Daily Writeups
@Daily_Writeups
3.8K subscribers
4 photos
133K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.8K subscribers
Daily Writeups
⤷ Title: Critical .NET Flaw (CVE-2025-55315) in QNAP: NAS Backup Utility Vulnerable to Credential Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 04:16:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASP.NET #cybersecurity #http_request_smuggling #Microsoft #NetBak #QNAP
Daily CyberSecurity
Critical .NET Flaw (CVE-2025-55315) in QNAP: NAS Backup Utility Vulnerable to Credential Theft
QNAP warns its NetBak PC Agent users to patch a critical ASP.NET Core flaw (CVSS 9.8) that allows attackers to hijack credentials via HTTP request smuggling.
39 views
Daily Writeups
⤷ Title: HTTP REQUEST METHODS
════════════════════════
𐀪 Author: Jei Ess
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 07:37:32 GMT
════════════════════════
⌗ Tags: #web_development #cybersecurity #technology #http_request #web
Medium
HTTP REQUEST METHODS
Ahoy fellow hunters🏹,
16 views
Daily Writeups
⤷ Title: Ghost HTTP Methods: How HTTP Verb Mutation Bypasses Modern WAFs across Middleware Layers
════════════════════════
𐀪 Author: Pratik Dahal
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 20:44:43 GMT
════════════════════════
⌗ Tags: #http_request #web_application_security #security_research #bug_bounty #middleware
Medium
Ghost HTTP Methods: How HTTP Verb Mutation Bypasses Modern WAFs across Middleware Layers
Introduction
34 views
Daily Writeups
⤷ Title: pwncollege: Talking Web
════════════════════════
𐀪 Author: Sourav Bose
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 15:34:33 GMT
════════════════════════
⌗ Tags: #curl #networking #hacking #python_request #http_request
Medium
pwncollege: Talking Web
pwncollege Talking Web full writeup
11 views
Daily Writeups
⤷ Title: Using Wireshark to Examine HTTP and HTTPS Traffic
════════════════════════
𐀪 Author: Omar Hamed
════════════════════════
ⴵ Time: Sat, 01 Nov 2025 15:18:27 GMT
════════════════════════
⌗ Tags: #tcpdump #https #cybersecurity #http_request #wireshark
Medium
Using Wireshark to Examine HTTP and HTTPS Traffic
By: Omar Mohammad Hamed  Lab: 10.6.7 — Cisco Networking Academy
11 views
Daily Writeups
⤷ Title: Understanding HTTP: The Backbone of the Web
════════════════════════
𐀪 Author: Arfi Tutorials
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 16:24:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #http_request #cybersecurity #https
Medium
Understanding HTTP: The Backbone of the Web
Hello everyone! My name is Arfat Khan, and I run a YouTube channel called Arfi Tutorials. I am a bug bounty hunter, penetration tester, and…
11 views
Daily Writeups
⤷ Title: HTB — Web Requests Notlarım
════════════════════════
𐀪 Author: Songül Kızılay
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 13:22:55 GMT
════════════════════════
⌗ Tags: #curl #cybersecurity #http_request #https #htb
Medium
HTB — Web Requests Notlarım
HyperText Transfer Protocol (HTTP)
19 views
Daily Writeups
⤷ Title: Room 111: What 80/tcp Open HTTP Really Means for Your Network
════════════════════════
𐀪 Author: blackXmask
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 18:35:06 GMT
════════════════════════
⌗ Tags: #https #network_security #testing #http_request #cybersecurity
Medium
Room 111: What 80/tcp Open HTTP Really Means for Your Network
Lesson 01: Introduction to HTTP (Foundation of Web Communication) Lesson 02: Understanding HTTP Requests (Methods, URLs, & Parameters)…
13 views
Daily Writeups
⤷ Title: I Couldn’t Find the Tool I Needed for Web Security Testing — So I Built It
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 16:26:26 GMT
════════════════════════
⌗ Tags: #chrome_extension #web_security #penetration_testing #http_request #bug_bounty
Medium
I Couldn’t Find the Tool I Needed for Web Security Testing — So I Built It
What if the most useful parts of Burp lived alongside Chrome — fast, focused, and always available?
