Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer
vulnerability Blog post

Making desync attacks easy with TRACE

Source: PortSwigger Research · Published · Last checked 3 hours ago ·
Making desync attacks easy with TRACE
Image: PortSwigger Research
Read original source ↗ (portswigger.net)

Publisher excerpt From PortSwigger Research

Have you ever found an HTTP desync vulnerability that seemed impossible to exploit due to its complicated constraints? In this blogpost we will explore a new exploitation technique that can be used to

Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.

Reference: PortSwigger Research — portswigger.net ↗

Related news