Skip to content
Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling
portswigger.net | research | #black-hat | #web-security | #request-smuggling | #desync | #client-side-desync | #pause-based-desync
Summary
James Kettle turns victims' browsers into desync delivery platforms, exposing single-server sites and internal networks via client-side and pause-based desync against Apache, Varnish and web VPNs.
- Published
- Collected