Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: HTB — Web Requests Notlarım
════════════════════════
𐀪 Author: Songül Kızılay
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 13:22:55 GMT
════════════════════════
⌗ Tags: #curl #cybersecurity #http_request #https #htb
Medium
HTB — Web Requests Notlarım
HyperText Transfer Protocol (HTTP)
19 views
Daily Writeups
⤷ Title: Room 111: What 80/tcp Open HTTP Really Means for Your Network
════════════════════════
𐀪 Author: blackXmask
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 18:35:06 GMT
════════════════════════
⌗ Tags: #https #network_security #testing #http_request #cybersecurity
Medium
Room 111: What 80/tcp Open HTTP Really Means for Your Network
Lesson 01: Introduction to HTTP (Foundation of Web Communication) Lesson 02: Understanding HTTP Requests (Methods, URLs, & Parameters)…
13 views
Daily Writeups
⤷ Title: I Couldn’t Find the Tool I Needed for Web Security Testing — So I Built It
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 16:26:26 GMT
════════════════════════
⌗ Tags: #chrome_extension #web_security #penetration_testing #http_request #bug_bounty
Medium
I Couldn’t Find the Tool I Needed for Web Security Testing — So I Built It
What if the most useful parts of Burp lived alongside Chrome — fast, focused, and always available?
58 views
Daily Writeups
⤷ Title: The invisible Splinter: How a Hidden Node.js Flaw Bypasses 160 Million Weekly Security Guards
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 04 Mar 2026 07:18:32 +0000
════════════════════════
⌗ Tags: #Vulnerability #ClientRequest #CVE_2018_12116 #HackerOne #HTTP request splitting #http_proxy_middleware #Node.js #r3verii #superagent #Tech News 2026 #TOCTOU #Vulnerability Research #web security
Penetration Testing Tools
The invisible Splinter: How a Hidden Node.js Flaw Bypasses 160 Million Weekly Security Guards
Within the Node.js ecosystem, a vulnerability has been unearthed pertaining to the foundational logic of the HTTP client,
21 views
Daily Writeups
⤷ Title: Response queue poisoning via H2.TE request smuggling
════════════════════════
𐀪 Author: Ⓥ
════════════════════════
ⴵ Time: Fri, 06 Mar 2026 12:03:46 GMT
════════════════════════
⌗ Tags: #http_request_smuggling #vulnerability #burpsuite #penetration_testing #cybersecurity
Medium
Response queue poisoning via H2.TE request smuggling
This lab is vulnerable to request smuggling due to the front-end server downgrading HTTP/2 requests even when they contain an ambiguous…
19 views
Daily Writeups
⤷ Title: Critical Request Smuggling & Cache Flaws Discovered in Cloudflare’s Pingora
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:18:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cache Poisoning #Cloudflare Pingora #CVE_2026_2833 #CVE_2026_2835 #CVE_2026_2836 #cybersecurity #http_request_smuggling #infosec #Patch Alert #Rust Security
Daily CyberSecurity
Critical Request Smuggling & Cache Flaws Discovered in Cloudflare's Pingora
Discover three critical flaws (including CVE-2026-2835) in Cloudflare's Pingora Rust framework causing request smuggling and cache poisoning. Update now.
12 views
Daily Writeups
⤷ Title: HTTP/2 request smuggling via CRLF injection
════════════════════════
𐀪 Author: Ⓥ
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:24:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #pentesting #cybersecurity #vulnerability #http_request_smuggling
Medium
HTTP/2 request smuggling via CRLF injection
HTTP/2 request smuggling can arise when a front-end server downgrades HTTP/2 traffic to HTTP/1.1 without properly sanitizing user-supplied…
33 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
════════════════════════
𐀪 Author: Aman Gupta
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 07:15:57 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #bug_bounty #web_security #http_request_smuggling
Medium
HTTP Request Smuggling: From Basics to Real Exploitation in Burp Repeater
Introduction
16 views
Daily Writeups
⤷ Title: Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
════════════════════════
𐀪 Author: Mohamed Amgad
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 00:13:15 GMT
════════════════════════
⌗ Tags: #http_request_smuggling #web_security #portswigger #bug_bounty
Medium
Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses
Before diving into the lab, there are some important concepts we need to understand first: what Content-Length and Transfer-Encoding are…
34 views
Daily Writeups
⤷ Title: How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
════════════════════════
𐀪 Author: Alareqi
════════════════════════
ⴵ Time: Sun, 10 May 2026 10:17:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #url #http_request #prompt_injection_attack
Medium
How a Single ;/ Bypassed a Cloud WAF and Reached Protected Spring Boot Endpoints
Most WAF bypasses involve encoding tricks, obscure headers, or parser confusion.
