Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: apidetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 06 Feb 2025 01:42:35 +0000
════════════════════════
⌗ Tags: #Web AppSec #APIDetector #Swagger endpoints
Penetration Testing Tools
apidetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains
APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains
26 views
Daily Writeups
⤷ Title: OAuth and Swagger in Modern Web Applications
════════════════════════
𐀪 Author: Herbert Moroni Gois
════════════════════════
ⴵ Time: Thu, 06 Mar 2025 13:42:58 GMT
════════════════════════
⌗ Tags: #expressjs #oauth2 #firebaseauthentication #swagger #api_security
Medium
OAuth and Swagger in Modern Web Applications
Picture this: You’ve just built a robust API that provides valuable services and data. Your API works perfectly and passes all tests, but…
65 views
Daily Writeups
⤷ Title: Hacking Swagger UI - 101
════════════════════════
𐀪 Author: RivuDon
════════════════════════
ⴵ Time: Thu, 13 Mar 2025 07:25:26 GMT
════════════════════════
⌗ Tags: #swagger_ui #bug_bounty #infosec #bug_bounty_tips #bug_bounty_writeup
Medium
Hacking Swagger UI - 101
A Hands-on practical guide to earning rewards.
35 views
Daily Writeups
⤷ Title: Exposing Shadow APIs: The Hidden Attack Surface in Modern Web Apps
════════════════════════
𐀪 Author: tezp
════════════════════════
ⴵ Time: Thu, 08 May 2025 16:53:42 GMT
════════════════════════
⌗ Tags: #owasp #api #api_documentation #swagger #bug_bounty
Medium
Exposing Shadow APIs: The Hidden Attack Surface in Modern Web Apps
“You can’t protect what you don’t know exists.” — A golden rule in cybersecurity, and the core reason shadow APIs are so dangerous.
12 views
Daily Writeups
⤷ Title: Geliştirici Hatalarıyla Zafiyet Bulma: Açıkta Kalan Debug Paneller, Swagger UI ve .git Sızıntıları
════════════════════════
𐀪 Author: Onur Civan
════════════════════════
ⴵ Time: Tue, 03 Jun 2025 11:51:10 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #swagger #hacking #git
Medium
Geliştirici Hatalarıyla Zafiyet Bulma: Açıkta Kalan Debug Paneller, Swagger UI ve .git Sızıntıları
Modern web uygulamarında geliştiricilerin hayatlarını kolaylaştırmak için geliştirilen bazı araçlar, yanlış konfigürasyon ve unutulan…
15 views
Daily Writeups
⤷ Title: Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties
════════════════════════
𐀪 Author: TSxNINJA
════════════════════════
ⴵ Time: Sun, 29 Jun 2025 05:36:33 GMT
════════════════════════
⌗ Tags: #infosec #bounties #cybersecurity #swagger #bug_bounty
Medium
Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties
जय श्री राम 🚩
18 views
Daily Writeups
⤷ Title: We Thought Swagger Was Safe — 7 Traps That Nearly Exposed Our API
════════════════════════
𐀪 Author: Serxan Hamzayev
════════════════════════
ⴵ Time: Wed, 02 Jul 2025 08:40:39 GMT
════════════════════════
⌗ Tags: #api_security #swagger #spring_boot #java #backend_development
Medium
We Thought Swagger Was Safe — 7 Traps That Nearly Exposed Our API
“We only use Swagger for development — it’s not dangerous.”  That’s what we believed… until we discovered that Swagger was quietly…
65 views
Daily Writeups
⤷ Title: How I Tricked a Swagger UI into Showing a Fake Login Page
════════════════════════
𐀪 Author: Shafayat Ahmed Alif
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 06:44:48 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #swagger_ui #bug_bounty_tips #cybersecurity
Medium
How I Tricked a Swagger UI into Showing a Fake Login Page
Hey, bug hunters and tech nerds! So, I was recently digging into a web app for a bug bounty program, and I stumbled onto something wild…
