Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Mon, 14 Aug 2023 12:06:42 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Using regex comparisons and other advanced database features for real-time inspection of web server…
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/909666752166
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #computed_columns #sql_injection #regular_expressions #ip_addressing #web_server_security
Medium
Using regex comparisons and other advanced database features for real-time inspection of web server…
In Storing container logs on a database | Medium we saw how we can get server logs sent to CrateDB in real-time, and for demo purposes we…
23 views
Daily Writeups
β€· Title: OverTheWire Natas Level 1 to Level 10 Walk through
════════════════════════
π€ͺ Author: Anjula Hirimuthugoda
════════════════════════
β΄΅ Time: Mon, 30 Dec 2024 11:40:33 GMT
════════════════════════
βŒ— Tags: #web_server_security #natas #penetration_testing #overthewire #web_security
Medium
OverTheWire Natas Level 1 to Level 10 Walk through
Natas teaches the basics of server side web-I will guide you through the levels.
87 views
Daily Writeups
β€· Title: Basic Security Concept: FIM (File Integrity Monitoring)
════════════════════════
π€ͺ Author: N0ur5
════════════════════════
β΄΅ Time: Mon, 03 Feb 2025 02:02:07 GMT
════════════════════════
βŒ— Tags: #cybersecurity #web_server_security #powershell #defensive_security
Medium
Basic Security Concept: FIM (File Integrity Monitoring)
What’s up Medium reader? Glad you are here. Lets not waste any time. Today I will be writing something a little different than my usual —…
18 views
Daily Writeups
β€· Title: Testing HTTP Request Smuggling Using Nginx
════════════════════════
π€ͺ Author: Xinquanyip
════════════════════════
β΄΅ Time: Wed, 30 Apr 2025 14:21:26 GMT
════════════════════════
βŒ— Tags: #nginx #http_request_smuggling #hacking #cybersecurity #web_server_security
Medium
πŸ” Testing HTTP Request Smuggling Using Nginx
What is HTTP Request Smuggling?
22 views
Daily Writeups
β€· Title: Web Server Securityβ€Šβ€”β€ŠAttacks, Tools & Defense (CEH Guide for Ethical Hackers)
════════════════════════
π€ͺ Author: Cyber Wolf
════════════════════════
β΄΅ Time: Sat, 17 Jan 2026 11:56:22 GMT
════════════════════════
βŒ— Tags: #cybersecurity #ethical_hacking #web_server_security #cyber_security_awareness #web_server
Medium
🌐 Web Server Securityβ€Šβ€”β€ŠAttacks, Tools & Defense (CEH Guide for Ethical Hackers)
Web servers are the front door of the internet.
 Every website, API, cloud app, or SaaS platform depends on a web serverβ€Šβ€”β€Šand that makes…
41 views
Daily Writeups
β€· Title: Ghost Folders: β€œDirectory Shadowing” Hack Hijacks WordPress SEO
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 05 Feb 2026 00:11:09 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #apache #Directory Shadowing #Gambling Spam #Googlebot Cloaking #malware #nginx #SEO Spam #Sucuri #Web Server Security #wordpress
Daily CyberSecurity
Ghost Folders: "Directory Shadowing" Hack Hijacks WordPress SEO
New "directory shadowing" malware creates physical folders to hijack WordPress URLs. It feeds gambling spam to Googlebots while staying invisible.
11 views
Daily Writeups
β€· Title: High-Severity NGINX Flaw Lets Attackers Inject Malicious Data
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 05 Feb 2026 09:01:48 +0000
════════════════════════
βŒ— Tags: #Vulnerability #F5 #mitm #nginx #NGINX Plus #Patch Alert #reverse proxy #TLS Injection #Upstream Proxy #Web Server Security
Daily CyberSecurity
High-Severity NGINX Flaw Lets Attackers Inject Malicious Data
F5 warns of NGINX flaw CVE-2026-1642 (CVSS 8.2). MITM attackers can inject data into upstream TLS responses. Update to v1.29.5 immediately.
14 views
Daily Writeups
β€· Title: The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 06 Feb 2026 00:33:06 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Baota Panel #Datadog #Gambling Spam #Malicious Configuration #nginx #Proxy Pass #SEO Poisoning #SysAdmin #Traffic Hijacking #Web Server Security
Daily CyberSecurity
The Invisible Proxy: NGINX Hijacked for Silent SEO Poisoning
Hackers are hijacking NGINX servers via malicious config injections. Datadog warns of silent traffic redirection for SEO poisoning. Check your proxy_pass.