32 views
Daily Writeups
⤷ Title: Bir HTTP İsteği Gerçekten Nerede Biter?
════════════════════════
𐀪 Author: Zeki Kayaalp
════════════════════════
ⴵ Time: Wed, 13 May 2026 20:24:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request #bug_bounty #http_request_smuggling
Medium
Bir HTTP İsteği Gerçekten Nerede Biter?
Sen tarayıcı üzerinden bir siteye gitmek istediğinde tren hangi duraklarda geçiyor biliyor musun?
33 views
Daily Writeups
⤷ Title: AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
════════════════════════
𐀪 Author: 0xKishore
════════════════════════
ⴵ Time: Wed, 27 May 2026 11:51:31 GMT
════════════════════════
⌗ Tags: #info_sec_writeups #penetration_testing #http_request #appsecmaster #cybersecurity
Medium
AppSecMaster Beginner Track — Challenge 1: HTTP Methods-1 Walkthrough
Objective
7 views
Daily Writeups
⤷ Title: A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
════════════════════════
𐀪 Author: Sambhab Sahoo
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 02:35:37 GMT
════════════════════════
⌗ Tags: #ethical_hacking #infosec #cybersecurity #http_request #burpsuite
Medium
A Single Swapped HTTP Host Header Can Quietly Hijack an Entire Account
Single unvalidated request header can become an execution vehicle for password poisoning and server-side exploitation.
16 views
Daily Writeups
⤷ Title: HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
════════════════════════
𐀪 Author: Amit Pal | amitpxl
════════════════════════
ⴵ Time: Fri, 19 Jun 2026 13:51:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #http_request_smuggling #application_security #web_application_security
Medium
HTTP Request Smuggling vs HTTP Request Pipelining: Why They’re Often Confused
Stop screenshotting every double response in Burp Repeater. Here’s how to separate harmless protocol features from actual queue poisoning.
18 views
Daily Writeups
⤷ Title: HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
════════════════════════
𐀪 Author: Furkanalpgunay
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:22:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #http_request_smuggling #cybersecurity #penetration_testing #web_security
Medium
HTTP Request Smuggling: Turning Two Servers Against Each Other on a Single TCP Connection
From CL.TE and TE.CL to HTTP/2 downgrade and client-side desync — a complete, hands-on guide built from 20+ labs I solved myself.
13 views
Daily Writeups
⤷ Title: CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 01:01:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CPanel #CVE_2026_58047 #CVE_2026_58048 #database security #http_request_smuggling #privilege escalation #Web Hosting Security #WHM
Daily CyberSecurity
CVE-2026-58048: cPanel Root SQL Execution Flaw Patched
TL;DR: cPanel patched a cPanel root SQL execution flaw tracked as CVE-2026-58048, rated CVSS 9.4. A second, lower-severity bug, CVE-2026-58047, allows HTTP request smuggling under limited conditio…
31 views
Daily Writeups
⤷ Title: 52 Request Smuggling Reports. Two Rules Decide the Payout.
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Tue, 22 Sep 2026 22:42:06 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_security #bug_bounty #http_request_smuggling #cybersecurity
Medium
52 Request Smuggling Reports. Two Rules Decide the Payout.
30-Second Version: On August 5, PortSwigger published “CRLF-Powered Desync Attacks,” which turns plain HTTP header injection into full…
22 views
Daily Writeups
⤷ Title: HTTP Request Smuggling (TE.CL) to Session Hijacking via GraphQL
════════════════════════
𐀪 Author: Gentil Security
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 14:05:38 GMT
════════════════════════
⌗ Tags: #web_penetration_testing #http_request_smuggling #ethical_hacking #bug_bounty_writeup #cyper_security
Medium
HTTP Request Smuggling (TE.CL) to Session Hijacking via GraphQL
A deep dive into how an HTTP request-smuggling desynchronization can be chained with a flexible GraphQL request format to capture a…
14 views
Daily Writeups
⤷ Title: El Bandito — TryHackMe Writeup
════════════════════════
𐀪 Author: Shahadat Fahim
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:39:00 GMT
════════════════════════
⌗ Tags: #penetration_testing #tryhackme #web_security #cybersecurity #http_request_smuggling
Medium
El Bandito — TryHackMe Writeup
# El Bandito — TryHackMe Writeup
18 views
Daily Writeups
⤷ Title: TryHackMe: HTTP in Detail — Write-up & Walkthrough
════════════════════════
𐀪 Author: Sayedsamyelbadry
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 16:08:30 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #cybersecurity_awareness #http_request #web_security
Medium
TryHackMe: HTTP in Detail — Write-up & Walkthrough
Understanding HTTP and HTTPS protocols is essential for mastering web application security and penetration testing.
26 views