Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 10 Apr 2023 02:46:46 GMT
———————————————
✏️Title: Path Normalization Crash Course 101
———————————————
📎Link: https://medium.com/p/bc9fa41a0a6e
———————————————
Tags: #bug_bounty #cybersecurity #normalization #hacking #reverse_proxy

Medium

Path Normalization Crash Course 101

path normalization crash course

9 views04:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 30 Aug 2023 17:26:32 GMT
———————————————
✏️Title: Nginx Proxy Manager, A Reverse Proxy Management System
———————————————
📎Link: https://medium.com/p/281140a21d7e
———————————————
Tags: #saas #servers #linux #reverse_proxy #nginx

Medium

🔧 Nginx Proxy Manager, A Reverse Proxy Management System 🔧

In this post,

11 views23:02

Daily Writeups

⤷ Title: Reverse Shell Commands and How to Detect Them
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Wed, 02 Apr 2025 04:55:09 GMT
════════════════════════
⌗ Tags: #bug_bounty #reverse_shell #information_technology #hacking #reverse_proxy

Medium

Reverse Shell Commands and How to Detect Them

A reverse shell is a technique used by attackers to gain unauthorized access to a remote system by initiating an outbound connection from…

36 views06:04

Daily Writeups

⤷ Title: CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 27 Apr 2025 00:06:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_43859 #CVSS 9.1 #h11 #HTTP vulnerability #Python #request smuggling #reverse proxy #Web Security

Daily CyberSecurity

CVE-2025-43859: Request Smuggling Vulnerability in Python’s h11 HTTP Library

A CVE-2025-43859 vulnerability in Python’s h11 library may lead to request smuggling attacks when paired with buggy proxies. Patch to version 0.15.0 now.

30 views02:04

Daily Writeups

⤷ Title: Fake GIF and Reverse Proxy Used in Sophisticated Card Skimming Attack on Magento
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 29 Apr 2025 00:25:12 +0000
════════════════════════
⌗ Tags: #Malware #credit card theft #eCommerce Breach #Fake GIF Malware #MageCart Attack #Magento Security #Reverse Proxy Skimming #Sucuri Research #web skimming

Daily CyberSecurity

Fake GIF and Reverse Proxy Used in Sophisticated Card Skimming Attack on Magento

A fake GIF and malicious reverse proxy server enabled a multi-stage card skimming attack on a Magento site, exposing customer credit card data and credentials.

17 views02:04

Daily Writeups

⤷ Title: Critical Flaw in Fabio Load Balancer Allows HTTP Header Tampering & Access Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Jun 2025 00:39:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #access control bypass #cybersecurity #Fabio #HTTP Headers #load balancer #reverse proxy #Server Security #Web Security

Daily CyberSecurity

Critical Flaw in Fabio Load Balancer Allows HTTP Header Tampering & Access Bypass

A critical flaw in Fabio load balancer allows malicious clients to manipulate or strip HTTP headers, leading to potential access control bypass. Upgrade to 1.6.6.

11 views02:04

Daily Writeups

⤷ Title: NGINX Makes HTTPS Easier Than Ever with New ACME Module
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 08:16:07 +0000
════════════════════════
⌗ Tags: #Technology #ACME #Automation #certificates #https #nginx #ngx_http_acme_module #reverse proxy #SSL/TLS #Web Security

Daily CyberSecurity

NGINX Makes HTTPS Easier Than Ever with New ACME Module

NGINX's new ACME module automates SSL/TLS certificate management, allowing users to request and renew certificates directly from the NGINX configuration.

27 views12:04

Daily Writeups

⤷ Title: Operation Rewrite: Chinese Threat Actors Hijack Websites in Massive Search Poisoning Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Sep 2025 07:46:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BadIIS #cybersecurity #Operation Rewrite #Palo Alto Networks #reverse proxy #Search Poisoning #SEO Poisoning #Threat Actors

Penetration Testing Tools

Operation Rewrite: Chinese Threat Actors Hijack Websites in Massive Search Poisoning Campaign

Unit 42 reveals "Operation Rewrite," a large-scale search poisoning scheme using BadIIS to hijack servers, manipulate SEO, and redirect traffic for fraud.

14 views08:04

Daily Writeups

⤷ Title: Critical Flaw in Termix Docker Image (CVE-2025-59951) Leaks SSH Credentials Without Authentication
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 02 Oct 2025 02:35:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #Credential Leak #CVE_2025_59951 #cybersecurity #docker #reverse proxy #ssh #Termix

Daily CyberSecurity

Critical Flaw in Termix Docker Image (CVE-2025-59951) Leaks SSH Credentials Without Authentication

A critical flaw (CVE-2025-59951) in the Termix Docker image's reverse proxy logic allows unauthenticated attackers to steal sensitive SSH host credentials. Update to v1.7.0 now.

9 views06:04

Daily Writeups

⤷ Title: Critical Denial-of-Service Vulnerability Discovered in HAProxy
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 03:11:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #Denial of Service #dos #HAProxy #load balancer #mjson #reverse proxy #Web Security

Daily CyberSecurity

Critical Denial-of-Service Vulnerability Discovered in HAProxy

A Critical flaw (CVE-2025-11230) in HAProxy’s mjson number parser allows unauthenticated attackers to cause a Denial of Service with a single crafted JSON payload. Update immediately.

