Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Mon, 13 Mar 2023 13:16:01 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Checksum in golang
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/3996fdfc1908
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #security #go #request_response #checksums #redis
Medium
Checksum in golang
Using checksum to prevent processing same request multiple times
10 views
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Fri, 25 Aug 2023 08:47:33 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: HTB: Sau
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/2bed96c2d6e2
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #writeup #privesc #linux #request_basket #hackthebox
Medium
HTB: Sau
Sau is an Easy machine on Hack The Box. The machine focuses on exploiting multiple vulnerabilities in order to gain access to the machine…
24 views
Daily Writeups
β€· Title: Handling DELETE Requests, PATCH Requests, and Responding to URL Parameters in Node.js
════════════════════════
π€ͺ Author: Sheikh Mubashir
════════════════════════
β΄΅ Time: Fri, 03 Jan 2025 17:47:42 GMT
════════════════════════
βŒ— Tags: #patch #nodejs #backend #javascript #request
Medium
Handling DELETE Requests, PATCH Requests, and Responding to URL Parameters in Node.js
When building a RESTful API, two of the most common HTTP methods you’ll interact with are DELETE and PATCH. These methods allow us to…
17 views
Daily Writeups
β€· Title: Request Splitting: Exploiting the Request Headers
════════════════════════
π€ͺ Author: Geni_Wazir
════════════════════════
β΄΅ Time: Wed, 05 Feb 2025 17:42:32 GMT
════════════════════════
βŒ— Tags: #hacking #request_smuggling #http_request #cybersecurity #testing
Medium
Request Splitting: Exploiting the Request Headers
What is Request Splitting?
17 views
Daily Writeups
β€· Title: CLZero: fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sun, 23 Feb 2025 01:10:46 +0000
════════════════════════
βŒ— Tags: #Vulnerability Assessment #Web AppSec #CLZero #Request Smuggling Attack
Penetration Testing Tools
CLZero: fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors
CLZero is a project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors.Inspired by the tool Smuggler all attack gadgets adapted from Smuggler
30 views
Daily Writeups
β€· Title: Understanding Request Smuggling: A Sneaky Vulnerability and How to Test It
════════════════════════
π€ͺ Author: Tanouhabib
════════════════════════
β΄΅ Time: Tue, 01 Apr 2025 21:45:12 GMT
════════════════════════
βŒ— Tags: #request_smuggling #cybersecurity #penetration_testing #portswigger #web_vulnerabilities
Medium
Understanding Request Smuggling: A Sneaky Vulnerability and How to Test It
Subtitle (optional): β€œExplore the mechanics, real-world examples, and a practical lab to master this critical web attack.”
20 views
Daily Writeups
β€· Title: Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Fri, 04 Apr 2025 00:36:26 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Apache Traffic Server #CVE_2024_53868 #Request Smuggling Attack
Daily CyberSecurity
Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)
Understand CVE-2024-53868: a vulnerability in Apache Traffic Server that affects how chunked messages are processed.
28 views
Daily Writeups
β€· Title: CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Sun, 27 Apr 2025 00:06:35 +0000
════════════════════════
βŒ— Tags: #Vulnerability #CVE_2025_43859 #CVSS 9.1 #h11 #HTTP vulnerability #Python #request smuggling #reverse proxy #Web Security
Daily CyberSecurity
CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library
A CVE-2025-43859 vulnerability in Python’s h11 library may lead to request smuggling attacks when paired with buggy proxies. Patch to version 0.15.0 now.
30 views
Daily Writeups
β€· Title: Bypassing OTP: Unlocking Vulnerabilities & Securing Your App
════════════════════════
π€ͺ Author: B4LOGI
════════════════════════
β΄΅ Time: Thu, 01 May 2025 06:03:43 GMT
════════════════════════
βŒ— Tags: #request #responses #otp_bypass #cybersecurity #infosec
Medium
πŸ”“ Bypassing OTP: Unlocking Vulnerabilities & Securing Your App πŸ’»πŸ”
While logged into a web application, you’ve probably received an OTP (One Time Password) on your phone or email. It’s supposed to be an…
18 views
Daily Writeups
β€· Title: Varnish Vulnerability Exposes Cache to HTTP Request Smuggling
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 14 May 2025 00:50:09 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Cache Poisoning #http #request smuggling #Varnish #Varnish Cache #Varnish Enterprise #Web Security
Daily CyberSecurity
Varnish Vulnerability Exposes Cache to HTTP Request Smuggling
Varnish Cache and Enterprise have a vulnerability allowing HTTP request smuggling. This can lead to cache poisoning and WAF bypass. Upgrade now!
17 views
Daily Writeups
β€· Title: HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Fri, 08 Aug 2025 08:49:04 +0000
════════════════════════
βŒ— Tags: #Vulnerability #cybersecurity #HTTP/1.1 #HTTP/2 #PortSwigger #Request Smuggling #vulnerability #web security
Penetration Testing Tools
HTTP/1.1 Must Die: Why This 6-Year-Old Vulnerability Is Still a Major Threat
A 6-year-old flaw in the HTTP/1.1 protocol still enables critical request smuggling attacks. Experts are now calling for its complete and unconditional retirement.
