PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup

yeswehack.com | blog | #ai-security | #rce | #http-desync | #request-smuggling | #css-injection | #research-roundup | #crlf | #robotics
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

This roundup covers James Kettle's autonomous research cascade, CRLF-powered desync attacks, a CSS bomb in webmail, and unauthenticated root RCE on Unitree G1 robots.
Published
Collected

Related coverage

blog · yeswehack.com
How to use Claude Code for Bug Bounty: find fast, validate manually
In blind bug bounty labs, Claude Code excelled at recon and source review for DOM XSS and H2.TE request smuggling but stalled at proving exploitability — a teammate, not a replacement.
blog · portswigger.net
HTTP/1.1 Must Die: What This Means for Bug Bounty Hunters
For bug bounty hunters, HTTP/1.1 Must Die is a major opportunity: desync flaws bypass traditional fixes and netted the research team over $200k in bounties in just two weeks.
blog · portswigger.net
HTTP/1.1 Must Die: What This Means for Contract Pentesters and MSSPs
For contract pentesters and MSSPs, HTTP/1.1 Must Die highlights a service gap: demonstrating hidden desync risks in client environments can deliver findings competitors miss.
blog · portswigger.net
The Desync Delusion: Are You Really Protected Against HTTP Request Smuggling?
Most DAST tools detect only basic CL.TE/TE.CL smuggling or fingerprint known CVEs; Burp Suite DAST probes desync primitives directly to deliver comprehensive request smuggling detection.
blog · portswigger.net
HTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle
NahamSec and James Kettle break down request smuggling basics in a video: parser disagreements between front-end and back-end servers, HTTP/2 downgrades and real-world cases like Netflix.
research · portswigger.net
Can AI do novel security research? Meet the HTTP Terminator
James Kettle's Black Hat USA 2026 research: the HTTP Terminator, an autonomous system that invented novel HTTP desync triggers and exploited banks, security products and government infrastructure.
Back