Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: pwncollege: Talking Web
════════════════════════
𐀪 Author: Sourav Bose
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 15:34:33 GMT
════════════════════════
⌗ Tags: #curl #networking #hacking #python_request #http_request
Medium
pwncollege: Talking Web
pwncollege Talking Web full writeup
11 views
Daily Writeups
⤷ Title: Using Wireshark to Examine HTTP and HTTPS Traffic
════════════════════════
𐀪 Author: Omar Hamed
════════════════════════
ⴵ Time: Sat, 01 Nov 2025 15:18:27 GMT
════════════════════════
⌗ Tags: #tcpdump #https #cybersecurity #http_request #wireshark
Medium
Using Wireshark to Examine HTTP and HTTPS Traffic
By: Omar Mohammad Hamed  Lab: 10.6.7 — Cisco Networking Academy
11 views
Daily Writeups
⤷ Title: Understanding HTTP: The Backbone of the Web
════════════════════════
𐀪 Author: Arfi Tutorials
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 16:24:03 GMT
════════════════════════
⌗ Tags: #bug_bounty #ethical_hacking #http_request #cybersecurity #https
Medium
Understanding HTTP: The Backbone of the Web
Hello everyone! My name is Arfat Khan, and I run a YouTube channel called Arfi Tutorials. I am a bug bounty hunter, penetration tester, and…
11 views
Daily Writeups
⤷ Title: HTB — Web Requests Notlarım
════════════════════════
𐀪 Author: Songül Kızılay
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 13:22:55 GMT
════════════════════════
⌗ Tags: #curl #cybersecurity #http_request #https #htb
Medium
HTB — Web Requests Notlarım
HyperText Transfer Protocol (HTTP)
19 views
Daily Writeups
⤷ Title: Room 111: What 80/tcp Open HTTP Really Means for Your Network
════════════════════════
𐀪 Author: blackXmask
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 18:35:06 GMT
════════════════════════
⌗ Tags: #https #network_security #testing #http_request #cybersecurity
Medium
Room 111: What 80/tcp Open HTTP Really Means for Your Network
Lesson 01: Introduction to HTTP (Foundation of Web Communication) Lesson 02: Understanding HTTP Requests (Methods, URLs, & Parameters)…
13 views
Daily Writeups
⤷ Title: I Couldn’t Find the Tool I Needed for Web Security Testing — So I Built It
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 16:26:26 GMT
════════════════════════
⌗ Tags: #chrome_extension #web_security #penetration_testing #http_request #bug_bounty
Medium
I Couldn’t Find the Tool I Needed for Web Security Testing — So I Built It
What if the most useful parts of Burp lived alongside Chrome — fast, focused, and always available?
58 views
Daily Writeups
⤷ Title: The invisible Splinter: How a Hidden Node.js Flaw Bypasses 160 Million Weekly Security Guards
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 07:18:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #ClientRequest #CVE_2018_12116 #HackerOne #HTTP request splitting #http_proxy_middleware #Node.js #r3verii #superagent #Tech News 2026 #TOCTOU #Vulnerability Research #web security
Penetration Testing Tools
The invisible Splinter: How a Hidden Node.js Flaw Bypasses 160 Million Weekly Security Guards
Within the Node.js ecosystem, a vulnerability has been unearthed pertaining to the foundational logic of the HTTP client,
20 views
Daily Writeups
⤷ Title: Response queue poisoning via H2.TE request smuggling
════════════════════════
𐀪 Author: Ⓥ
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 12:03:46 GMT
════════════════════════
⌗ Tags: #http_request_smuggling #vulnerability #burpsuite #penetration_testing #cybersecurity
Medium
Response queue poisoning via H2.TE request smuggling
This lab is vulnerable to request smuggling due to the front-end server downgrading HTTP/2 requests even when they contain an ambiguous…
17 views
Daily Writeups
⤷ Title: Critical Request Smuggling & Cache Flaws Discovered in Cloudflare’s Pingora
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:18:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Cloudflare Pingora #CVE_2026_2833 #CVE_2026_2835 #CVE_2026_2836 #cybersecurity #http_request_smuggling #infosec #Patch Alert #Rust Security
Daily CyberSecurity
Critical Request Smuggling & Cache Flaws Discovered in Cloudflare's Pingora
Discover three critical flaws (including CVE-2026-2835) in Cloudflare's Pingora Rust framework causing request smuggling and cache poisoning. Update now.
11 views
Daily Writeups
⤷ Title: HTTP/2 request smuggling via CRLF injection
════════════════════════
𐀪 Author: Ⓥ
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:24:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #pentesting #cybersecurity #vulnerability #http_request_smuggling
Medium
HTTP/2 request smuggling via CRLF injection
HTTP/2 request smuggling can arise when a front-end server downgrades HTTP/2 traffic to HTTP/1.1 without properly sanitizing user-supplied…
32 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
════════════════════════
𐀪 Author: Aman Gupta
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:15:57 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #web_security #http_request_smuggling
Medium
HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
Introduction
15 views
Daily Writeups
⤷ Title: Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
════════════════════════
𐀪 Author: Mohamed Amgad
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 00:13:15 GMT
════════════════════════
⌗ Tags: #http_request_smuggling #web_security #portswigger #bug_bounty
Medium
Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
Before diving into the lab, there are some important concepts we need to understand first: what Content-Length and Transfer-Encoding are…
33 views
Daily Writeups
⤷ Title: How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:17:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #url #http_request #prompt_injection_attack
Medium
How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
Most WAF bypasses involve encoding tricks, obscure headers, or parser confusion.
32 views
Daily Writeups
⤷ Title: Bir HTTP İsteği Gerçekten Nerede Biter?
════════════════════════
𐀪 Author: Zeki Kayaalp
════════════════════════
ⴵ Time: Wed, 13 May 2026 20:24:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request #bug_bounty #http_request_smuggling
Medium
Bir HTTP İsteği Gerçekten Nerede Biter?
Sen tarayıcı üzerinden bir siteye gitmek istediğinde tren hangi duraklarda geçiyor biliyor musun?
31 views
Daily Writeups
⤷ Title: AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
════════════════════════
𐀪 Author: 0xKishore
════════════════════════
ⴵ Time: Wed, 27 May 2026 11:51:31 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #penetration_testing #http_request #appsecmaster #cybersecurity
Medium
AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
Objective
6 views
Daily Writeups
⤷ Title: A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:35:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #http_request #burpsuite
Medium
A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
Single unvalidated request header can become an execution vehicle for password poisoning and server-side exploitation.
14 views
Daily Writeups
⤷ Title: HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
════════════════════════
𐀪 Author: Amit Pal | amitpxl
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 13:51:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request_smuggling #application_security #web_application_security
Medium
HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
Stop screenshotting every double response in Burp Repeater. Here’s how to separate harmless protocol features from actual queue poisoning.
17 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
════════════════════════
𐀪 Author: Furkanalpgunay
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:22:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #http_request_smuggling #cybersecurity #penetration_testing #web_security
Medium
HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
From CL.TE and TE.CL to HTTP/2 downgrade and client-side desync — a complete, hands-on guide built from 20+ labs I solved myself.
10 views
Daily Writeups
⤷ Title: CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 01:01:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_58047 #CVE_2026_58048 #database security #http_request_smuggling #privilege escalation #Web Hosting Security #WHM
Daily CyberSecurity
CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
TL;DR: cPanel patched a cPanel root SQL execution flaw tracked as CVE-2026-58048, rated CVSS 9.4. A second, lower-severity bug, CVE-2026-58047, allows HTTP request smuggling under limited conditio…
24 views