Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Web Server Security — Attacks, Tools & Defense (CEH Guide for Ethical Hackers)
════════════════════════
𐀪 Author: Cyber Wolf
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 11:56:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #web_server_security #cyber_security_awareness #web_server
Medium
🌐 Web Server Security — Attacks, Tools & Defense (CEH Guide for Ethical Hackers)
Web servers are the front door of the internet.
 Every website, API, cloud app, or SaaS platform depends on a web server — and that makes…
42 views
Daily Writeups
⤷ Title: Apache: The Web Server That Built the Internet!
════════════════════════
𐀪 Author: Rela Lumbini
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 05:17:32 GMT
════════════════════════
⌗ Tags: #infosec #apache #open_source #information_security #web_server
Medium
Apache: The Web Server That Built the Internet!
If you have ever browsed the internet, you have almost certainly interacted with Apache, even if you didn’t know it.
34 views
Daily Writeups
⤷ Title: Ghost Folders: “Directory Shadowing” Hack Hijacks WordPress SEO
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 00:11:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #apache #Directory Shadowing #Gambling Spam #Googlebot Cloaking #malware #nginx #SEO Spam #Sucuri #Web Server Security #wordpress
Daily CyberSecurity
Ghost Folders: "Directory Shadowing" Hack Hijacks WordPress SEO
New "directory shadowing" malware creates physical folders to hijack WordPress URLs. It feeds gambling spam to Googlebots while staying invisible.
11 views
Daily Writeups
⤷ Title: High-Severity NGINX Flaw Lets Attackers Inject Malicious Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 09:01:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #F5 #mitm #nginx #NGINX Plus #Patch Alert #reverse proxy #TLS Injection #Upstream Proxy #Web Server Security
Daily CyberSecurity
High-Severity NGINX Flaw Lets Attackers Inject Malicious Data
F5 warns of NGINX flaw CVE-2026-1642 (CVSS 8.2). MITM attackers can inject data into upstream TLS responses. Update to v1.29.5 immediately.
14 views
Daily Writeups
⤷ Title: The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:33:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Baota Panel #Datadog #Gambling Spam #Malicious Configuration #nginx #Proxy Pass #SEO Poisoning #SysAdmin #Traffic Hijacking #Web Server Security
Daily CyberSecurity
The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
Hackers are hijacking NGINX servers via malicious config injections. Datadog warns of silent traffic redirection for SEO poisoning. Check your proxy_pass.
15 views
Daily Writeups
⤷ Title: The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:37:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Asia top_level domains #Baota Panel #CVE_2025_55182 #Cyber Espionage #Datadog #man_in_the_middle #MITM #Nginx #React2Shell #Tech News 2026 #traffic hijacking #web server security
Penetration Testing Tools
The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
Security analysts at Datadog have unmasked an ongoing traffic interception campaign targeting NGINX servers and hosting management interfaces,
21 views
Daily Writeups
⤷ Title: Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:44:03 +0000
════════════════════════
⌗ Tags: #Data Leak #.git folder #Credential Theft #data leak #DevOps Security #Git #misconfiguration #Mysterium VPN #source code exfiltration #Tech News 2026 #version control #web server hardening
Penetration Testing Tools
Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
Approximately five million web servers globally have been identified as misconfigured, exposing sensitive Git administrative metadata and precipitating
39 views
Daily Writeups
⤷ Title: Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 05:58:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2025_66614 #CVE_2026_24733 #CVE_2026_24734 #Cyber Security #HTTP/0.9 #infosec #Patch Alert #SNI Bypass #Web Server Security
Daily CyberSecurity
Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws
Apache Tomcat rolls out urgent updates for versions 9, 10, and 11 to fix legacy HTTP/0.9 protocol confusion and SNI certificate bypass flaws. Patch now.
15 views
Daily Writeups
⤷ Title: Securing Azure Virtual Networks with NSGs and ASGs
════════════════════════
𐀪 Author: Ibidun Isaac
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 11:11:00 GMT
════════════════════════
⌗ Tags: #web_server_security #application_security #azure_network_security
Medium
Securing Azure Virtual Networks with NSGs and ASGs
In this lab, I explored how to secure cloud infrastructure using Microsoft Azure networking tools, specifically Network Security Groups…
20 views
Daily Writeups
⤷ Title: From Vulnerability to Resilience: Hardening an Apache Tomcat Server (Hands-on Security Walkthrough)
════════════════════════
𐀪 Author: Umeshpandeybtech
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 14:34:00 GMT
════════════════════════
⌗ Tags: #application_security #apache_tomcat_security #penetration_testing #web_server_hardening #cybersecurity
Medium
From Vulnerability to Resilience: Hardening an Apache Tomcat Server (Hands-on Security Walkthrough)
🧠 Why This Matters
14 views
Daily Writeups
⤷ Title: Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:00:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2026_29146 #CVE_2026_34486 #Encryption Bypass #infosec #Java security #Kubernetes Security #request smuggling #vulnerability management #web server
Daily CyberSecurity
Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
Apache Tomcat discloses 10 vulnerabilities including encryption bypasses and Kubernetes token leaks. Upgrade now to secure your Java-based web applications.