26 views
Daily Writeups
⤷ Title: Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties
════════════════════════
𐀪 Author: TSxNINJA
════════════════════════
ⴵ Time: Fri, 01 Aug 2025 04:10:45 GMT
════════════════════════
⌗ Tags: #infosec #bounties #cybersecurity #swagger #bug_bounty
Medium
Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties
जय श्री राम 🚩
18 views
Daily Writeups
⤷ Title: How Swagger UI Can Accidentally Expose Your API
════════════════════════
𐀪 Author: Ibtissam hammadi
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 15:22:20 GMT
════════════════════════
⌗ Tags: #swagger #api_security #cybersecurity #web_security #bug_bounty
Medium
How Swagger UI Can Accidentally Expose Your API
I’ve spent a considerable amount of time examining how APIs are built and documented. Again and again, one of the most common surprises I…
24 views
Daily Writeups
⤷ Title: How I Hunt for Swagger UI on Real Targets (A Practical Guide for Bug Bounty Hunters)
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Sat, 20 Dec 2025 14:41:41 GMT
════════════════════════
⌗ Tags: #swagger_ui #bugbounty_tips #bugbounty_writeup #cybersecurity #bug_bounty
Medium
🔍 How I Hunt for Swagger UI on Real Targets (A Practical Guide for Bug Bounty Hunters)
Yesterday, we talked about what Swagger UI is — that clean little interface that shows all the API endpoints and lets you hit “Try it out”…
24 views
Daily Writeups
⤷ Title: Bug Bounty Masterclass: How a Forgotten API Exposed Thousands of Passengers
════════════════════════
𐀪 Author: Jared Douville
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 06:55:25 GMT
════════════════════════
⌗ Tags: #api #hacking #bug_bounty_masterclass #hackerone #swagger
Medium
Bug Bounty Masterclass: How a Forgotten API Exposed Thousands of Passengers
A Bug Bounty Masterclass Walkthrough
13 views
Daily Writeups
⤷ Title: How to Hack Swagger UI Complete Guide.
════════════════════════
𐀪 Author: RivuDon
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 15:04:11 GMT
════════════════════════
⌗ Tags: #swagger #bug_bounty_writeup #bug_bounty_hunter #bug_bounty_tips #bug_bounty
Medium
How to Hack Swagger UI Complete Guide.
Earn rewards using this simple method.
25 views
Daily Writeups
⤷ Title: How to Hack Swagger UI Complete Guide.
════════════════════════
𐀪 Author: RivuDon
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 15:04:10 GMT
════════════════════════
⌗ Tags: #swagger #bug_bounty_writeup #bug_bounty_hunter #bug_bounty_tips #bug_bounty
Medium
How to Hack Swagger UI Complete Guide.
Earn rewards using this simple method.
13 views
Daily Writeups
⤷ Title: From Swagger to Shell: Turning a Misconfigured configUrl into a $400 RXSS Bounty
════════════════════════
𐀪 Author: dr34m14
════════════════════════
ⴵ Time: Sun, 01 Mar 2026 12:05:32 GMT
════════════════════════
⌗ Tags: #swagger #hackerone #bug_bounty #bugbounty_writeup #xss_attack
Medium
From Swagger to Shell: Turning a Misconfigured configUrl into a $400 RXSS Bounty
A practical story of how automated recon, historical URL mining, and careful testing led to a Medium-severity Reflected XSS — responsibly…
57 views
Daily Writeups
⤷ Title: Securing Swagger, Scalar, and Health Endpoints in ASP.NET
════════════════════════
𐀪 Author: Mahmood Alsarraj
════════════════════════
ⴵ Time: Sun, 10 May 2026 17:05:16 GMT
════════════════════════
⌗ Tags: #api_security #security #dotnet #aspnetcore #swagger
Medium
Securing Swagger, Scalar, and Health Endpoints in ASP.NET
🚨 Your API Might Be Secure… But Your Swagger UI Isn’t
31 views