Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Mon, 13 Mar 2023 13:16:01 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Checksum in golang
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/3996fdfc1908
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #security #go #request_response #checksums #redis
Medium
Checksum in golang
Using checksum to prevent processing same request multiple times
10 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Fri, 25 Aug 2023 08:47:33 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: HTB: Sau
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/2bed96c2d6e2
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #writeup #privesc #linux #request_basket #hackthebox
Medium
HTB: Sau
Sau is an Easy machine on Hack The Box. The machine focuses on exploiting multiple vulnerabilities in order to gain access to the machine…
24 views
Daily Writeups
β€· Title: Handling DELETE Requests, PATCH Requests, and Responding to URL Parameters in Node.js
════════════════════════
π€ͺ Author: Sheikh Mubashir
════════════════════════
β΄΅ Time: Fri, 03 Jan 2025 17:47:42 GMT
════════════════════════
βŒ— Tags: #patch #nodejs #backend #javascript #request
Medium
Handling DELETE Requests, PATCH Requests, and Responding to URL Parameters in Node.js
When building a RESTful API, two of the most common HTTP methods you’ll interact with are DELETE and PATCH. These methods allow us to…
17 views
Daily Writeups
β€· Title: Request Splitting: Exploiting the Request Headers
════════════════════════
π€ͺ Author: Geni_Wazir
════════════════════════
β΄΅ Time: Wed, 05 Feb 2025 17:42:32 GMT
════════════════════════
βŒ— Tags: #hacking #request_smuggling #http_request #cybersecurity #testing
Medium
Request Splitting: Exploiting the Request Headers
What is Request Splitting?
17 views
Daily Writeups
β€· Title: CLZero: fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sun, 23 Feb 2025 01:10:46 +0000
════════════════════════
βŒ— Tags: #Vulnerability Assessment #Web AppSec #CLZero #Request Smuggling Attack
Penetration Testing Tools
CLZero: fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors
CLZero is a project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors.Inspired by the tool Smuggler all attack gadgets adapted from Smuggler
30 views
Daily Writeups
β€· Title: Understanding Request Smuggling: A Sneaky Vulnerability and How to Test It
════════════════════════
π€ͺ Author: Tanouhabib
════════════════════════
β΄΅ Time: Tue, 01 Apr 2025 21:45:12 GMT
════════════════════════
βŒ— Tags: #request_smuggling #cybersecurity #penetration_testing #portswigger #web_vulnerabilities
Medium
Understanding Request Smuggling: A Sneaky Vulnerability and How to Test It
Subtitle (optional): β€œExplore the mechanics, real-world examples, and a practical lab to master this critical web attack.”
20 views
Daily Writeups
β€· Title: Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Fri, 04 Apr 2025 00:36:26 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Apache Traffic Server #CVE_2024_53868 #Request Smuggling Attack
Daily CyberSecurity
Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)
Understand CVE-2024-53868: a vulnerability in Apache Traffic Server that affects how chunked messages are processed.
28 views
Daily Writeups
β€· Title: CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Sun, 27 Apr 2025 00:06:35 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2025_43859 #CVSS 9.1 #h11 #HTTP vulnerability #Python #request smuggling #reverse proxy #Web Security
Daily CyberSecurity
CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library
A CVE-2025-43859 vulnerability in Python’s h11 library may lead to request smuggling attacks when paired with buggy proxies. Patch to version 0.15.0 now.
30 views
Daily Writeups
β€· Title: Bypassing OTP: Unlocking Vulnerabilities & Securing Your App
════════════════════════
π€ͺ Author: B4LOGI
════════════════════════
β΄΅ Time: Thu, 01 May 2025 06:03:43 GMT
════════════════════════
βŒ— Tags: #request #responses #otp_bypass #cybersecurity #infosec
Medium
πŸ”“ Bypassing OTP: Unlocking Vulnerabilities & Securing Your App πŸ’»πŸ”
While logged into a web application, you’ve probably received an OTP (One Time Password) on your phone or email. It’s supposed to be an…
18 views
Daily Writeups
β€· Title: Varnish Vulnerability Exposes Cache to HTTP Request Smuggling
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 14 May 2025 00:50:09 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Cache Poisoning #http #request smuggling #Varnish #Varnish Cache #Varnish Enterprise #Web Security
Daily CyberSecurity
Varnish Vulnerability Exposes Cache to HTTP Request Smuggling
Varnish Cache and Enterprise have a vulnerability allowing HTTP request smuggling. This can lead to cache poisoning and WAF bypass. Upgrade now!
17 views
Daily Writeups
β€· Title: HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Fri, 08 Aug 2025 08:49:04 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cybersecurity #HTTP/1.1 #HTTP/2 #PortSwigger #Request Smuggling #vulnerability #web security
Penetration Testing Tools
HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat
A 6-year-old flaw in the HTTP/1.1 protocol still enables critical request smuggling attacks. Experts are now calling for its complete and unconditional retirement.
12 views
Daily Writeups
β€· Title: HTTP Request Smuggling: Basic CL.TE Vulnerability
════════════════════════
π€ͺ Author: Bash Overflow
════════════════════════
β΄΅ Time: Thu, 14 Aug 2025 15:31:17 GMT
════════════════════════
βŒ— Tags: #bug_bounty #clte_vulnerability #http_request_smuggling #request_smuggling #chunked_transfer_encoding
Medium
HTTP Request Smuggling: Basic CL.TE Vulnerability
Learn how CL.TE request smuggling works, why it’s dangerous, and how attackers exploit server parsing differences.
17 views
Daily Writeups
β€· Title: HTTP Request Smuggling: Basic CL.TE Vulnerability
════════════════════════
π€ͺ Author: Bash Overflow
════════════════════════
β΄΅ Time: Fri, 15 Aug 2025 07:25:24 GMT
════════════════════════
βŒ— Tags: #bug_bounty #clte_vulnerability #http_request_smuggling #request_smuggling #chunked_transfer_encoding
Medium
HTTP Request Smuggling: Basic CL.TE Vulnerability
Learn how CL.TE request smuggling works, why it’s dangerous, and how attackers exploit server parsing differences.
11 views
Daily Writeups
β€· Title: Critical Flaws in Hiawatha Web Server Could Allow Authentication Bypass and RCE
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 10 Sep 2025 00:16:09 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CERT/CC #cybersecurity #double_free #Hiawatha #open_source #rce #request smuggling #Vulnerability #web server
Daily CyberSecurity
Critical Flaws in Hiawatha Web Server Could Allow Authentication Bypass and RCE
CERT/CC warns of critical flaws in the Hiawatha web server. The vulnerabilities could allow attackers to bypass authentication and hijack sessions.
14 views