Curated security research, vulnerabilities, advisories and tools for practitioners.

#httponly

Security coverage tagged httponly.

1.

CRLF-Powered Desync Attacks: Beheading HTTP Streams

research | 2026-08-05 23:30 | portswigger.net | Original ↗ | .md | #vulnerability-research | #attack-chains | #web-security

2.

Stealing HttpOnly cookies with the cookie sandwich technique

research | 2025-06-30 16:01 | portswigger.net | Original ↗ | .md | #cookies | #exfiltration | #session-security