writeups.xyz / Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies

Submitter : c2a

Date: 25 July 2024

Bounty : undisclosed

Vulnerabilities :

• Web Cache Poisoning
• CPDoS
• HTTP Request Smuggling
• Access Control Bypass

Programs :

• ATS
• Nginx
• HAProxy

Authors :

• Bahruz Jabiyev (@BahruzJabiyev)
• Anthony Gavazzi
• Kaan Onarlioglu
• Engin Kirda

Link :
https://spaces-cdn.owlstown.com/blobs/exmixv7d3xutvlj6ksq80zkv4mot