Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: A SaaS Pentest Isn’t Buyer-Ready Until Authorization Is Proven
════════════════════════
𐀪 Author: Pentest_Testing_Corp
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 10:59:42 GMT
════════════════════════
⌗ Tags: #api_security #access_control #b2b_saas #penetration_testing #saas_security
Medium
A SaaS Pentest Isn’t Buyer-Ready Until Authorization Is Proven
Enterprise security reviews care less about whether users can log in and more about whether tenants, roles, objects, exports, and…
12 views
Daily Writeups
⤷ Title: Testing the Authentication Boundary: A Case Study in Session and Identity Security
════════════════════════
𐀪 Author: Mdporschaa
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 10:14:30 GMT
════════════════════════
⌗ Tags: #authentication #jwt_authentication #identity_management #api_security #penetration_testing
Medium
Testing the Authentication Boundary: A Case Study in Session and Identity Security
The security properties I need to establish, the attack categories I test against, and the harness that makes it repeatable.
16 views
Daily Writeups
⤷ Title: How “just forward the request” turns into a surprisingly complicated job
════════════════════════
𐀪 Author: Gaurirai
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 09:57:24 GMT
════════════════════════
⌗ Tags: #jwt_authentication #reverse_proxy #api_security #ruby_on_rails #api_gateway
Medium
How “just forward the request” turns into a surprisingly complicated job
You send a request: Get /orders Authorization: Bearer eyfghj…..
38 views
Daily Writeups
⤷ Title: Lab Write-up: Information Disclosure on Debug Page
════════════════════════
𐀪 Author: Ayeshaaghafoor
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 13:42:50 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity_awareness #bug_bounty #api #cybersecurity
Medium
Lab Write-up: Information Disclosure on Debug Page
Objective
17 views
Daily Writeups
⤷ Title: The OWASP API Top 10, Translated Into Bugs You’ve Actually Written
════════════════════════
𐀪 Author: Daniel Valev
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #programming #api_security #software_engineering #fastapi #application_security
Medium
The OWASP API Top 10, Translated Into Bugs You’ve Actually Written
Your ORM will happily hand an attacker another customer’s row. It’s doing exactly what you asked.
17 views
Daily Writeups
⤷ Title: Lab Write-up: Information Disclosure in Error Messages
════════════════════════
𐀪 Author: Ayeshaaghafoor
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 13:40:52 GMT
════════════════════════
⌗ Tags: #cybersecurity_awareness #api #penetration_testing #web_development #cybersecurity
Medium
Lab Write-up: Information Disclosure in Error Messages
Objective
46 views
Daily Writeups
⤷ Title: How Unauthenticated Queries Exposed User PII and Privileged Accounts
════════════════════════
𐀪 Author: Sudheer
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 07:26:04 GMT
════════════════════════
⌗ Tags: #authorization #api_security #bug_bounty #authentication #web_security_testing
Medium
How Unauthenticated Queries Exposed User PII and Privileged Accounts
Unauthenticated API queries exposed sensitive user data and enabled enumeration of the application’s entire observed userbase.
16 views
Daily Writeups
⤷ Title: Hunting IDOR & BOLA in REST APIs: A Practical Authorization Testing Methodology
════════════════════════
𐀪 Author: Ishant
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 11:08:37 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #api_security
Medium
Hunting IDOR & BOLA in REST APIs: A Practical Authorization Testing Methodology
A method for detecting broken authorization in REST APIs is shown using the OWASP crAPI.
45 views
Daily Writeups
⤷ Title: 5 min read
════════════════════════
𐀪 Author: Rhuber
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 16:45:33 GMT
════════════════════════
⌗ Tags: #api #api_security #devportal #api_portal
Medium
5 min read
Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
33 views
Daily Writeups
⤷ Title: Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
════════════════════════
𐀪 Author: Rhuber
════════════════════════
ⴵ Time: Thu, 13 Aug 2026 16:45:33 GMT
════════════════════════
⌗ Tags: #api #api_security #devportal #api_portal
Medium
5 min read
Your API Portal’s Biggest Threat Isn’t Hackers — It’s Visibility Without Control
19 views