general
Blog post
Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling
Source: PortSwigger Research · Published · Last checked 2 seconds ago ·
Publisher excerpt From PortSwigger Research
Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining. This is usually a false positive, but sometimes there's actually a real
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.
Reference: PortSwigger Research — portswigger.net ↗