Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Request Splitting: Exploiting the Request Headers
════════════════════════
𐀪 Author: Geni_Wazir
════════════════════════
ⴵ Time: Wed, 05 Feb 2025 17:42:32 GMT
════════════════════════
⌗ Tags: #hacking #request_smuggling #http_request #cybersecurity #testing
Medium
Request Splitting: Exploiting the Request Headers
What is Request Splitting?
17 views
Daily Writeups
⤷ Title: CLZero: fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 23 Feb 2025 01:10:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Assessment #Web AppSec #CLZero #Request Smuggling Attack
Penetration Testing Tools
CLZero: fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors
CLZero is a project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors.Inspired by the tool Smuggler all attack gadgets adapted from Smuggler
30 views
Daily Writeups
⤷ Title: Understanding Request Smuggling: A Sneaky Vulnerability and How to Test It
════════════════════════
𐀪 Author: Tanouhabib
════════════════════════
ⴵ Time: Tue, 01 Apr 2025 21:45:12 GMT
════════════════════════
⌗ Tags: #request_smuggling #cybersecurity #penetration_testing #portswigger #web_vulnerabilities
Medium
Understanding Request Smuggling: A Sneaky Vulnerability and How to Test It
Subtitle (optional): “Explore the mechanics, real-world examples, and a practical lab to master this critical web attack.”
20 views
Daily Writeups
⤷ Title: Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Fri, 04 Apr 2025 00:36:26 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache Traffic Server #CVE_2024_53868 #Request Smuggling Attack
Daily CyberSecurity
Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)
Understand CVE-2024-53868: a vulnerability in Apache Traffic Server that affects how chunked messages are processed.
28 views
Daily Writeups
⤷ Title: CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 27 Apr 2025 00:06:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_43859 #CVSS 9.1 #h11 #HTTP vulnerability #Python #request smuggling #reverse proxy #Web Security
Daily CyberSecurity
CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library
A CVE-2025-43859 vulnerability in Python’s h11 library may lead to request smuggling attacks when paired with buggy proxies. Patch to version 0.15.0 now.
30 views
Daily Writeups
⤷ Title: Varnish Vulnerability Exposes Cache to HTTP Request Smuggling
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 May 2025 00:50:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cache Poisoning #http #request smuggling #Varnish #Varnish Cache #Varnish Enterprise #Web Security
Daily CyberSecurity
Varnish Vulnerability Exposes Cache to HTTP Request Smuggling
Varnish Cache and Enterprise have a vulnerability allowing HTTP request smuggling. This can lead to cache poisoning and WAF bypass. Upgrade now!
17 views
Daily Writeups
⤷ Title: HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 Aug 2025 08:49:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #HTTP/1.1 #HTTP/2 #PortSwigger #Request Smuggling #vulnerability #web security
Penetration Testing Tools
HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat
A 6-year-old flaw in the HTTP/1.1 protocol still enables critical request smuggling attacks. Experts are now calling for its complete and unconditional retirement.
12 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: Basic CL.TE Vulnerability
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 15:31:17 GMT
════════════════════════
⌗ Tags: #bug_bounty #clte_vulnerability #http_request_smuggling #request_smuggling #chunked_transfer_encoding
Medium
HTTP Request Smuggling: Basic CL.TE Vulnerability
Learn how CL.TE request smuggling works, why it’s dangerous, and how attackers exploit server parsing differences.
17 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: Basic CL.TE Vulnerability
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Fri, 15 Aug 2025 07:25:24 GMT
════════════════════════
⌗ Tags: #bug_bounty #clte_vulnerability #http_request_smuggling #request_smuggling #chunked_transfer_encoding
Medium
HTTP Request Smuggling: Basic CL.TE Vulnerability
Learn how CL.TE request smuggling works, why it’s dangerous, and how attackers exploit server parsing differences.
11 views
Daily Writeups
⤷ Title: Critical Flaws in Hiawatha Web Server Could Allow Authentication Bypass and RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 10 Sep 2025 00:16:09 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CERT/CC #cybersecurity #double_free #Hiawatha #open_source #rce #request smuggling #Vulnerability #web server
Daily CyberSecurity
Critical Flaws in Hiawatha Web Server Could Allow Authentication Bypass and RCE
CERT/CC warns of critical flaws in the Hiawatha web server. The vulnerabilities could allow attackers to bypass authentication and hijack sessions.
14 views