writeups.xyz / Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling

Submitter : c2a

Date: 10 August 2022

Bounty : undisclosed

Vulnerabilities :

• HTTP Request Smuggling
• Desync Attack

Programs :

• AWS
• Amazon
• Akamai
• Cisco
• Verisign
• Pulse Secure
• Varnish

Authors :

• James Kettle (@Albinowax)

Link :
https://portswigger.net/research/browser-powered-desync-attacks