11 views
Daily Writeups
⤷ Title: Next-Gen Performance: NGINX 1.30.0 Stable Arrives with HTTP/2 Backend & Early Hints
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:06:16 +0000
════════════════════════
⌗ Tags: #Technology #Encrypted ClientHello #HTTP Early Hints #HTTP/2 Upstream #load balancing #Multipath TCP #Networking #NGINX 1.30.0 #OpenSSL 4.0 #reverse proxy #Web Server
Penetration Testing Tools
Next-Gen Performance: NGINX 1.30.0 Stable Arrives with HTTP/2 Backend & Early Hints
Nginx has inaugurated the stable 1.30.0 release, successfully concluding an extensive developmental cycle within the 1.29.x branch. This
14 views
Daily Writeups
⤷ Title: Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 03:52:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #Cyber Security #double_free #infosec #Patch Alert #PoC #proof_of_concept #rce #Web Server Security
Daily CyberSecurity
Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
Urgent: Public PoC for Apache CVE-2026-23918. A critical double-free in mod_http2 enables unauthenticated DoS and RCE. Update to Apache 2.4.67 immediately.
14 views
Daily Writeups
⤷ Title: Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 10:13:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42945 #Cyber Security #heap overflow #HTTP/3 #infosec #memory corruption #nginx #NGINX 1.30.1 #Patch Alert #QUIC #rce #Web Server Security
Daily CyberSecurity
Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
NGINX 1.30.1 fixes a 9.2 CVSS RCE flaw (CVE-2026-42945) and five other critical vulnerabilities. Protect your web infrastructure and update immediately!
40 views
Daily Writeups
⤷ Title: Web Server Attacks — I Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 14 May 2026 10:36:36 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #cybersecurity #tryhackme_walkthrough #web_server
Medium
Web Server Attacks — I Walkthrough Notes | TryHackMe
TryHackMe room on web servers, headers, files, and misconfigurations
52 views
Daily Writeups
⤷ Title: Tools for Web Applications Stress Testing (Load & Performance Validation)
════════════════════════
𐀪 Author: Adam Pentester
════════════════════════
ⴵ Time: Sun, 17 May 2026 09:20:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_attack #cybersecurity #web_server_attcks #web_app_security
Medium
Tools for Web Applications Stress Testing (Load & Performance Validation)
Tools for Web Applications Stress Testing (Load & Performance Validation) Before any system goes live, one of the key questions is whether it can handle real-world traffic without degrading or …
27 views
Daily Writeups
⤷ Title: What Are the Types of Attacks Against Web Servers?
════════════════════════
𐀪 Author: Vpshosting
════════════════════════
ⴵ Time: Mon, 18 May 2026 05:49:42 GMT
════════════════════════
⌗ Tags: #types_of_attacks #web_server_attacks #hacking #server_attack
Medium
What Are the Types of Attacks Against Web Servers?
Web servers play a pivotal role in the digital ecosystem, powering websites, applications, and services critical to businesses and…
12 views
Daily Writeups
⤷ Title: Web Server Attacks — I
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:49:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_server_attacks #tryhackme
Medium
Web Server Attacks — I
Enumerate and identify misconfigurations across Apache, Nginx, Node.js, and Python HTTP Server.
25 views
Daily Writeups
⤷ Title: Web Server Attacks — II | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:58:57 GMT
════════════════════════
⌗ Tags: #tryhackme #web_server_attacks #cybersecurity #pentesting
Medium
Web Server Attacks — II | TryHackMe
Attack IIS through fingerprinting, tilde enumeration, WebDAV shell upload, and learn automation.
43 views
Daily Writeups
⤷ Title: HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:05:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_49975 #Denial of Service #HPACK Vulnerability #HTTP/2 Bomb #Public Exploit Code #Web Server Security
Daily CyberSecurity
HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
The dangerous HTTP/2 Bomb exploit has been publicly disclosed with a PoC. Learn how this memory exhaustion flaw threatens major enterprise web servers.
12 views