Daily Writeups
@Daily_Writeups
4.07K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.07K subscribers
Daily Writeups
⤷ Title: “Better Auth” Framework Alert: The Double-Slash Trick That Bypasses Security Controls
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:33:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #access control bypass #Better Auth #CVSS 8.6 #javascript #Path Normalization #Proxy Security #Rate Limit Evasion #rou3 #TypeScript #Web Security
Daily CyberSecurity
"Better Auth" Framework Alert: The Double-Slash Trick That Bypasses Security Controls
A normalization flaw in Better Auth's router allows attackers to bypass access controls and rate limits using simple double-slash URLs.
28 views
Daily Writeups
⤷ Title: Why API Gateways Are Critical for Securing Public APIs
════════════════════════
𐀪 Author: Charmaine Mangorima
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 19:09:59 GMT
════════════════════════
⌗ Tags: #api_gateway #kong_api_gateway #api #rate_limiting #api_security
Medium
Why API Gateways Are Critical for Securing Public APIs
APIs are the backbone of modern applications, enabling communication between mobile apps, web platforms and backend services. However, when…
45 views
Daily Writeups
⤷ Title: Rate Limiting & Throttling: What Developers Need to Know
════════════════════════
𐀪 Author: Hasan Chinthaka
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 04:31:12 GMT
════════════════════════
⌗ Tags: #rate_limiting #api_security #web_development #api #backend_development
Medium
Rate Limiting & Throttling: What Developers Need to Know
When building APIs or web services, controlling traffic is crucial to maintain performance, stability, and security.
6 views
Daily Writeups
⤷ Title: API SECURITY #3: Securing APIs in Real Systems
════════════════════════
𐀪 Author: Sarah Nzeshi
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 10:17:43 GMT
════════════════════════
⌗ Tags: #authorization #stripe #rate_limiting #api_security #authentication
Medium
API SECURITY #3: Securing APIs in Real Systems
If you’ve used an app that pulls weather data, lets you log in with Google, or processes payments without re-entering your card details…
53 views
Daily Writeups
⤷ Title: NestJS Rate Limiting Without Angry Users
════════════════════════
𐀪 Author: Bhagya Rana
════════════════════════
ⴵ Time: Sat, 07 Feb 2026 12:01:01 GMT
════════════════════════
⌗ Tags: #nestjs #backend_engineering #redis #api_security #rate_limiting
Medium
NestJS Rate Limiting Without Angry Users
Build abuse-resistant throttling in NestJS that stops bots, respects real humans, and avoids nuking everyone behind the same IP.
43 views
Daily Writeups
⤷ Title: How a User Enumeration Vulnerability was found in an OTP Authentication API
════════════════════════
𐀪 Author: Philip James
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 05:38:24 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #reconnaissance #rate_limit_bypass #enumeration #bugs
Medium
How a User Enumeration Vulnerability was found in an OTP Authentication API
Endpoint
55 views
Daily Writeups
⤷ Title: Escalating a Duplicate Finding to a CVSS 10.0: Chaining Logic and Session Flaws for Persistent ATO
════════════════════════
𐀪 Author: K4r33m
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 02:27:02 GMT
════════════════════════
⌗ Tags: #session_misconfiguration #ato #bug_bounty #account_takeover #rate_limiting
Medium
Escalating a Duplicate Finding to a CVSS 10.0: Chaining Logic and Session Flaws for Persistent ATO
In bug bounty and penetration testing, a “duplicate” finding is often viewed as a dead end. However, a duplicate bug is essentially a known…
18 views
Daily Writeups
⤷ Title: NestJS Rate Limiting Using @nestjs/throttler
════════════════════════
𐀪 Author: Ravi Mewada
════════════════════════
ⴵ Time: Fri, 29 May 2026 03:31:00 GMT
════════════════════════
⌗ Tags: #backend #rate_limiting #nodejs #api_security #nestjs
Medium
NestJS Rate Limiting Using @nestjs/throttler
When we build APIs, one thing that is really important, for security is rate limiting.
34 views
Daily Writeups
⤷ Title: Understanding Rate Limiting: A Deep Dive
════════════════════════
𐀪 Author: Dimuthu Harshamal
════════════════════════
ⴵ Time: Sun, 31 May 2026 11:46:55 GMT
════════════════════════
⌗ Tags: #api_security #java #spring_boot #api #rate_limiting
Medium
Understanding Rate Limiting: A Deep Dive
Background
35 views
Daily Writeups
⤷ Title: Codex Rate Limit Reset: OpenAI Introduces Flexible Limits
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 03:21:42 +0000
════════════════════════
⌗ Tags: #Technology #Claude Code #Codex #Developer Tools #OpenAI #Rate Limits
Daily CyberSecurity
Codex Rate Limit Reset: OpenAI Introduces Flexible Limits
OpenAI introduces a flexible Codex rate limit reset mechanism for premium subscribers to maximize quotas and counter Claude Code competition.
