Daily Writeups – Telegram

Daily Writeups

@Daily_Writeups

3.49K subscribers

2 photos

128K links

Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner

Download Telegram

About

Blog

Apps

Platform

3.49K subscribers

🔖New Writeup❗️
———————————————
🗓Date: Mon, 17 Apr 2023 05:03:05 GMT
———————————————
✏️Title: Best Practices for a Secure Code Review: Identifying and Addressing Security Vulnerabilities in…
———————————————
📎Link: https://medium.com/p/2c5b25861a24
———————————————
Tags: #cybersecurity #application_security #secure_code_review #software_development #secure_coding

Best Practices for a Secure Code Review: Identifying and Addressing Security Vulnerabilities in Software Applications

Secure code review is an essential step in the software development process that aims to identify and address potential security…

7 views06:00

🔖New Writeup❗️
———————————————
🗓Date: Thu, 13 Jul 2023 20:52:56 GMT
———————————————
✏️Title: Finding DOM XSS in Javascript
———————————————
📎Link: https://medium.com/p/9b4258655ab4
———————————————
Tags: #dom_xss #code_review #javascript #secure_code_review #xss_vulnerability

Finding DOM XSS in Javascript

Hey Security folks, this article is for beginner so I will explain every possible single code.

8 views21:02

🔖New Writeup❗️
———————————————
🗓Date: Wed, 23 Aug 2023 09:45:36 GMT
———————————————
✏️Title: Secure code review process in 4 steps
———————————————
📎Link: https://medium.com/p/f9fc0485765e
———————————————
Tags: #application_security #secure_code_review

Secure code review process in 4 steps

How it seen by an application security engineer

20 views11:02

⤷ Title: Bug Bounty Hunting: Web Vulnerability (Secure Code Review)
════════════════════════
𐀪 Author: Muhammad Abdullah Niazi
════════════════════════
ⴵ Time: Fri, 14 Feb 2025 21:42:41 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #secure_code_review #bug_bounty_program #bug_bounty_hunter

Bug Bounty Hunting: Web Vulnerability (Secure Code Review)

A Guide for Developers and Security Professionals

32 views23:04

⤷ Title: Arbitrary File Write via Archive Extraction (Zip Slip)- OWASP Juiceshop #1
════════════════════════
𐀪 Author: DebianHat
════════════════════════
ⴵ Time: Mon, 31 Mar 2025 08:44:03 GMT
════════════════════════
⌗ Tags: #application_security #sast #vulnerability #secure_code_review #secure_coding

Arbitrary File Write via Archive Extraction (Zip Slip)- OWASP Juiceshop #1

Zip Slip is an another path traversal vulnerability that occurs when extracting ZIP (or other archive) files without properly validating…

25 views10:04

⤷ Title: ☕ How to Perform a Secure Code Review Without Losing Your Mind (or Developer Friends)
════════════════════════
𐀪 Author: UnpluggedSec
════════════════════════
ⴵ Time: Thu, 10 Apr 2025 19:54:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #secure_code_review #appsec #devsecops #application_security

☕ How to Perform a Secure Code Review Without Losing Your Mind (or Developer Friends)

By Ayman Abdul Kareem | Security Architecture | Senior Application Security Engineer | DevSecOps Advocate | chai-driven defender of cloud…

38 views20:50

⤷ Title: RoadMap: Source Code Analysis — White Box
════════════════════════
𐀪 Author: Shwajsophia
════════════════════════
ⴵ Time: Fri, 11 Jul 2025 21:03:30 GMT
════════════════════════
⌗ Tags: #secure_coding #penetration_testing #code_review #white_box_testing #secure_code_review

RoadMap: Source Code Analysis — White Box

Soooooo — here is a secure code analysis roadmap, it could be short, but probably is going to be long, so sorry not sorry :)

34 views23:05

⤷ Title: How can Windsurf/Cursor help you with your secure code review?
════════════════════════
𐀪 Author: Cristian
════════════════════════
ⴵ Time: Wed, 30 Jul 2025 19:08:59 GMT
════════════════════════
⌗ Tags: #cursor #secure_code_review #ai_agent #application_security #windsurf

How can Windsurf/Cursor help you with your secure code review?

