Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Running OWASP Juice Shop on Your Free Google VPS (Cloud Shell) Using Docker
════════════════════════
𐀪 Author: AbdelRhman_Sabry
════════════════════════
ⴵ Time: Sat, 08 Nov 2025 10:58:13 GMT
════════════════════════
⌗ Tags: #owasp #api_testing #docker #cybersecurity #google_cloud_platform
Medium
Running OWASP Juice Shop on Your Free Google VPS (Cloud Shell) Using Docker
بِسْم اللَّه الرَّحْمن الرَّحِيم . . اللَّهمَّ صَلِّ وَسلَّم وبارك على نَبِينَا مُحمَّد
25 views
Daily Writeups
⤷ Title: My First Week in API Security: Lessons, Labs, and Learning the Hard Truths About APIs
════════════════════════
𐀪 Author: Maryblessing
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 17:03:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #api_testing #career_development #tech_journey
Medium
My First Week in API Security: Lessons, Labs, and Learning the Hard Truths About APIs
How I completed the APIsec University Fundamentals course, earned my first badge, and performed my first real API security review.
5 views
Daily Writeups
⤷ Title: API Security Testing With Postman & OWASP Zap — A quick walkthrough on windows
════════════════════════
𐀪 Author: Ressa_agustika
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 08:04:07 GMT
════════════════════════
⌗ Tags: #owasp_top_10 #api_testing #postman #api_security #owaspzap
Medium
API Security Testing With Postman & OWASP Zap — A quick walkthrough on windows
📘 Pendahuluan (Gambaran Umum)
34 views
Daily Writeups
⤷ Title: Lightning Strike: Testing Salesforce Security with the Auraditor Extension
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:12:16 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Apex #API Testing #AppSec #Aura Framework #Auraditor #Burp Suite #IDOR #LWC #Penetration Testing #Salesforce Lightning #Salesforce Security #Security Audit
Penetration Testing Tools
Lightning Strike: Testing Salesforce Security with the Auraditor Extension
Auraditor for Burp Suite is the ultimate tool for Salesforce Lightning security audits, featuring Aura action editing and LWC endpoint discovery.
23 views
Daily Writeups
⤷ Title: IDOR Vulnerability in Campaign Workflows – Accessing Archived Campaigns of Any User 150$
════════════════════════
𐀪 Author: Hasan Khan
════════════════════════
ⴵ Time: Sun, 01 Feb 2026 18:36:22 GMT
════════════════════════
⌗ Tags: #api_testing #bug_bounty_tips #bugbounty_writeup #bug_bounty #idor_vulnerability
Medium
IDOR Vulnerability in Campaign Workflows – Accessing Archived Campaigns of Any User 150$
📌 Introduction
44 views
Daily Writeups
⤷ Title: What Learning API Security Taught Me About Building Systems for the Real World
════════════════════════
𐀪 Author: Gift Afortu
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 10:48:17 GMT
════════════════════════
⌗ Tags: #api_development #api #api_security #api_integration #api_testing
Medium
What Learning API Security Taught Me About Building Systems for the Real World
When I started learning API security, I saw APIs mainly as functional interfaces, a way for applications to talk to each other. My focus…
18 views
Daily Writeups
⤷ Title: Your API Tests Are Lying to You, The Schema Drift Problem Nobody Talks About
════════════════════════
𐀪 Author: tanvi mittal
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 15:30:04 GMT
════════════════════════
⌗ Tags: #software_engineering #software_testing #api #penetration_testing #api_testing
Medium
Your API Tests Are Lying to You, The Schema Drift Problem Nobody Talks About
Photo by Markus Spiske on Unsplash
18 views
Daily Writeups
⤷ Title: Thinking Like an Attacker: How SQL Injection Breaks API Authentication
════════════════════════
𐀪 Author: Joyatee Datta
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 14:39:24 GMT
════════════════════════
⌗ Tags: #api_testing #sql #api #security #sql_injection
Medium
Thinking Like an Attacker: How SQL Injection Breaks API Authentication
Modern applications rely heavily on APIs for tasks like authentication, data exchange, and system integration. However, when input…
35 views
Daily Writeups
⤷ Title: How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
════════════════════════
𐀪 Author: Peace Dennis
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 10:20:16 GMT
════════════════════════
⌗ Tags: #api_penetration_testing #crapi #burpsuite #api_testing #penetration_testing
Medium
How API Pen-Testers Approach Systems: Tools, Mindset, and Methodology
When most people think about penetration testing, they imagine someone aggressively firing payloads at a system until something breaks.
13 views
Daily Writeups
⤷ Title: API TESTING
════════════════════════
𐀪 Author: Abdulnafayk
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 05:59:17 GMT
════════════════════════
⌗ Tags: #red_team #cybersecurity #penetration_testing #vulnerability_management #api_testing
Medium
API TESTING
So, what is an API?
