Daily Writeups
@Daily_Writeups
4.12K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.12K subscribers
Daily Writeups
⤷ Title: The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:33:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Baota Panel #Datadog #Gambling Spam #Malicious Configuration #nginx #Proxy Pass #SEO Poisoning #SysAdmin #Traffic Hijacking #Web Server Security
Daily CyberSecurity
The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
Hackers are hijacking NGINX servers via malicious config injections. Datadog warns of silent traffic redirection for SEO poisoning. Check your proxy_pass.
16 views
Daily Writeups
⤷ Title: The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:37:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Asia top_level domains #Baota Panel #CVE_2025_55182 #Cyber Espionage #Datadog #man_in_the_middle #MITM #Nginx #React2Shell #Tech News 2026 #traffic hijacking #web server security
Penetration Testing Tools
The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
Security analysts at Datadog have unmasked an ongoing traffic interception campaign targeting NGINX servers and hosting management interfaces,
25 views
Daily Writeups
⤷ Title: Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 09:44:03 +0000
════════════════════════
⌗ Tags: #Data Leak #.git folder #Credential Theft #data leak #DevOps Security #Git #misconfiguration #Mysterium VPN #source code exfiltration #Tech News 2026 #version control #web server hardening
Penetration Testing Tools
Open Source, Open Access: 5 Million Servers Expose Critical Git Metadata and Credentials
Approximately five million web servers globally have been identified as misconfigured, exposing sensitive Git administrative metadata and precipitating
39 views
Daily Writeups
⤷ Title: Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 05:58:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2025_66614 #CVE_2026_24733 #CVE_2026_24734 #Cyber Security #HTTP/0.9 #infosec #Patch Alert #SNI Bypass #Web Server Security
Daily CyberSecurity
Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws
Apache Tomcat rolls out urgent updates for versions 9, 10, and 11 to fix legacy HTTP/0.9 protocol confusion and SNI certificate bypass flaws. Patch now.
15 views
Daily Writeups
⤷ Title: Securing Azure Virtual Networks with NSGs and ASGs
════════════════════════
𐀪 Author: Ibidun Isaac
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 11:11:00 GMT
════════════════════════
⌗ Tags: #web_server_security #application_security #azure_network_security
Medium
Securing Azure Virtual Networks with NSGs and ASGs
In this lab, I explored how to secure cloud infrastructure using Microsoft Azure networking tools, specifically Network Security Groups…
20 views
Daily Writeups
⤷ Title: From Vulnerability to Resilience: Hardening an Apache Tomcat Server (Hands-on Security Walkthrough)
════════════════════════
𐀪 Author: Umeshpandeybtech
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 14:34:00 GMT
════════════════════════
⌗ Tags: #application_security #apache_tomcat_security #penetration_testing #web_server_hardening #cybersecurity
Medium
From Vulnerability to Resilience: Hardening an Apache Tomcat Server (Hands-on Security Walkthrough)
🧠 Why This Matters
14 views
Daily Writeups
⤷ Title: Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:00:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #CVE_2026_29146 #CVE_2026_34486 #Encryption Bypass #infosec #Java security #Kubernetes Security #request smuggling #vulnerability management #web server
Daily CyberSecurity
Encryption Bypasses and Kubernetes Token Leaks Hit Apache Tomcat
Apache Tomcat discloses 10 vulnerabilities including encryption bypasses and Kubernetes token leaks. Upgrade now to secure your Java-based web applications.
12 views
Daily Writeups
⤷ Title: Next-Gen Performance: NGINX 1.30.0 Stable Arrives with HTTP/2 Backend & Early Hints
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 10:06:16 +0000
════════════════════════
⌗ Tags: #Technology #Encrypted ClientHello #HTTP Early Hints #HTTP/2 Upstream #load balancing #Multipath TCP #Networking #NGINX 1.30.0 #OpenSSL 4.0 #reverse proxy #Web Server
Penetration Testing Tools
Next-Gen Performance: NGINX 1.30.0 Stable Arrives with HTTP/2 Backend & Early Hints
Nginx has inaugurated the stable 1.30.0 release, successfully concluding an extensive developmental cycle within the 1.29.x branch. This
15 views
Daily Writeups
⤷ Title: Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 03:52:00 +0000
════════════════════════
⌗ Tags: #Vulnerability #Apache HTTP Server #Cyber Security #double_free #infosec #Patch Alert #PoC #proof_of_concept #rce #Web Server Security
Daily CyberSecurity
Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
The detailed disclosure of a critical flaw in Apache HTTP Server 2.4.66 is now public. The vulnerability, tracked as CVE-2026-23918, involves a dangerous double-free primitive in the widely used m…
16 views
Daily Writeups
⤷ Title: Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 10:13:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_42945 #Cyber Security #heap overflow #HTTP/3 #infosec #memory corruption #nginx #NGINX 1.30.1 #Patch Alert #QUIC #rce #Web Server Security
Daily CyberSecurity
Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
The web infrastructure world received a major wake-up call today as nginx-1.30.1 was released to address a suite of six security vulnerabilities. These flaws range from high-severity arbitrary cod…
43 views
Daily Writeups
⤷ Title: Web Server Attacks — I Walkthrough Notes | TryHackMe
════════════════════════
𐀪 Author: Sle3pyHead ‍
════════════════════════
ⴵ Time: Thu, 14 May 2026 10:36:36 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_writeup #cybersecurity #tryhackme_walkthrough #web_server
Medium
Web Server Attacks — I Walkthrough Notes | TryHackMe
TryHackMe room on web servers, headers, files, and misconfigurations
52 views
Daily Writeups
⤷ Title: Tools for Web Applications Stress Testing (Load & Performance Validation)
════════════════════════
𐀪 Author: Adam Pentester
════════════════════════
ⴵ Time: Sun, 17 May 2026 09:20:09 GMT
════════════════════════
⌗ Tags: #penetration_testing #web_attack #cybersecurity #web_server_attcks #web_app_security
Medium
Tools for Web Applications Stress Testing (Load & Performance Validation)
Tools for Web Applications Stress Testing (Load & Performance Validation) Before any system goes live, one of the key questions is whether it can handle real-world traffic without degrading or …
28 views
Daily Writeups
⤷ Title: What Are the Types of Attacks Against Web Servers?
