---
id: 5509
title: "HTTP Desync Attacks: Request Smuggling Reborn"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn"
published_at: "2025-09-03T07:37:00Z"
tags: ["bug-bounty", "black-hat", "web-security", "http-desync", "request-smuggling", "portswigger", "paypal"]
phying_url: "https://phying.com/item/5509"
lang: en
---

# HTTP Desync Attacks: Request Smuggling Reborn

## Summary

James Kettle revives HTTP Request Smuggling as HTTP Desync Attacks, splicing requests into victims' connections to poison caches and compromise PayPal's login page, earning over $70k in bounties.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2025-09-03T07:37:00Z
- **Original:** https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn
- **Phying News:** https://phying.com/item/5509