Hello everyone, in this blog I want to talk about how editors with integrated AI features such as Windsurf / Cursor can help you analyze…

17 views21:04

⤷ Title: Manual Source Code Review in SAST – My Experience Uncovering Critical Vulnerabilities
════════════════════════
𐀪 Author: Saritamukkani
════════════════════════
ⴵ Time: Mon, 11 Aug 2025 07:32:57 GMT
════════════════════════
⌗ Tags: #secure_code_review #secure_coding #application_security #cybersecurity

Manual Source Code Review in SAST – My Experience Uncovering Critical Vulnerabilities

As a cybersecurity analyst specializing in Static Application Security Testing (SAST), I spend a lot of my time analyzing application source code for security weaknesses before the software is…

16 views08:04

⤷ Title: Building a secure AI tool with Lovable, Gemini API and Cloudflare Workers
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Mon, 22 Sep 2025 14:58:51 GMT
════════════════════════
⌗ Tags: #vibe_coding #secure_code_review #vibe_hacking #cybersecurity #secure_code

Building a secure AI tool with Lovable, Gemini API and Cloudflare Workers

This might be the easiest secure way to deploy an app within a day.

18 views16:04

⤷ Title: Pwning Vibecoded Apps
════════════════════════
𐀪 Author: Florian Walter
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 12:10:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #vibe_coding #application_security #secure_code_review

Pwning Vibecoded Apps

What to expect in this article: A case study showing how easy it often is to pwn vibecoded apps.

25 views14:04

⤷ Title: From Token to Takeover: Exploiting Weak HS256 Secrets (POC)
════════════════════════
𐀪 Author: Satheesh
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 07:09:15 GMT
════════════════════════
⌗ Tags: #secure_code_review #application_security #cybersecurity #jwt_exploitation #jwt_authentication

From Token to Takeover: Exploiting Weak HS256 Secrets (POC)

🔓 Cracking a Weak HS256 JWT: How I Forged a Token and Retrieved the Masterkey

27 views08:03

⤷ Title: CVE Hunting via Github Dorking
════════════════════════
𐀪 Author: Abhirup Konwar
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 13:55:42 GMT
════════════════════════
⌗ Tags: #cve #ethical_hacking #php_security #secure_code_review #programming

CVE Hunting via Github Dorking

Finding 0 days in PHP Open Source Code

19 views16:04

⤷ Title: Building a Real Python Security Project with Bandit (macOS Terminal Walkthrough)
════════════════════════
𐀪 Author: Priyanshu Manash
════════════════════════
ⴵ Time: Sun, 01 Feb 2026 13:59:28 GMT
════════════════════════
⌗ Tags: #xss_attack #sql_injection #vulnerability #secure_code_review #bandit

Building a Real Python Security Project with Bandit (macOS Terminal Walkthrough)

Static Application Security Testing (SAST) isn’t just theory. In this article, I’ll walk through building a real, hands-on Python security…

53 views16:05

⤷ Title: Finding 0 days using Codex
════════════════════════
𐀪 Author: Abhirup Konwar
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 03:54:22 GMT
════════════════════════
⌗ Tags: #xcode #openai_codex #chatgpt #hacking #secure_code_review

Finding 0 days using Codex

Can codex help you in secure code review ?

38 views06:03

⤷ Title: How to Find Real Vulnerabilities Using Source -> Flow -> Sink
════════════════════════
𐀪 Author: Suraj Vishwakarma
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 10:10:51 GMT
════════════════════════
⌗ Tags: #application_security #attack_chain #red_team #secure_code_review #sast

How to Find Real Vulnerabilities Using Source -> Flow -> Sink

There are several mental models worth building as a security engineer. This is one of the more practical ones — and one that’s often…

23 views11:04

⤷ Title: Remote Code Execution (RCE) from a Secure Code Review Perspective
════════════════════════
𐀪 Author: Aryah
════════════════════════
ⴵ Time: Sun, 17 May 2026 12:03:55 GMT
════════════════════════
⌗ Tags: #appsec #vulnerability #secure_code_review #rce

Remote Code Execution (RCE) from a Secure Code Review Perspective

I know It’s been a long time since I published anything related to secure code review.After taking a break, everything felt new again. Busy…

55 views13:04

⤷ Title: Can AI write secure code? I audited 50 AI-Generated snippets
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 10:41:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #secure_code_review #ai #infosec

Can AI write secure code? I audited 50 AI-Generated snippets

A real, hands-on audit — methodology, sources, and the actual code, broken down line by line.

6 views12:04