12 views
Daily Writeups
β€· Title: HTTP Request Smuggling: Basic CL.TE Vulnerability
════════════════════════
π€ͺ Author: Bash Overflow
════════════════════════
β΄΅ Time: Thu, 14 Aug 2025 15:31:17 GMT
════════════════════════
βŒ— Tags: #bug_bounty #clte_vulnerability #http_request_smuggling #request_smuggling #chunked_transfer_encoding
Medium
HTTP Request Smuggling: Basic CL.TE Vulnerability
Learn how CL.TE request smuggling works, why it’s dangerous, and how attackers exploit server parsing differences.
17 views
Daily Writeups
β€· Title: HTTP Request Smuggling: Basic CL.TE Vulnerability
════════════════════════
π€ͺ Author: Bash Overflow
════════════════════════
β΄΅ Time: Fri, 15 Aug 2025 07:25:24 GMT
════════════════════════
βŒ— Tags: #bug_bounty #clte_vulnerability #http_request_smuggling #request_smuggling #chunked_transfer_encoding
Medium
HTTP Request Smuggling: Basic CL.TE Vulnerability
Learn how CL.TE request smuggling works, why it’s dangerous, and how attackers exploit server parsing differences.
11 views
Daily Writeups
β€· Title: Critical Flaws in Hiawatha Web Server Could Allow Authentication Bypass and RCE
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 10 Sep 2025 00:16:09 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CERT/CC #cybersecurity #double_free #Hiawatha #open_source #rce #request smuggling #Vulnerability #web server
Daily CyberSecurity
Critical Flaws in Hiawatha Web Server Could Allow Authentication Bypass and RCE
CERT/CC warns of critical flaws in the Hiawatha web server. The vulnerabilities could allow attackers to bypass authentication and hijack sessions.
14 views
Daily Writeups
β€· Title: Aiohttp Patches Seven Vulnerabilities Including High-Severity DoS Risks
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 06 Jan 2026 02:23:48 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #aiohttp #Asyncio #CVE_2025_69224 #CVE_2025_69227 #CVE_2025_69228 #Denial of Service #dos #Infinite Loop #infosec #memory exhaustion #Python #request smuggling #web development
Daily CyberSecurity
Aiohttp Patches Seven Vulnerabilities Including High-Severity DoS Risks
Maintainers of aiohttp, the popular asynchronous HTTP client/server framework for Python, have released a sweeping security update addressing seven distinct vulnerabilities. The update, version 3.…
13 views
Daily Writeups
β€· Title: Apache Traffic Server Patches β€œDouble-Header” DoS and Request Smuggling Flaws
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 03 Apr 2026 15:07:53 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #Apache Software Foundation #Apache Traffic Server #ATS #Caching #CVE_2025_58136 #CVE_2025_65114 #Denial of Service #infosec #request smuggling #security update #Web Proxy
Daily CyberSecurity
Apache Traffic Server Patches "Double-Header" DoS and Request Smuggling Flaws
Apache Traffic Server fixes two CVSS 7.5 flaws (CVE-2025-58136 & CVE-2025-65114). Prevent DoS and request smugglingβ€”update to 10.1.2 or 9.2.13 now!
6 views
Daily Writeups
β€· Title: CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Sun, 12 Apr 2026 17:10:09 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #AWS IMDSv2 #Axios #Cloud Security #CVE_2026_40175 #Header injection #infosec #javascript #Node.js #Prototype Pollution #rce #request smuggling
Daily CyberSecurity
CVE-2026-40175 (CVSS 10): Critical Axios Vulnerability and Exploit Code Disclosed Publicly
A critical CVSS 10 flaw in Axios (CVE-2026-40175) allows attackers to bypass AWS IMDSv2 and achieve RCE via header injection. Upgrade to v1.15.0 now!
48 views
Daily Writeups
β€· Title: Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 13 Apr 2026 01:00:46 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #apache Tomcat #CVE_2026_29146 #CVE_2026_34486 #Encryption Bypass #infosec #Java security #Kubernetes Security #request smuggling #vulnerability management #web server
Daily CyberSecurity
Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
Apache Tomcat discloses 10 vulnerabilities including encryption bypasses and Kubernetes token leaks. Upgrade now to secure your Java-based web applications.
11 views
Daily Writeups
β€· Title: WebSphere Remote Code Execution Defended with New IBM Security Fixes
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Sat, 30 May 2026 01:48:26 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_8620 #CVE_2026_8633 #IBM Security Bulletin #IBM WebSphere #Remote Code Execution #request smuggling #Software Patch
Daily CyberSecurity
WebSphere Remote Code Execution Defended with New IBM Security Fixes
IBM released a critical WebSphere remote code execution update. Apply the request smuggling patch immediately to protect your server environment.
24 views
Daily Writeups
β€· Title: Tinyproxy Request Smuggling Flaws Expose Networks
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Tue, 23 Jun 2026 02:12:44 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_54387 #CVE_2026_54388 #CVE_2026_55202 #request smuggling #Tinyproxy
Daily CyberSecurity
Tinyproxy Request Smuggling Flaws Expose Networks
Three critical Tinyproxy request smuggling vulnerabilities, including CVE-2026-54388, expose networks to severe attacks. Update your proxy servers immediately.
16 views