Critical Vulnerabilities
════════════════════════
π€ͺ Author: Saritamukkani
════════════════════════
β΄΅ Time: Mon, 11 Aug 2025 07:32:57 GMT
════════════════════════
βŒ— Tags: #secure_code_review #secure_coding #application_security #cybersecurity
Medium
Manual Source Code Review in SAST – My Experience Uncovering Critical Vulnerabilities
As a cybersecurity analyst specializing in Static Application Security Testing (SAST), I spend a lot of my time analyzing application source code for security weaknesses before the software is…
16 views
Daily Writeups
β€· Title: Secure Code Review: Automated and Manual Analysis Techniques
════════════════════════
π€ͺ Author: Andrei Ivan
════════════════════════
β΄΅ Time: Wed, 17 Sep 2025 10:26:52 GMT
════════════════════════
βŒ— Tags: #software_development #cybersecurity #secure_code #secure_coding #application_security
Medium
Secure Code Review: Automated and Manual Analysis Techniques
How to combine SAST, DAST, and human expertise to catch vulnerabilities automated tools miss
17 views
Daily Writeups
β€· Title: Building a secure AI tool with Lovable, Gemini API and Cloudflare Workers
════════════════════════
π€ͺ Author: h@shtalk
════════════════════════
β΄΅ Time: Mon, 22 Sep 2025 14:58:51 GMT
════════════════════════
βŒ— Tags: #vibe_coding #secure_code_review #vibe_hacking #cybersecurity #secure_code
Medium
Building a secure AI tool with Lovable, Gemini API and Cloudflare Workers
This might be the easiest secure way to deploy an app within a day.
18 views
Daily Writeups
β€· Title: Vibe coding! How AI is creating unexpected coding problems as it solves others.
════════════════════════
π€ͺ Author: Yann Barba
════════════════════════
β΄΅ Time: Fri, 24 Oct 2025 19:41:05 GMT
════════════════════════
βŒ— Tags: #secure_code #it_security #cybersecurity
Medium
Vibe coding! How AI is creating unexpected coding problems as it solves others.
AI is the new standard, and has been for a while now. Just like Yahoo or Google changed the way we navigated through the web back in the…
9 views
Daily Writeups
β€· Title: Pwning Vibecoded Apps
════════════════════════
π€ͺ Author: Florian Walter
════════════════════════
β΄΅ Time: Mon, 03 Nov 2025 12:10:22 GMT
════════════════════════
βŒ— Tags: #cybersecurity #vibe_coding #application_security #secure_code_review
Medium
Pwning Vibecoded Apps
What to expect in this article: A case study showing how easy it often is to pwn vibecoded apps.
25 views
Daily Writeups
β€· Title: From Token to Takeover: Exploiting Weak HS256 Secrets (POC)
════════════════════════
π€ͺ Author: Satheesh
════════════════════════
β΄΅ Time: Mon, 17 Nov 2025 07:09:15 GMT
════════════════════════
βŒ— Tags: #secure_code_review #application_security #cybersecurity #jwt_exploitation #jwt_authentication
Medium
From Token to Takeover: Exploiting Weak HS256 Secrets (POC)
πŸ”“ Cracking a Weak HS256 JWT: How I Forged a Token and Retrieved the Masterkey
27 views
Daily Writeups
β€· Title: Security-First Development: Prompting for Secure Code (Before It’s Hacked)
════════════════════════
π€ͺ Author: Kawaldeep Singh
════════════════════════
β΄΅ Time: Sat, 20 Dec 2025 12:32:18 GMT
════════════════════════
βŒ— Tags: #security_first #secure_code #cybersecurity #best_practices #application_security
Medium
Security-First Development: Prompting for Secure Code (Before It’s Hacked)
Your app launches. Users sign up. Everything works.
28 views
Daily Writeups
β€· Title: Why Most Developers Accidentally Create Security Holes
════════════════════════
π€ͺ Author: Hania Khan
════════════════════════
β΄΅ Time: Mon, 22 Dec 2025 02:12:23 GMT
════════════════════════
βŒ— Tags: #cybersecurity #secure_code #cyber_security_awareness #infosec #technology
Medium
Why Most Developers Accidentally Create Security Holes
I pushed a secret API key to GitHub. 3,000 people downloaded it before I noticed.
36 views