writeups.xyz / Exploiting HTTP Parsers Inconsistencies

Submitter : c2a

Date: 17 June 2023

Bounty : undisclosed

Vulnerabilities :

• Parsing Issue
• WAF Bypass
• SSRF
• Desync Attack
• Cache Poisoning Attack

Programs :

• Nginx
• AWS
• Spring Boot
• Flask
• PHP

Authors :

• Rafael Da Costa Santos (@Rafabyte_)

Link :
https://rafa.hashnode.dev/exploiting-http-parsers-inconsistencies