6 views
Daily Writeups
⤷ Title: We’re Testing API Security Wrong, Data from 1.4 Million Tests
════════════════════════
𐀪 Author: Akshat Virmani
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 09:01:56 GMT
════════════════════════
⌗ Tags: #owasp #api #api_testing #software_testing #api_security
Medium
We’re Testing API Security Wrong, Data from 1.4 Million Tests
I’ve read enough security reports to know how they usually go. Big numbers, familiar vulnerabilities and lightly repackaged advice.
52 views
Daily Writeups
⤷ Title: Why BOLA is the #1 Threat and How to Automate the “Token Swap” with RoleRival
════════════════════════
𐀪 Author: Role Rival
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 12:07:49 GMT
════════════════════════
⌗ Tags: #idor #api_security #api_testing #owasp_api_security_top_10 #bola
Medium
Why BOLA is the #1 Threat and How to Automate the “Token Swap” with RoleRival
In the world of API security, one vulnerability consistently sits at the top of the OWASP Top 10 list: BOLA (Broken Object Level…
34 views
Daily Writeups
⤷ Title: Understanding BOLA — The #1 API Security Risk You Can’t Ignore
════════════════════════
𐀪 Author: Sana Jalil
════════════════════════
ⴵ Time: Sat, 09 May 2026 13:24:36 GMT
════════════════════════
⌗ Tags: #owasp_api_top_10 #bola #api_testing #bug_bounty #api_penetration_testing
Medium
Understanding BOLA — The #1 API Security Risk You Can’t Ignore
Welcome back to my API pentesting series! In this third blog, we’re diving into BOLA (Broken Object Level Authorization) — the #1 API…
39 views
Daily Writeups
⤷ Title: API Pentesting Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 28 May 2026 17:10:59 GMT
════════════════════════
⌗ Tags: #tryhackme_writeup #tryhackme #api_testing #penetration_testing #tryhackme_walkthrough
Medium
API Pentesting Walkthrough Notes | TryHackMe
Chaining API weaknesses to gain deeper access and expose data
14 views
Daily Writeups
⤷ Title: Lab 1#: Exploiting an API endpoint using documentation | Api Testing
════════════════════════
𐀪 Author: mohamed
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 10:54:51 GMT
════════════════════════
⌗ Tags: #api_testing #penetration_testing #bug_bounty #cybersecurity #portswigger_academy_labs
Medium
Lab 1#: Exploiting an API endpoint using documentation | Api Testing
Hello readers! I’m Mohamed Reda, and today we will walk through how to solve the first lab in PortSwigger’s API testing academy…
13 views
Daily Writeups
⤷ Title: How to Create an APISEC University Account: A Complete Step-by-Step Guide
════════════════════════
𐀪 Author: Neion Chowdhury
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 17:04:15 GMT
════════════════════════
⌗ Tags: #penetration_testing #infosec #api_testing #cybersecurity #api_security
Medium
How to Create an APISEC University Account: A Complete Step-by-Step Guide
Introduction
19 views
Daily Writeups
⤷ Title: You’ve Been Using APIs Your Entire Life — Now Let’s Learn How to Break Them
════════════════════════
𐀪 Author: Jijo Shibu
════════════════════════
ⴵ Time: Fri, 05 Jun 2026 07:50:36 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #api #api_testing #api_security
Medium
You’ve Been Using APIs Your Entire Life — Now Let’s Learn How to Break Them
A beginner’s guide to API testing with zero assumed knowledge
37 views
Daily Writeups
⤷ Title: Accessing Private GraphQL Posts — Lab Walkthrough — Portswigger
════════════════════════
𐀪 Author: Cybernerddd
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 19:48:44 GMT
════════════════════════
⌗ Tags: #cybernerddd #cybersecurity #graphql #hacking #api_testing
Medium
Accessing Private GraphQL Posts — Lab Walkthrough — Portswigger
In this lab from PortSwigger’s Web Security Academy, the goal was simple: find the hidden private blog post and extract its secret…
14 views
Daily Writeups
⤷ Title: From Public Key to Admin Access: An RS256-to-HS256 JWT Confusion Attack on crAPI
════════════════════════
𐀪 Author: David Banjo
════════════════════════
ⴵ Time: Sun, 12 Jul 2026 00:38:07 GMT
════════════════════════
⌗ Tags: #api_testing #api_security #cybersecurity #api #crapi
Medium
From Public Key to Admin Access: An RS256-to-HS256 JWT Confusion Attack on crAPI
Part 2 of a 2-part series on JWT attacks against crAPI — [catch up on Part 1 here]
38 views
Daily Writeups
⤷ Title: Broken Authentication: Insufficient Session Invalidation on Password Change
════════════════════════
𐀪 Author: Liban Abdisalan
════════════════════════
ⴵ Time: Wed, 15 Jul 2026 20:04:33 GMT
════════════════════════
⌗ Tags: #ethical_hacking #api_testing #cybersecurity #mobile_testing #web_penetration_testing
Medium
Broken Authentication: Insufficient Session Invalidation on Password Change
Author: LibanTheHckr63
25 views