---
id: 245
title: "The Desync Delusion: Are You Really Protected Against HTTP Request Smuggling?"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/the-desync-delusion-are-you-really-protected-against-http-request-smuggling"
published_at: "2025-08-06T22:22:44Z"
tags: ["http-desync", "request-smuggling", "detection", "portswigger", "dast", "burp-suite-dast"]
phying_url: "https://phying.com/item/245"
lang: en
---

# The Desync Delusion: Are You Really Protected Against HTTP Request Smuggling?

## Summary

Most DAST tools detect only basic CL.TE/TE.CL smuggling or fingerprint known CVEs; Burp Suite DAST probes desync primitives directly to deliver comprehensive request smuggling detection.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2025-08-06T22:22:44Z
- **Original:** https://portswigger.net/blog/the-desync-delusion-are-you-really-protected-against-http-request-smuggling
- **Phying News:** https://phying.com/item/245