Daily Writeups
@Daily_Writeups
3.45K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.45K subscribers
Daily Writeups
⤷ Title: Building the Most Secure FastAPI Backend: A Comprehensive Security Architecture
════════════════════════
𐀪 Author: Mustafa Aljishi
════════════════════════
ⴵ Time: Wed, 01 Oct 2025 19:42:27 GMT
════════════════════════
⌗ Tags: #fastapi #cybersecurity #secure_coding #python #backend
Medium
Building the Most Secure FastAPI Backend: A Comprehensive Security Architecture
One of the best guides to create a secure and fast backend
20 views
Daily Writeups
⤷ Title: ️‍♂️ Bughunter MVP
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 17:10:05 GMT
════════════════════════
⌗ Tags: #docker #bug_bounty #open_source #cybersecurity #fastapi
Medium
🕵️‍♂️ Bughunter MVP
Minimal Docker-based bug hunting starter stack built with FastAPI and a worker process.  Designed for security researchers, ethical…
26 views
Daily Writeups
⤷ Title: ️‍♂️ How I Built Bug-hunter MVP — Minimal Docker Starter for Bug Bounty Hunters
════════════════════════
𐀪 Author: ghostyjoe
════════════════════════
ⴵ Time: Fri, 03 Oct 2025 12:37:59 GMT
════════════════════════
⌗ Tags: #docker #fastapi #bug_bounty #open_source #cybersecurity
Medium
🕵️‍♂️ How I Built Bug-hunter MVP — Minimal Docker Starter for Bug Bounty Hunters
Minimal Docker-based bug hunting starter stack built with FastAPI and a background worker process.  Designed for security researchers…
22 views
Daily Writeups
⤷ Title: Security Tests for FastAPI projects
════════════════════════
𐀪 Author: Cristian
════════════════════════
ⴵ Time: Fri, 03 Oct 2025 18:22:10 GMT
════════════════════════
⌗ Tags: #penetration_testing #fastapi #cybersecurity #security #python
Medium
Security Tests for FastAPI projects
Practical DevSecOps approach for testing FastAPI APIs 🛡️🔐
21 views
Daily Writeups
⤷ Title: 10 FastAPI Security Patterns for Near-Zero Latency
════════════════════════
𐀪 Author: Syntal
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 04:31:54 GMT
════════════════════════
⌗ Tags: #api_security #oauth2 #fastapi #python #jwt
Medium
10 FastAPI Security Patterns for Near-Zero Latency
Practical JWT/OAuth2 designs that keep your API safe without slowing it down.
53 views
Daily Writeups
⤷ Title: FastAPI Security Defaults You Shouldn’t Disable
════════════════════════
𐀪 Author: Codastra
════════════════════════
ⴵ Time: Thu, 09 Oct 2025 01:32:05 GMT
════════════════════════
⌗ Tags: #best_practices #fastapi #cors #oauth2 #api_security
Medium
FastAPI Security Defaults You Shouldn’t Disable
Keep the guardrails that quietly protect your APIs — validation, output schemas, safe CORS, and production-grade error handling.
34 views
Daily Writeups
⤷ Title: Top 5 FastAPI Auth Flows That Don’t Add Latency
════════════════════════
𐀪 Author: Bhagya Rana
════════════════════════
ⴵ Time: Sat, 11 Oct 2025 09:58:06 GMT
════════════════════════
⌗ Tags: #fastapi #tlm #python #oauth2 #api_security
Medium
Top 5 FastAPI Auth Flows That Don’t Add Latency
Practical, battle-tested patterns — mTLS, rotating keys, and stateless checks — that keep auth secure and your p99 tight.
53 views
Daily Writeups
⤷ Title: 10 FastAPI Auth Designs That Don’t Add Latency
════════════════════════
𐀪 Author: Nexumo
════════════════════════
ⴵ Time: Wed, 15 Oct 2025 19:32:17 GMT
════════════════════════
⌗ Tags: #oauth2 #api_security #fastapi #jwt #python
Medium
10 FastAPI Auth Designs That Don’t Add Latency
Practical JWT, OAuth2, and OPA patterns that keep your p99 tight without gutting security.
35 views
Daily Writeups
⤷ Title: Designing Secure APIs in 2025: Beyond JWTs and OAuth
════════════════════════
𐀪 Author: Harshavardhan Mamidipaka
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 16:01:00 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_architecture #api_security #fastapi #backend_development
Medium
🔒 Designing Secure APIs in 2025: Beyond JWTs and OAuth
⚡ Hook
53 views
Daily Writeups
⤷ Title: FastAPI in Prod: Auth, Limits, Zero-Downtime
════════════════════════
𐀪 Author: Modexa
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 01:32:26 GMT
════════════════════════
⌗ Tags: #api_security #devops #scalability #fastapi #python
Medium
FastAPI in Prod: Auth, Limits, Zero-Downtime
A practical playbook to ship FastAPI services that stay secure, polite to your neighbors, and deploy without waking the on-call.
