Curated security research, vulnerabilities, advisories and tools for practitioners.

#http1-must-die

Security coverage tagged http1-must-die.

1.

Burp On Tour 2025: bringing the AppSec community together around the world

blog | 2025-12-12 11:34 | portswigger.net | original ↗ | #ai-security | #appsec | #burp-suite

2.

HTTP/1.1 must die: Dafydd Stuttard on what this means for enterprise security

blog | 2025-10-09 14:06 | portswigger.net | original ↗ | #http-desync | #request-smuggling | #portswigger

3.

How to join the desync endgame: Practical tips from pentester Tom Stacey

blog | 2025-09-18 15:51 | portswigger.net | original ↗ | #bug-bounty | #http-desync | #request-smuggling

4.

"The entire internet is broken": ethical hacking expert John Hammond meets James Kettle

research | 2025-08-27 09:11 | portswigger.net | original ↗ | #http-desync | #request-smuggling | #james-kettle

5.

HTTP/1.1 Must Die: What This Means for AppSec Leadership

blog | 2025-08-06 22:23 | portswigger.net | original ↗ | #appsec | #request-smuggling | #http1-must-die

6.

HTTP/1.1 Must Die: What This Means for In-House Pentesters

blog | 2025-08-06 22:23 | portswigger.net | original ↗ | #burp-suite | #http-desync | #request-smuggling

7.

HTTP/1.1 Must Die: What This Means for Bug Bounty Hunters

blog | 2025-08-06 22:23 | portswigger.net | original ↗ | #bug-bounty | #burp-suite | #http-desync

8.

HTTP/1.1 Must Die: What This Means for Contract Pentesters and MSSPs

blog | 2025-08-06 22:23 | portswigger.net | original ↗ | #cloud | #burp-suite | #http-desync

9.

PortSwigger at Black Hat & DEF CON 33

blog | 2025-07-08 09:17 | portswigger.net | original ↗ | #black-hat | #conference | #def-con