PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Black Hat USA 2021: PortSwigger's latest research to be unveiled

portswigger.net | blog | #burp-suite | #black-hat | #request-smuggling | #research | #james-kettle | #http2 | #desync
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

James Kettle's Black Hat USA 2021 talk 'HTTP/2: The Sequel is Always Worse' unveils HTTP/2-exclusive desync attacks, cache poisoning and password theft, with Burp Suite support to follow.
Published
Collected

Related coverage

research · portswigger.net
HTTP/2: The Sequel is Always Worse
HTTP/2-exclusive desync attacks: implementation flaws and RFC imperfections enable cache poisoning, credential theft and request tunnelling against ALB, WAFs and CDNs, netting multiple max bounties.
blog · portswigger.net
HTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle
NahamSec and James Kettle break down request smuggling basics in a video: parser disagreements between front-end and back-end servers, HTTP/2 downgrades and real-world cases like Netflix.
research · portswigger.net
Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling
James Kettle turns victims' browsers into desync delivery platforms, exposing single-server sites and internal networks via client-side and pause-based desync against Apache, Varnish and web VPNs.
blog · bishopfox.com
h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c)
Jake Miller demonstrates how upgrading HTTP/1.1 connections to HTTP/2 cleartext (h2c) can smuggle requests past reverse proxy access controls and establish long-lived back-end access.
research · portswigger.net
Can AI do novel security research? Meet the HTTP Terminator
James Kettle's Black Hat USA 2026 research: the HTTP Terminator, an autonomous system that invented novel HTTP desync triggers and exploited banks, security products and government infrastructure.
research · portswigger.net
HTTP Desync Attacks: Request Smuggling Reborn
James Kettle revives HTTP Request Smuggling as HTTP Desync Attacks, splicing requests into victims' connections to poison caches and compromise PayPal's login page, earning over $70k in bounties.
Back