Bug bounty writeups → copy-paste testing checklists
Open the live UI
·
SecurityCipher
·
Security Checklists
Real hunters publish writeups every day. This repo turns those findings into short, actionable checklist cards you can reuse on your next in-scope target.
Each card has a quick test, step-by-step checks, commands when available, tools, and a link back to the original writeup.
→ securitycipher.com/writeup-checklists
Search, filter by category, expand a card, copy the markdown.
Live Writeup Explorer on SecurityCipher - 349 cards, search + category filters, steps and commands side by side.
| Feature | What it does |
|---|---|
| Search | Find cards by vuln class, title, author, or tags |
| Category filters | Narrow to IDOR, XSS, SSRF, RCE, auth, and more |
| Unread / Favorites | Personal queue saved in your browser |
| Split view | List on the left, full checklist on the right |
| Use case + steps | Quick test intent, then numbered reproduction steps |
| Commands | Copy request / payload snippets when the writeup had them |
| Original writeup | One click back to the source post |
| GitHub-backed | Cards ship from this repo (index/catalog.json + Markdown bodies) |
| Checklist cards | 349 |
| Categories | 30 |
| Last updated | 26 Aug 2026 |
| Format | One Markdown file per card |
| Live UI | securitycipher.com/writeup-checklists |
Growing as new writeups are curated. Expect this number to keep climbing.
checklists/
broken-access-control/
<id>.md ← one checklist card
authentication/
<id>.md
...
docs/
writeup-checklists-ui.png ← live UI screenshot
index/
catalog.json ← all card summaries (for the live UI)
categories/ ← per-category summaries
manifest.json ← totals + category list
- Source of truth: Markdown files under
checklists/ - Each file: frontmatter (title, author, tags, quick test) + steps + commands
- Indexes: lightweight JSON for search/UI - not a dump of full article text
Included
- Practical test steps from public writeups
- Commands / request snippets when the writeup has them
- Author credit + link to the original post
Not included
- Full Medium article text
- Paywalled content
- Junk / journey posts with no actionable test
For authorized testing only (bug bounty / pentest scope).
- Live Writeup Checklists UI
- Daily Bug Bounty Writeups
- Interactive Security Checklists
- security-checklists on GitHub
MIT for the repo tooling/layout. Derived checklist wording links back to original authors - we do not republish full writeups.
Want a card fixed or removed? Open an issue.