Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.49K subscribers

2 photos

128K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.49K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Sat, 29 Apr 2023 18:51:09 GMT
———————————————
✏️Title: Best API Penetration Testing Course in Delhi
———————————————
📎Link: https://medium.com/p/74eb0eb4426e
———————————————
Tags: #api_pentesting #penetration_testing #api_pentesting_course #api

Best API Penetration Testing Course in Delhi

Are you interested in learning more about API testing? Look no further than Pentagon Security’s API Testing Course in Delhi! This…

17 views20:00

🔖New Writeup❗️
———————————————
🗓Date: Fri, 30 Jun 2023 13:08:47 GMT
———————————————
✏️Title: Unmasking Broken Level Authorization | API Pentesting
———————————————
📎Link: https://medium.com/p/8add019db79
———————————————
Tags: #postman_testing #ethical_hacking #api_pentesting #security_research

Unmasking Broken Level Authorization | API Pentesting

Hello, my cyber-warriors!

10 views15:02

🔖New Writeup❗️
———————————————
🗓Date: Sun, 02 Jul 2023 13:39:24 GMT
———————————————
✏️Title: Unveiling Mass Assignment in VAPI | API Pentesting
———————————————
📎Link: https://medium.com/p/bf7272aea49a
———————————————
Tags: #api_pentesting #cybersecurity #security_research #owasp_api_security_top_10 #ethical_hacking

Unveiling Mass Assignment in VAPI | API Pentesting

Greetings, security researchers!

24 views15:02

🔖New Writeup❗️
———————————————
🗓Date: Thu, 17 Aug 2023 11:44:30 GMT
———————————————
✏️Title: “API Hacking” Part-2 | Enumeration
———————————————
📎Link: https://medium.com/p/587d0b4e2d3c
———————————————
Tags: #enumeration #api_pentesting #api_testing #hacking_apis #pentesting

“API Hacking” Part-2 | Enumeration

10 views14:02

⤷ Title: Server Side Request Forgery (SSRF) in APIs
════════════════════════
𐀪 Author: Prince Varghese
════════════════════════
ⴵ Time: Wed, 29 Jan 2025 05:27:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_pentesting #apihacking #pentesting

Server Side Request Forgery (SSRF) in APIs

Hello everyone, After completing the API penetration testing course from APIsec University, I practiced API testing skills on various…

41 views06:05

⤷ Title: # API Penetration Testing: Basics and Roadmap for Aspiring Security Professionals
════════════════════════
𐀪 Author: CrackBugbounthunter
════════════════════════
ⴵ Time: Thu, 30 Jan 2025 15:21:10 GMT
════════════════════════
⌗ Tags: #testing_tools #bug_bounty #api_pentesting

# API Penetration Testing: Basics and Roadmap for Aspiring Security Professionals

In today's interconnected world, APIs (Application Programming Interfaces) have become the backbone of modern software development. They enable seamless communication between different systems…

32 views16:03

⤷ Title: Performing API black-box pentesting through mobile app sniffing.
════════════════════════
𐀪 Author: Amos Akogbe
════════════════════════
ⴵ Time: Tue, 22 Apr 2025 18:20:03 GMT
════════════════════════
⌗ Tags: #api_pentesting #mobile_app_testing #frida #ethical_hacking

Performing API black-box pentesting through mobile app sniffing.

When I started working on my latest pentesting task, I faced a real challenge to get the grasp of the API, on which, I was supposed to work…

48 views20:05

⤷ Title: HackTheBox : Monitored
════════════════════════
𐀪 Author: 0liverFlow
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 15:39:03 GMT
════════════════════════
⌗ Tags: #sqli #hackthebox #monitored #api_pentesting #nagios_xi

HackTheBox : Monitored

Monitored is a great Linux machine that covers multiple interesting techniques from API pentesting to privilege escalation. To get an…

58 views16:05

⤷ Title: PCI DSS & API Security
════════════════════════
𐀪 Author: Usama Hanif
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 19:29:55 GMT
════════════════════════
⌗ Tags: #pci_dss #api_pentesting #api_compliance #api_security #rest_api

PCI DSS & API Security

APISEC University

45 views20:04

⤷ Title: How to solve the DVAPI’s Broken Authentication Lab
════════════════════════
𐀪 Author: R1punjay_Singh
════════════════════════
ⴵ Time: Fri, 14 Nov 2025 14:26:44 GMT
════════════════════════
⌗ Tags: #ethical_hacking #api_pentesting #cybersecurity #api

How to solve the DVAPI’s Broken Authentication Lab

What is Broken Authentication in API?

