Skip to content
Making desync attacks easy with TRACE
portswigger.net | research | #bug-bounty | #request-smuggling | #exploitation | #http | #desync | #trace-method
Summary
The ancient TRACE method mirrors requests in responses, turning near-unexploitable desync vulnerabilities into full compromise when nothing else carries a payload, as shown in a bug bounty case.
- Published
- Collected