19 views
Daily Writeups
⤷ Title: How To Build A Beginner-Friendly Movie Booking System With FastAPI
════════════════════════
𐀪 Author: Thevintagecoder
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 07:00:05 GMT
════════════════════════
⌗ Tags: #beginners_guide #sql_injection #fastapi_tutorials #technology #python
Medium
How To Build A Beginner-Friendly Movie Booking System With FastAPI
FastAPI is a fast and easy Python framework for building APIs. It’s as fast as Node.js and Go, with built-in support for data validation…
41 views
Daily Writeups
⤷ Title: FastAPI + OpenID Connect with PKCE: Secure Mobile & CLI Auth Without SDK Hell
════════════════════════
𐀪 Author: Yamishift
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 01:32:13 GMT
════════════════════════
⌗ Tags: #fastapi #oauth2 #openid #python #api_security
Medium
FastAPI + OpenID Connect with PKCE: Secure Mobile & CLI Auth Without SDK Hell
Use standards, not black-box SDKs, to give your apps and CLIs clean, secure single sign-on.
30 views
Daily Writeups
⤷ Title: SQL Seguro en Python para APIs FastAPI (SQLite Edition) [en español ]
════════════════════════
𐀪 Author: Gero Zayas
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 07:35:49 GMT
════════════════════════
⌗ Tags: #fastapi #sql_injection #sqlite #sqlite3 #python
Medium
SQL Seguro en Python para APIs FastAPI (SQLite Edition) [en español 🇪🇸]
Si desarrollas APIs CRUD con FastAPI y todavía construyes SQL con f"SELECT ... {value}", no es una cuestión de estilo: es un bug de…
49 views
Daily Writeups
⤷ Title: FastAPI Security in the LLM Era: Prompt Injection for APIs, Tool Abuse, and the Guardrails That…
════════════════════════
𐀪 Author: Nikulsinh Rajput
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:31:01 GMT
════════════════════════
⌗ Tags: #fastapi #llm #prompt_injection #api_security #ai_engineering
Medium
FastAPI Security in the LLM Era: Prompt Injection for APIs, Tool Abuse, and the Guardrails That Actually Work
A practical playbook for shipping LLM-powered FastAPI services without turning “helpful automation” into an attacker-controlled remote.
44 views
Daily Writeups
⤷ Title: Building an API Security Lab as a Cybersecurity Engineer (Without Pretending It’s Production)
════════════════════════
𐀪 Author: 'Tomiwa Adisa
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 15:59:24 GMT
════════════════════════
⌗ Tags: #api_security #cybersecurity #devsecops #fastapi #threat_modeling
Medium
Building an API Security Lab as a Cybersecurity Engineer (Without Pretending It’s Production)
Why I started with threat modeling and CI security gates before writing “interesting” vulnerable endpoints
58 views
Daily Writeups
⤷ Title: Critical SQL Injection Vulnerability Found in ‘ormar’ Python Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 00:00:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AppSec #CVE_2026_26198 #database security #FastAPI #infosec #ormar #Patch Alert #Python Security #sql injection #SQLalchemy #Vulnerability
Daily CyberSecurity
Critical SQL Injection Vulnerability Found in 'ormar' Python Library
Critical SQL injection flaw (CVE-2026-26198) in ormar Python ORM allows unauthenticated attackers to leak entire databases. Update to version 0.23.0 immediately!
24 views
Daily Writeups
⤷ Title: 7 API Security Mistakes I’ve Seen in Almost Every Python Backend
════════════════════════
𐀪 Author: Anas Issath
════════════════════════
ⴵ Time: Wed, 06 May 2026 16:45:24 GMT
════════════════════════
⌗ Tags: #backend_development #django #api_security #fastapi #owasp
Medium
7 API Security Mistakes I’ve Seen in Almost Every Python Backend
Your API works. An attacker just needs it to work differently once.
45 views
Daily Writeups
⤷ Title: Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 May 2026 01:45:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ChromaDB #CVE_2026_45829 #Cyber Security #FastAPI #HiddenLayer #Hugging Face #infosec #Machine Learning Security #Pre_Authentication RCE #trust_remote_code #Vector Database
Daily CyberSecurity
Unpatched CVSS 10 Alert: ChromaDB Python Server Grants Pre-Auth RCE via Malicious Hugging Face Models
Unpatched CVSS 10 flaw (CVE-2026-45829) in ChromaDB allows unauthenticated remote code execution via Hugging Face models. Isolate your servers now!
18 views
Daily Writeups
⤷ Title: The Backend Engineer’s Guide to Broken Object Level Authorization
════════════════════════
𐀪 Author: Hafiq Iqmal
════════════════════════
ⴵ Time: Fri, 22 May 2026 21:01:00 GMT
════════════════════════
⌗ Tags: #api_security #fastapi #laravel #backend #security
Medium
The Backend Engineer’s Guide to Broken Object Level Authorization
BOLA is OWASP’s number one API risk. Your authentication middleware does not stop it. Here is the code pattern that does.
26 views
Daily Writeups
⤷ Title: LiteLLM Authentication Bypass via Host Header Injection (CVE-2026-49468)
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 01:35:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Gateway #API security #Authentication Bypass #CVE_2026_49468 #CWE_290 #FastAPI #host header injection #LiteLLM #LLM Proxy #Starlette
Daily CyberSecurity
LiteLLM Authentication Bypass via Host Header Injection (CVE-2026-49468)
A critical LiteLLM authentication bypass (CVE-2026-49468) lets crafted Host Header Injection reach protected AI Gateway routes. Patch in 1.84.0.
20 views