Skip to content
HTTP/1.1 Must Die: What This Means for In-House Pentesters
portswigger.net | blog | #burp-suite | #http-desync | #request-smuggling | #pentest | #http1-must-die | #cdn
Summary
Why in-house pentesters should revisit request smuggling: mitigations have made desync flaws harder to spot, and Burp Suite tools can help detect and eliminate upstream HTTP/1.1.
- Published
- Collected