15 views
Daily Writeups
β€· Title: The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Fri, 06 Feb 2026 02:37:37 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Asia top_level domains #Baota Panel #CVE_2025_55182 #Cyber Espionage #Datadog #man_in_the_middle #MITM #Nginx #React2Shell #Tech News 2026 #traffic hijacking #web server security
Penetration Testing Tools
The Invisible Proxy: How Hackers Are Weaponizing NGINX and Baota Panels to Hijack Web Traffic
Security analysts at Datadog have unmasked an ongoing traffic interception campaign targeting NGINX servers and hosting management interfaces,
21 views
Daily Writeups
β€· Title: Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 20 Feb 2026 05:58:12 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #apache Tomcat #CVE_2025_66614 #CVE_2026_24733 #CVE_2026_24734 #Cyber Security #HTTP/0.9 #infosec #Patch Alert #SNI Bypass #Web Server Security
Daily CyberSecurity
Bypassing the Bouncer: Apache Tomcat Patches SNI & Legacy Protocol Flaws
Apache Tomcat rolls out urgent updates for versions 9, 10, and 11 to fix legacy HTTP/0.9 protocol confusion and SNI certificate bypass flaws. Patch now.
15 views
Daily Writeups
β€· Title: Securing Azure Virtual Networks with NSGs and ASGs
════════════════════════
π€ͺ Author: Ibidun Isaac
════════════════════════
β΄΅ Time: Fri, 13 Mar 2026 11:11:00 GMT
════════════════════════
βŒ— Tags: #web_server_security #application_security #azure_network_security
Medium
Securing Azure Virtual Networks with NSGs and ASGs
In this lab, I explored how to secure cloud infrastructure using Microsoft Azure networking tools, specifically Network Security Groups…
20 views
Daily Writeups
β€· Title: Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 13 May 2026 03:52:00 +0000
════════════════════════
βŒ— Tags: #Vulnerability #Apache HTTP Server #Cyber Security #double_free #infosec #Patch Alert #PoC #proof_of_concept #rce #Web Server Security
Daily CyberSecurity
Pre-Auth RCE Exposed: Apache HTTP Server Vulnerability and Exploit Code Hit the Public
Urgent: Public PoC for Apache CVE-2026-23918. A critical double-free in mod_http2 enables unauthenticated DoS and RCE. Update to Apache 2.4.67 immediately.
14 views
Daily Writeups
β€· Title: Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 14 May 2026 10:13:51 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_42945 #Cyber Security #heap overflow #HTTP/3 #infosec #memory corruption #nginx #NGINX 1.30.1 #Patch Alert #QUIC #rce #Web Server Security
Daily CyberSecurity
Nginx Releases Critical Update: Six Vulnerabilities Patched in New Stable Version
NGINX 1.30.1 fixes a 9.2 CVSS RCE flaw (CVE-2026-42945) and five other critical vulnerabilities. Protect your web infrastructure and update immediately!
39 views
Daily Writeups
β€· Title: HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 03 Jun 2026 04:05:31 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #CVE_2026_49975 #Denial of Service #HPACK Vulnerability #HTTP/2 Bomb #Public Exploit Code #Web Server Security
Daily CyberSecurity
HTTP/2 Bomb Exploit Details and PoC Publicly Disclosed
The dangerous HTTP/2 Bomb exploit has been publicly disclosed with a PoC. Learn how this memory exhaustion flaw threatens major enterprise web servers.
12 views
Daily Writeups
β€· Title: Apache Tomcat Vulnerabilities Allow Authentication Bypass
════════════════════════
π€ͺ Author: Do Son
════════════════════════
β΄΅ Time: Wed, 01 Jul 2026 02:31:58 +0000
════════════════════════
βŒ— Tags: #Vulnerability Report #apache Tomcat #Authentication Bypass #CVE_2026_55957 #GSSAPI #JNDIRealm #Tomcat security #Tomcat vulnerability #Web Server Security
Daily CyberSecurity
Apache Tomcat Vulnerabilities Allow Authentication Bypass
TL;DR The Apache Tomcat project disclosed seven vulnerabilities on 29 June 2026. The most serious Apache Tomcat vulnerabilities let an attacker bypass authentication. The flaws span Tomcat 7 throu…
14 views