Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Lab Write-up: Information Disclosure in Error Messages
════════════════════════
𐀪 Author: Ayeshaaghafoor
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 13:40:52 GMT
════════════════════════
⌗ Tags: #cybersecurity_awareness #api #penetration_testing #web_development #cybersecurity
Medium
Lab Write-up: Information Disclosure in Error Messages
Objective
46 views
Daily Writeups
⤷ Title: How Unauthenticated Queries Exposed User PII and Privileged Accounts
════════════════════════
𐀪 Author: Sudheer
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 07:26:04 GMT
════════════════════════
⌗ Tags: #authorization #api_security #bug_bounty #authentication #web_security_testing
Medium
How Unauthenticated Queries Exposed User PII and Privileged Accounts
Unauthenticated API queries exposed sensitive user data and enabled enumeration of the application’s entire observed userbase.
17 views
Daily Writeups
⤷ Title: Hunting IDOR & BOLA in REST APIs: A Practical Authorization Testing Methodology
════════════════════════
𐀪 Author: Ishant
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 11:08:37 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #api_security
Medium
Hunting IDOR & BOLA in REST APIs: A Practical Authorization Testing Methodology
A method for detecting broken authorization in REST APIs is shown using the OWASP crAPI.
47 views
Daily Writeups
⤷ Title: 5 min read
════════════════════════
𐀪 Author: Rhuber
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 16:45:33 GMT
════════════════════════
⌗ Tags: #api #api_security #devportal #api_portal
Medium
5 min read
Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
34 views
Daily Writeups
⤷ Title: Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
════════════════════════
𐀪 Author: Rhuber
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 16:45:33 GMT
════════════════════════
⌗ Tags: #api #api_security #devportal #api_portal
Medium
5 min read
Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
20 views
Daily Writeups
⤷ Title: How Would You Prevent Unauthorized Users From Accessing Other Users’ Data?
════════════════════════
𐀪 Author: Gokulapriyan
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 02:19:19 GMT
════════════════════════
⌗ Tags: #security #api_security #prevention #unauthorized_access #rest_api_security
Medium
How Would You Prevent Unauthorized Users From Accessing Other Users’ Data?
One of the most important responsibilities of a backend application is protecting user data.
23 views
Daily Writeups
⤷ Title: Beyond OAuth Scopes: Fine-Grained Authorization with RAR in WSO2 Identity Server
════════════════════════
𐀪 Author: Sanjula Herath
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 07:36:38 GMT
════════════════════════
⌗ Tags: #oauth2 #wso2 #api_security #identity_and_access #open_banking
Medium
Beyond OAuth Scopes: Fine-Grained Authorization with RAR in WSO2 Identity Server
Build an OAuth flow that authorizes a specific action, amount, recipient, and API — not an ambiguous category of access.
12 views
Daily Writeups
⤷ Title: Defending from the Inside Out: A Complete Guide to Enterprise Security Architecture
════════════════════════
𐀪 Author: Bishaldhimal
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 06:16:44 GMT
════════════════════════
⌗ Tags: #on_premise_security #security_organization #network_security #cloud_security #api_security
Medium
Defending from the Inside Out: A Complete Guide to Enterprise Security Architecture
Cyber threats evolve every day, and protecting an organization takes more than a firewall and antivirus software. Modern security is built…
19 views
Daily Writeups
⤷ Title: The Third Time Isn’t a Coincidence: Inside the UAE’s 2026 Cyber Siege
════════════════════════
𐀪 Author: Prophaze
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 06:06:15 GMT
════════════════════════
⌗ Tags: #cyberattack #phishing #uae #critical_infrastructure #api_security
Medium
The Third Time Isn’t a Coincidence: Inside the UAE’s 2026 Cyber Siege
What a coordinated strike on aviation, energy, and education reveals about the new shape of critical-infrastructure warfare and why every…
33 views
Daily Writeups
⤷ Title: Shadow APIs: The Growing Security Risk Hidden Outside Your API Inventory
════════════════════════
𐀪 Author: Bhati Rahul
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 09:56:58 GMT
════════════════════════
⌗ Tags: #api_security_testing #shadow_api #api_security
Medium
Shadow APIs: The Growing Security Risk Hidden Outside Your API Inventory
In the fast-paced world of software development, there are many undocumented endpoints that are lost amid the pace of development. Shadow…
34 views