Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: BiDi Swap: A Decade-Old Unicode Flaw Still Enables URL Spoofing
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Sep 2025 00:32:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BiDi Swap #browser security #cybersecurity #phishing attacks #Unicode #URL spoofing #Varonis
Daily CyberSecurity
BiDi Swap: A Decade-Old Unicode Flaw Still Enables URL Spoofing
A decade-old browser flaw, "BiDi Swap," allows attackers to craft deceptive URLs for phishing. The bug, found by Varonis, exploits mixed-text direction.
9 views
Daily Writeups
⤷ Title: Using LLMs to Boost Classical Machine Learning URL Classification Models.
════════════════════════
𐀪 Author: Ernest Mugambi
════════════════════════
ⴵ Time: Sat, 27 Sep 2025 17:21:34 GMT
════════════════════════
⌗ Tags: #llm_applications #cybersecurity #model_drift #url_classification #machine_learning
Medium
Using LLMs to Boost Classical Machine Learning URL Classification Models.
Introduction
15 views
Daily Writeups
⤷ Title: Which Links Are Safe and Which Are Not?
════════════════════════
𐀪 Author: Hassan Khattak
════════════════════════
ⴵ Time: Thu, 23 Oct 2025 11:45:37 GMT
════════════════════════
⌗ Tags: #security #scam #links #cybersecurity #url_shorteners
Medium
Which Links Are Safe and Which Are Not?
This article is written to raise awareness about the growing threats of cybersecurity and how one small click can sometimes lead to big…
17 views
Daily Writeups
⤷ Title: Apache Tomcat Patches URL Rewrite Bypass (CVE-2025-55752) Risking RCE and Console ANSI Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 01:43:18 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ANSI Escape #apache Tomcat #CVE_2025_55752 #Denial of Service #rce #URL Rewrite Bypass
Daily CyberSecurity
Apache Tomcat Patches URL Rewrite Bypass (CVE-2025-55752) Risking RCE and Console ANSI Injection
The Apache Software Foundation has released multiple security patches for Apache Tomcat, addressing three newly disclosed vulnerabilities — CVE-2025-55752, CVE-2025-55754, and CVE-2025-61795 — aff…
30 views
Daily Writeups
⤷ Title: PAN-OS Flaw (CVE-2025-4619) Allows Unauthenticated Firewall Reboot via Single Crafted Packet
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 02:49:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_4619 #Decrypt Policy #Denial of Service #dos #firewall #Palo Alto Networks #PAN_OS #URL Proxy
Daily CyberSecurity
PAN-OS Flaw (CVE-2025-4619) Allows Unauthenticated Firewall Reboot via Single Crafted Packet
Palo Alto patched a DoS flaw (CVE-2025-4619) in PAN-OS. An unauthenticated attacker can remotely reboot the firewall if URL proxy or decryption policies are enabled.
16 views
Daily Writeups
⤷ Title: PHP 8.5 Released: Pipe Operator & Standards-Compliant URL Handling Arrive
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 02:53:36 +0000
════════════════════════
⌗ Tags: #Technology #Code Readability #Laravel #PHP 8.5 #Pipe Operator #Programming Language #URL Handling #Web Development #WordPress
Penetration Testing Tools
PHP 8.5 Released: Pipe Operator & Standards-Compliant URL Handling Arrive
PHP 8.5 brings major updates, including the long-awaited Pipe operator for cleaner code chaining and a new URL library for standards-compliant, reliable data handling.
20 views
Daily Writeups
⤷ Title: Lab: URL normalisation |Portswigger
════════════════════════
𐀪 Author: L4V4NY4 AGR3
════════════════════════
ⴵ Time: Tue, 27 Jan 2026 07:28:44 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #portswigger #malicious_url #caches_normalization #url_normalisation
Medium
Lab: URL normalisation |Portswigger
This lab contains an XSS vulnerability that is not directly exploitable due to browser URL-encoding.To solve the lab, take advantage of the…
11 views
Daily Writeups
⤷ Title: The Stealth Oracle: How “Safe” Chrome Extensions Can Reconstruct Your Private URLs Character by Character
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 04:01:26 +0000
════════════════════════
⌗ Tags: #Data Leak #chrome #cyber security news 2026 #declarativeNetRequest #dynamic rules #Manifest V3 #privacy vulnerability #regexFilter #side_channel attack #URL exfiltration #web security
Penetration Testing Tools
The Stealth Oracle: How "Safe" Chrome Extensions Can Reconstruct Your Private URLs Character by Character
A sophisticated technique has been unearthed within Chrome that permits the exfiltration of the complete URL from any
17 views
Daily Writeups
⤷ Title: URL Encoding Explained: The Complete Beginner-to-Advanced Guide
════════════════════════
𐀪 Author: Ishant Gupta
════════════════════════
ⴵ Time: Mon, 09 Mar 2026 14:22:21 GMT
════════════════════════
⌗ Tags: #ethical_hacking #url_encoding #web_development #cybersecurity #bug_bounty
Medium
URL Encoding Explained: The Complete Beginner-to-Advanced Guide
The internet works because browsers, servers, and applications follow strict rules when communicating. One of the most important — yet…
10 views
Daily Writeups
⤷ Title: How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:17:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #url #http_request #prompt_injection_attack
Medium
How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
Most WAF bypasses involve encoding tricks, obscure headers, or parser confusion.
32 views