20 views
Daily Writeups
⤷ Title: Pentesting Rate Limits with Precision
════════════════════════
𐀪 Author: Cyril Shaji
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 18:31:01 GMT
════════════════════════
⌗ Tags: #burpsuite #penetration_testing #automation #ethical_hacking #rate_limiting
Medium
Pentesting Rate Limits with Precision
Testing for rate limits can be incredibly frustrating when your primary tool feels like it’s holding you back. Burp Suite Intruder is a…
17 views
Daily Writeups
⤷ Title: Bypassing Rate Limits: Known Techniques
════════════════════════
𐀪 Author: Pranav
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 05:26:04 GMT
════════════════════════
⌗ Tags: #web_application_security #vapt #rate_limiting #penetration_testing #bug_bounty
Medium
Bypassing Rate Limits: Known Techniques
SPYxPG
13 views
Daily Writeups
⤷ Title: Sliding Window Counter
════════════════════════
𐀪 Author: PINAR BİLDİRİCİ
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 20:48:51 GMT
════════════════════════
⌗ Tags: #rate_limiting #api_security #design_systems #sliding_window_counter
Medium
Sliding Window Counter
A Sliding Window Counter is a rate-limiting algorithm. It is used to control how many requests a user can send in a specific period of…
36 views
Daily Writeups
⤷ Title: Android 17 Rate Limiting Blocks PIN Guessing
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 10:48:38 +0000
════════════════════════
⌗ Tags: #Android #android #Android 17 #google #PIN Security #Rate Limiting
Daily CyberSecurity
Android 17 Rate Limiting Blocks PIN Guessing
Google’s Android engineering team has quietly rolled out one of the platform’s most meaningful security upgrades yet: a far tighter limit on how many times someone can guess your unloc…
25 views
Daily Writeups
⤷ Title: Security Controls Most Users Never Notice: Understanding API Rate Limiting
════════════════════════
𐀪 Author: Gertrude Abagale
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 12:23:58 GMT
════════════════════════
⌗ Tags: #security_control #api_security #information_security #rate_limiting #design_systems
Medium
Security Controls Most Users Never Notice: Understanding API Rate Limiting
When we think about cybersecurity, our minds often go to familiar concepts like encryption, passwords, firewalls, and multi-factor…
30 views
Daily Writeups
⤷ Title: Bypassing Rate Limits: A Comprehensive Guide to Common Techniques
════════════════════════
𐀪 Author: Chandan
════════════════════════
ⴵ Time: Sun, 06 Sep 2026 16:12:34 GMT
════════════════════════
⌗ Tags: #bypassing #bug_bounty #bug_hunting #ai_agent #rate_limiting
Medium
Bypassing Rate Limits: A Comprehensive Guide to Common Techniques
By Chandan Kumar
27 views
Daily Writeups
⤷ Title: Zero-Trust API Security: OAuth 2.1,
════════════════════════
𐀪 Author: Muhammad Tahir
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 05:28:25 GMT
════════════════════════
⌗ Tags: #rate_limiting #dpop #oauth2 #zero_trust #api_security
Medium
Zero-Trust API Security: OAuth 2.1, Distributed Rate Limiting, and Automated Threat Mitigation | MTDeveloper
Introduction & Industry Context
43 views
Daily Writeups
⤷ Title: What Is Rate Limiting?
════════════════════════
𐀪 Author: Gamika Punsisi
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 15:37:01 GMT
════════════════════════
⌗ Tags: #backend_development #api_security #web_development #rest_api #rate_limiting
Medium
What Is Rate Limiting?
Rate limiting is a security and performance technique used to control the number of requests a user, device, or application can send to a…
51 views
Daily Writeups
⤷ Title: The Real IP Isn’t the Real Caller
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 07:10:28 GMT
════════════════════════
⌗ Tags: #platform_engineering #api_security #api_gateway #rate_limiting #kong
Medium
The Real IP Isn’t the Real Caller
Closing the identity loop for partner rate limits in Kong behind F5
35 views
Daily Writeups
⤷ Title: Brute Force Attacks: A Practical Methodology for Detection, Testing, and Prevention
════════════════════════
𐀪 Author: N0aziXss
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 09:10:29 GMT
════════════════════════
⌗ Tags: #bug_bounty #rate_limiting #authentication #pentesting #brute_force
Medium
Brute Force Attacks: A Practical Methodology for Detection, Testing, and Prevention
Subtitle:
13 views