PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle

portswigger.net | blog | #bug-bounty | #http-desync | #request-smuggling | #james-kettle | #video | #nahamsec | #http2
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

NahamSec and James Kettle break down request smuggling basics in a video: parser disagreements between front-end and back-end servers, HTTP/2 downgrades and real-world cases like Netflix.
Published
Collected

Related coverage

research · portswigger.net
"The entire internet is broken": ethical hacking expert John Hammond meets James Kettle
John Hammond and James Kettle discuss the HTTP/1.1 Must Die research in a video, covering new desync attack classes, CDN compromises, and the case for moving upstream connections to HTTP/2.
blog · portswigger.net
Black Hat USA 2021: PortSwigger's latest research to be unveiled
James Kettle's Black Hat USA 2021 talk 'HTTP/2: The Sequel is Always Worse' unveils HTTP/2-exclusive desync attacks, cache poisoning and password theft, with Burp Suite support to follow.
blog · portswigger.net
HTTP/1.1 Must Die: Conquering the 0.CL Challenge
Guest author b3xal dissects 0.CL request smuggling—front-end honors Content-Length: 0 while the back-end does not—and solves PortSwigger's lab with four PoCs using XSS and HEAD techniques.
blog · portswigger.net
HTTP/1.1 must die: Dafydd Stuttard on what this means for enterprise security
Dafydd Stuttard explains the enterprise implications of James Kettle's HTTP desync research: any upstream HTTP/1.1 hop, including CDN downgrades, leaves organizations exposed to request smuggling.
blog · portswigger.net
Hacking smarter with Burp AI: NahamSec puts Burp AI to the test
Bug bounty hunter NahamSec demonstrates Burp AI in a video walkthrough covering Repeater prompts, Explore Issue follow-ups, the Explainer feature, AI recorded logins and noise reduction.
blog · portswigger.net
HTTP/1.1 Must Die: What This Means for Bug Bounty Hunters
For bug bounty hunters, HTTP/1.1 Must Die is a major opportunity: desync flaws bypass traditional fixes and netted the research team over $200k in bounties in just two weeks.
Back