writeups.xyz / HTTP Request Splitting vulnerabilities exploitation

Submitter : c2a

Date: 1 June 2023

Bounty : undisclosed

Vulnerabilities :

• HTTP Request Splitting
• CRLF Injection
• Nginx Misconfiguration

Programs :

• AWS
• Yandex

Authors :

• Sergey Bobrov (@Black2fan)

Link :
https://offzone.moscow/upload/iblock/11a/sagouc86idiapdb8f29w41yaupqv6fwv.pdf