58 views
Daily Writeups
⤷ Title: The invisible Splinter: How a Hidden Node.js Flaw Bypasses 160 Million Weekly Security Guards
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 07:18:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #ClientRequest #CVE_2018_12116 #HackerOne #HTTP request splitting #http_proxy_middleware #Node.js #r3verii #superagent #Tech News 2026 #TOCTOU #Vulnerability Research #web security
Penetration Testing Tools
The invisible Splinter: How a Hidden Node.js Flaw Bypasses 160 Million Weekly Security Guards
Within the Node.js ecosystem, a vulnerability has been unearthed pertaining to the foundational logic of the HTTP client,
21 views
Daily Writeups
⤷ Title: Response queue poisoning via H2.TE request smuggling
════════════════════════
𐀪 Author: Ⓥ
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 12:03:46 GMT
════════════════════════
⌗ Tags: #http_request_smuggling #vulnerability #burpsuite #penetration_testing #cybersecurity
Medium
Response queue poisoning via H2.TE request smuggling
This lab is vulnerable to request smuggling due to the front-end server downgrading HTTP/2 requests even when they contain an ambiguous…
18 views
Daily Writeups
⤷ Title: Critical Request Smuggling & Cache Flaws Discovered in Cloudflare’s Pingora
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:18:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Cloudflare Pingora #CVE_2026_2833 #CVE_2026_2835 #CVE_2026_2836 #cybersecurity #http_request_smuggling #infosec #Patch Alert #Rust Security
Daily CyberSecurity
Critical Request Smuggling & Cache Flaws Discovered in Cloudflare's Pingora
Discover three critical flaws (including CVE-2026-2835) in Cloudflare's Pingora Rust framework causing request smuggling and cache poisoning. Update now.
12 views
Daily Writeups
⤷ Title: HTTP/2 request smuggling via CRLF injection
════════════════════════
𐀪 Author: Ⓥ
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:24:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #pentesting #cybersecurity #vulnerability #http_request_smuggling
Medium
HTTP/2 request smuggling via CRLF injection
HTTP/2 request smuggling can arise when a front-end server downgrades HTTP/2 traffic to HTTP/1.1 without properly sanitizing user-supplied…
33 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
════════════════════════
𐀪 Author: Aman Gupta
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:15:57 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #web_security #http_request_smuggling
Medium
HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
Introduction
16 views
Daily Writeups
⤷ Title: Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
════════════════════════
𐀪 Author: Mohamed Amgad
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 00:13:15 GMT
════════════════════════
⌗ Tags: #http_request_smuggling #web_security #portswigger #bug_bounty
Medium
Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
Before diving into the lab, there are some important concepts we need to understand first: what Content-Length and Transfer-Encoding are…
34 views
Daily Writeups
⤷ Title: How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:17:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #url #http_request #prompt_injection_attack
Medium
How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
Most WAF bypasses involve encoding tricks, obscure headers, or parser confusion.
32 views
Daily Writeups
⤷ Title: Bir HTTP İsteği Gerçekten Nerede Biter?
════════════════════════
𐀪 Author: Zeki Kayaalp
════════════════════════
ⴵ Time: Wed, 13 May 2026 20:24:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request #bug_bounty #http_request_smuggling
Medium
Bir HTTP İsteği Gerçekten Nerede Biter?
Sen tarayıcı üzerinden bir siteye gitmek istediğinde tren hangi duraklarda geçiyor biliyor musun?
32 views
Daily Writeups
⤷ Title: AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
════════════════════════
𐀪 Author: 0xKishore
════════════════════════
ⴵ Time: Wed, 27 May 2026 11:51:31 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #penetration_testing #http_request #appsecmaster #cybersecurity
Medium
AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
Objective
7 views
Daily Writeups
⤷ Title: A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:35:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #http_request #burpsuite
Medium
A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
Single unvalidated request header can become an execution vehicle for password poisoning and server-side exploitation.
16 views