════════════════════════
𐀪 Author: Vpshosting
════════════════════════
ⴵ Time: Mon, 18 May 2026 05:49:42 GMT
════════════════════════
⌗ Tags: #types_of_attacks #web_server_attacks #hacking #server_attack
Medium
What Are the Types of Attacks Against Web Servers?
Web servers play a pivotal role in the digital ecosystem, powering websites, applications, and services critical to businesses and…
13 views
Daily Writeups
⤷ Title: Web Server Attacks — I
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Fri, 29 May 2026 06:49:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_server_attacks #tryhackme
Medium
Web Server Attacks — I
Enumerate and identify misconfigurations across Apache, Nginx, Node.js, and Python HTTP Server.
25 views
Daily Writeups
⤷ Title: Web Server Attacks — II | TryHackMe
════════════════════════
𐀪 Author: Ryca
════════════════════════
ⴵ Time: Sun, 31 May 2026 08:58:57 GMT
════════════════════════
⌗ Tags: #tryhackme #web_server_attacks #cybersecurity #pentesting
Medium
Web Server Attacks — II | TryHackMe
Attack IIS through fingerprinting, tilde enumeration, WebDAV shell upload, and learn automation.
43 views
Daily Writeups
⤷ Title: HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 04:05:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_49975 #Denial of Service #HPACK Vulnerability #HTTP/2 Bomb #Public Exploit Code #Web Server Security
Daily CyberSecurity
HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
A devastating network security threat has shocked the web hosting industry this week. Specifically, Calif, a security firm from California, publicly published full details regarding a dangerous HT…
12 views
Daily Writeups
⤷ Title: Web Server Attacks — II | TryHackMe
════════════════════════
𐀪 Author: Binish Alamgir
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 09:34:04 GMT
════════════════════════
⌗ Tags: #web_server_attacks #tryhackme #cybersecurity #penetration_testing #tryhackme_walkthrough
Medium
Web Server Attacks — II | TryHackMe
Task 1 Introduction:
27 views
Daily Writeups
⤷ Title: Apache Tomcat Vulnerabilities Allow Authentication Bypass
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 02:31:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #Authentication Bypass #CVE_2026_55957 #GSSAPI #JNDIRealm #Tomcat security #Tomcat vulnerability #Web Server Security
Daily CyberSecurity
Apache Tomcat Vulnerabilities Allow Authentication Bypass
TL;DR The Apache Tomcat project disclosed seven vulnerabilities on 29 June 2026. The most serious Apache Tomcat vulnerabilities let an attacker bypass authentication. The flaws span Tomcat 7 throu…
18 views
Daily Writeups
⤷ Title: Web Server Attacks — I | Web Application Security Fundamentals | Jr Penetration Tester TryHackMe
════════════════════════
𐀪 Author: Aalishaf
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 02:01:02 GMT
════════════════════════
⌗ Tags: #tryhackme #web_server #linux #cybersecurity #web_application_security
Medium
Web Server Attacks — I | Web Application Security Fundamentals | Jr Penetration Tester TryHackMe
Task 2
26 views
Daily Writeups
⤷ Title: NTA.AC.IN — Casual External Security Assessment
════════════════════════
𐀪 Author: Praveen Rathod(Radhe_karn)
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 09:22:45 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_server #web_security #reconnaissance #ethical_hacking
Medium
NTA.AC.IN — Casual External Security Assessment
By Praveen “Radheya Karn” | Cybersecurity Enthusiast
39 views