---
id: 236
title: "How to join the desync endgame: Practical tips from pentester Tom Stacey"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/how-to-join-the-desync-endgame-practical-tips-from-pentester-tom-stacey"
published_at: "2025-09-18 15:51"
tags: ["bug-bounty", "http-desync", "request-smuggling", "http1-must-die", "cdn", "guest-post"]
phying_url: "https://phying.com/item/236"
lang: en
---

# How to join the desync endgame: Practical tips from pentester Tom Stacey

## Summary

Guest post by pentester Tom Stacey (@t0xodile) reviewing the HTTP/1.1 Must Die research, its two new desync vulnerability classes, and practical guidance for joining the desync endgame.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2025-09-18 15:51
- **Original:** https://portswigger.net/blog/how-to-join-the-desync-endgame-practical-tips-from-pentester-tom-stacey
- **Phying News:** https://phying.com/item/236