15 views04:04

Daily Writeups

⤷ Title: Forward Proxy vs Reverse Proxy: The Deep Dive Every Engineer Must Understand
════════════════════════
𐀪 Author: Arvind Kumar
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 02:02:42 GMT
════════════════════════
⌗ Tags: #reverse_proxy #api_security #system_design_interview #forward_proxy #microservices

Medium

Forward Proxy vs Reverse Proxy: The Deep Dive Every Engineer Must Understand

There are few networking components as critical — and as misunderstood — as forward proxies and reverse proxies. Both act as…

29 views04:04

Daily Writeups

⤷ Title: Kubernetes Ingress NGINX EoL: Critical Component Deprecated Due to Lack of Funding
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:04:04 +0000
════════════════════════
⌗ Tags: #Technology #cloud native #Deprecation #EOL #FFmpeg #Ingress NGINX #Kubernetes #open source #reverse proxy #Sustainability

Penetration Testing Tools

Kubernetes Ingress NGINX EoL: Critical Component Deprecated Due to Lack of Funding

KubeCon in Atlanta delivered a wave of high-profile Kubernetes announcements, yet one of the most consequential developments slipped

7 views10:04

Daily Writeups

⤷ Title: Reverse Proxy
════════════════════════
𐀪 Author: Anandhu Kannan
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 07:19:38 GMT
════════════════════════
⌗ Tags: #proxychains #reverse_proxy #nginx #hacking #servers

Medium

Reverse Proxy

What is a Reverse Proxy?

28 views08:04

Daily Writeups

⤷ Title: High-Severity NGINX Flaw Lets Attackers Inject Malicious Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 09:01:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #F5 #mitm #nginx #NGINX Plus #Patch Alert #reverse proxy #TLS Injection #Upstream Proxy #Web Server Security

Daily CyberSecurity

High-Severity NGINX Flaw Lets Attackers Inject Malicious Data

F5 warns of NGINX flaw CVE-2026-1642 (CVSS 8.2). MITM attackers can inject data into upstream TLS responses. Update to v1.29.5 immediately.

14 views14:03

Daily Writeups

⤷ Title: The Mirror Trap: How the “Starkiller” Phishing Kit Proxies Real Sites to Neutralize MFA
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:17:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Theft #Cybersecurity 2026 #Docker #headless Chrome #Jinkusu #MFA Bypass #PhaaS #Phishing_as_a_Service #reverse proxy #Session Hijacking #Starkiller

Penetration Testing Tools

The Mirror Trap: How the "Starkiller" Phishing Kit Proxies Real Sites to Neutralize MFA

A sophisticated new phishing instrument dubbed Starkiller has emerged within clandestine marketplaces, fundamentally altering the mechanics of credential

5 views05:04

Daily Writeups

⤷ Title: Google Ignites Developer Fury with Mass OpenClaw Ban Wave
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 07:17:10 +0000
════════════════════════
⌗ Tags: #Technology #@Steipete #Account Suspension #developer news 2026 #Google AI Ultra #Google Antigravity #OAuth exploitation #OpenClaw AI #reverse proxy #tech controversy #terms of service breach

Daily CyberSecurity

Google Ignites Developer Fury with Mass OpenClaw Ban Wave

Google has suspended thousands of Antigravity accounts linked to OpenClaw. Paid developers are hitting 403 errors with zero warning. Is your AI workflow safe?

17 views09:04

Daily Writeups

⤷ Title: Next-Gen Performance: NGINX 1.30.0 Stable Arrives with HTTP/2 Backend & Early Hints
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:06:16 +0000
════════════════════════
⌗ Tags: #Technology #Encrypted ClientHello #HTTP Early Hints #HTTP/2 Upstream #load balancing #Multipath TCP #Networking #NGINX 1.30.0 #OpenSSL 4.0 #reverse proxy #Web Server

Penetration Testing Tools

Next-Gen Performance: NGINX 1.30.0 Stable Arrives with HTTP/2 Backend & Early Hints

Nginx has inaugurated the stable 1.30.0 release, successfully concluding an extensive developmental cycle within the 1.29.x branch. This

14 views11:04

Daily Writeups

⤷ Title: Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 03:02:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_8711 #Denial of Service #F5 Security Advisory #Heap Buffer Overflow #NGINX JavaScript #njs module #Patch Alert #Remote Code Execution #reverse proxy #Web Infrastructure

Daily CyberSecurity

Critical 9.2 CVSS: NGINX JavaScript Module Flaw (CVE-2026-8711) Triggers Heap Buffer Overflows

F5 warns of a critical 9.2 CVSS flaw (CVE-2026-8711) in NGINX JavaScript (njs). Unauthenticated attackers can trigger heap overflows and potential RCE.

17 views05:04

Daily Writeups

⤷ Title: HAProxy Vulnerabilities Expose Reverse-Proxy Servers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 00:00:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_55203 #CVE_2026_55204 #HAProxy Vulnerabilities #Reverse_Proxy Security

Daily CyberSecurity

HAProxy Vulnerabilities Expose Reverse-Proxy Servers

Two critical HAProxy vulnerabilities threaten reverse-proxy security. These flaws allow denial of service and smuggling attacks. Patch servers immediately.

16 views02:04

About

Blog

Apps

Platform