Security field notes

Understand the bug. See the exploit. Ship the fix.

Practical guides to real-world web vulnerabilities, written by the team building the scanner that finds them.

Find a vulnerability guide

65 deep-dives · 27 topics

Follow via RSS

Posts tagged #http-desync

1 post

All topics Clear tag filter

Server-side requests & parsersOverview Transfer-Encoding : chunked

HTTP Request Smuggling8 min read

HTTP Request Smuggling, Explained: When Two Servers Disagree on Where a Request Ends

Request smuggling hides one HTTP request inside another by exploiting a front end and back end that frame the same bytes differently. Here is how CL.TE, TE.CL, TE.TE, CL.0 and HTTP/2 downgrades work, how to test for them safely, and how to make every hop agree.