47 views16:04

⤷ Title: Improper Assets Management & Mass Assignment: Two API Bugs That Quietly Destroy Systems
════════════════════════
𐀪 Author: Mahmoudelshorpagy
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 22:42:10 GMT
════════════════════════
⌗ Tags: #api_pentesting #api_penetration_testing #cybersecurity #pentesting #penetration_testing

Improper Assets Management & Mass Assignment: Two API Bugs That Quietly Destroy Systems

APIs evolve fast. New versions, new features, new fixes. But what many teams forget is that old versions never truly disappear.

19 views00:04

⤷ Title: How I Performed Basic API Security Tests Using
Postman (Beginner Edition)
════════════════════════
𐀪 Author: Stella Obatoye
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 20:37:05 GMT
════════════════════════
⌗ Tags: #api_security_testing #postman #authentication #api_pentesting #api_security

How I Performed Basic API Security Tests Using
Postman (Beginner Edition)

In this article, I’ll be trying some security checks on the Vulnerable Application in Postman.

33 views22:04

⤷ Title: OWASP API Top 10 — Mass Assignment Explained Through a Practical Flask Lab
════════════════════════
𐀪 Author: 0xMiawChan
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:53:13 GMT
════════════════════════
⌗ Tags: #api_pentesting #cybersecurity #owasp_api_security_top_10 #ethical_hacking #pentesting

OWASP API Top 10 — Mass Assignment Explained Through a Practical Flask Lab

A practical lab aligned with OWASP API Top 10 to understand Mass Assignment risks

48 views06:04

⤷ Title: IDOR Vulnerability in Dictionary Endpoint — Arbitrary Deletion of User Items (€€€)
════════════════════════
𐀪 Author: Hasan Khan
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 12:56:51 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_hunting #bug_bounty_writeup #api_pentesting #bugbounty_tips

IDOR Vulnerability in Dictionary Endpoint — Arbitrary Deletion of User Items (€€€)

IDOR Vulnerability in Dictionary Endpoint — Arbitrary Deletion of User Items (€€€) Author: Hasan_Khan0x Reward: €€€ Program: Responsible Disclosure Bug Bounty Checklist Used …

36 views14:06

⤷ Title: How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology.
════════════════════════
𐀪 Author: Kipc-Sharon
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 01:04:18 GMT
════════════════════════
⌗ Tags: #api_security #api_pentesting #api_pen_testers_approach

How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology.

Why API Pen-Testing Is Different From Web App Testing

53 views03:04

⤷ Title: Hacking JSON Web Tokens: How Attackers Exploit API Authentication
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Thu, 28 May 2026 17:53:25 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_penetration_testing #api_attack #api_pentesting #json_web_token

Hacking JSON Web Tokens: How Attackers Exploit API Authentication

JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security feature into an attacker’s gateway

43 views19:03

⤷ Title: Hacking JSON Web Tokens: How Attackers Exploit API Authentication
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:15:40 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_penetration_testing #api_attack #api_pentesting #json_web_token

Hacking JSON Web Tokens: How Attackers Exploit API Authentication

JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security feature into an attacker’s gateway

16 views11:04

⤷ Title: The Quiet Killer in Grey Box Testing — Internal IP Leak → Path Traversal →DB Takeover → Outlook Pwn
════════════════════════
𐀪 Author: Mr_Curiosity
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 19:16:30 GMT
════════════════════════
⌗ Tags: #api_pentesting #web_hacking #pentest #hacking

The Quiet Killer in Grey Box Testing — Internal IP Leak → Path Traversal →DB Takeover → Outlook Pwn

Hy aLL !! Mr_Curi0sity here !!

11 views21:04