general
Blog post
Concealing payloads in URL credentials
Source: PortSwigger Research · Published · Last checked 3 hours ago ·
Publisher excerpt From PortSwigger Research
Last year Johan Carlsson discovered you could conceal payloads inside the credentials part of the URL . This was fascinating to me especially because the payload is not actually visible in the URL in
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.
Reference: PortSwigger Research — portswigger.net ↗