Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle

portswigger.net | blog | #bug-bounty | #http-desync | #request-smuggling | #james-kettle | #video | #nahamsec | #http2

Summary

NahamSec and James Kettle break down request smuggling basics in a video: parser disagreements between front-end and back-end servers, HTTP/2 downgrades and real-world cases like Netflix.
Published
Collected

original ↗

Related coverage

  1. "The entire internet is broken": ethical hacking expert John Hammond meets James Kettle (portswigger.net)
  2. Black Hat USA 2021: PortSwigger's latest research to be unveiled (portswigger.net)
  3. HTTP/1.1 Must Die: Conquering the 0.CL Challenge (portswigger.net)
  4. HTTP/1.1 must die: Dafydd Stuttard on what this means for enterprise security (portswigger.net)
  5. Hacking smarter with Burp AI: NahamSec puts Burp AI to the test (portswigger.net)
  6. HTTP/1.1 Must Die: What This Means for AppSec Leadership (portswigger.net)

back