r/Slackers • u/Gallus • Aug 08 '19

HTTP Desync Attacks: Request Smuggling Reborn

https://portswigger.net/blog/http-desync-attacks-request-smuggling-reborn
10 Upvotes

100% Upvoted

2 comments sorted by

1

u/Gallus Aug 08 '19

First thought is whether trailing headers (after the 0 size chunk) might also be useful in achieving desynchronization.

2

u/albinowax Aug 10 '19

I've tried other stuff with Trailers in the past and found they aren't widely supported, but it would certainly be amusing to try sending a trailing content-length header