Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 10 Apr 2023 02:46:46 GMT
———————————————
✏️Title: Path Normalization Crash Course 101
———————————————
📎Link: https://medium.com/p/bc9fa41a0a6e
———————————————
Tags: #bug_bounty #cybersecurity #normalization #hacking #reverse_proxy

Medium

Path Normalization Crash Course 101

path normalization crash course

9 views04:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 30 Aug 2023 17:26:32 GMT
———————————————
✏️Title: Nginx Proxy Manager, A Reverse Proxy Management System
———————————————
📎Link: https://medium.com/p/281140a21d7e
———————————————
Tags: #saas #servers #linux #reverse_proxy #nginx

Medium

🔧 Nginx Proxy Manager, A Reverse Proxy Management System 🔧

In this post,

11 views23:02

Daily Writeups

⤷ Title: Reverse Shell Commands and How to Detect Them
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 02 Apr 2025 04:55:09 GMT
════════════════════════
⌗ Tags: #bug_bounty #reverse_shell #information_technology #hacking #reverse_proxy

Medium

Reverse Shell Commands and How to Detect Them

A reverse shell is a technique used by attackers to gain unauthorized access to a remote system by initiating an outbound connection from…

36 views06:04

Daily Writeups

⤷ Title: CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 27 Apr 2025 00:06:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_43859 #CVSS 9.1 #h11 #HTTP vulnerability #Python #request smuggling #reverse proxy #Web Security

Daily CyberSecurity

CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library

A CVE-2025-43859 vulnerability in Python’s h11 library may lead to request smuggling attacks when paired with buggy proxies. Patch to version 0.15.0 now.

30 views02:04

Daily Writeups

⤷ Title: Fake GIF and Reverse Proxy Used in Sophisticated Card Skimming Attack on Magento
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:25:12 +0000
════════════════════════
⌗ Tags: #Malware #credit card theft #eCommerce Breach #Fake GIF Malware #MageCart Attack #Magento Security #Reverse Proxy Skimming #Sucuri Research #web skimming

Daily CyberSecurity

Fake GIF and Reverse Proxy Used in Sophisticated Card Skimming Attack on Magento

A fake GIF and malicious reverse proxy server enabled a multi-stage card skimming attack on a Magento site, exposing customer credit card data and credentials.

17 views02:04

Daily Writeups

⤷ Title: Critical Flaw in Fabio Load Balancer Allows HTTP Header Tampering & Access Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:39:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #access control bypass #cybersecurity #Fabio #HTTP Headers #load balancer #reverse proxy #Server Security #Web Security

Daily CyberSecurity

Critical Flaw in Fabio Load Balancer Allows HTTP Header Tampering & Access Bypass

A critical flaw in Fabio load balancer allows malicious clients to manipulate or strip HTTP headers, leading to potential access control bypass. Upgrade to 1.6.6.

11 views02:04

Daily Writeups

⤷ Title: NGINX Makes HTTPS Easier Than Ever with New ACME Module
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 08:16:07 +0000
════════════════════════
⌗ Tags: #Technology #ACME #Automation #certificates #https #nginx #ngx_http_acme_module #reverse proxy #SSL/TLS #Web Security

Daily CyberSecurity

NGINX Makes HTTPS Easier Than Ever with New ACME Module

NGINX's new ACME module automates SSL/TLS certificate management, allowing users to request and renew certificates directly from the NGINX configuration.

27 views12:04

Daily Writeups

⤷ Title: Operation Rewrite: Chinese Threat Actors Hijack Websites in Massive Search Poisoning Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Sep 2025 07:46:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BadIIS #cybersecurity #Operation Rewrite #Palo Alto Networks #reverse proxy #Search Poisoning #SEO Poisoning #Threat Actors

Penetration Testing Tools

Operation Rewrite: Chinese Threat Actors Hijack Websites in Massive Search Poisoning Campaign

Unit 42 reveals "Operation Rewrite," a large-scale search poisoning scheme using BadIIS to hijack servers, manipulate SEO, and redirect traffic for fraud.

14 views08:04

Daily Writeups

⤷ Title: Critical Flaw in Termix Docker Image (CVE-2025-59951) Leaks SSH Credentials Without Authentication
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 02:35:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Credential Leak #CVE_2025_59951 #cybersecurity #docker #reverse proxy #ssh #Termix

Daily CyberSecurity

Critical Flaw in Termix Docker Image (CVE-2025-59951) Leaks SSH Credentials Without Authentication

A critical flaw (CVE-2025-59951) in the Termix Docker image's reverse proxy logic allows unauthenticated attackers to steal sensitive SSH host credentials. Update to v1.7.0 now.

9 views06:04

Daily Writeups

⤷ Title: Critical Denial-of-Service Vulnerability Discovered in HAProxy
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 03:11:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #Denial of Service #dos #HAProxy #load balancer #mjson #reverse proxy #Web Security

Daily CyberSecurity

Critical Denial-of-Service Vulnerability Discovered in HAProxy

A Critical flaw (CVE-2025-11230) in HAProxy’s mjson number parser allows unauthenticated attackers to cause a Denial of Service with a single crafted JSON payload. Update immediately.

15 views04:04

Daily Writeups

⤷ Title: Forward Proxy vs Reverse Proxy: The Deep Dive Every Engineer Must Understand
════════════════════════
𐀪 Author: Arvind Kumar
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 02:02:42 GMT
════════════════════════
⌗ Tags: #reverse_proxy #api_security #system_design_interview #forward_proxy #microservices

Medium

Forward Proxy vs Reverse Proxy: The Deep Dive Every Engineer Must Understand

There are few networking components as critical — and as misunderstood — as forward proxies and reverse proxies. Both act as…

30 views04:04

Daily Writeups

⤷ Title: Kubernetes Ingress NGINX EoL: Critical Component Deprecated Due to Lack of Funding
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:04:04 +0000
════════════════════════
⌗ Tags: #Technology #cloud native #Deprecation #EOL #FFmpeg #Ingress NGINX #Kubernetes #open source #reverse proxy #Sustainability

Penetration Testing Tools

Kubernetes Ingress NGINX EoL: Critical Component Deprecated Due to Lack of Funding

KubeCon in Atlanta delivered a wave of high-profile Kubernetes announcements, yet one of the most consequential developments slipped

8 views10:04

About

Blog

Apps

Platform