writeups.xyz / Listen to the whispers: web timing attacks that actually work

Submitter : c2a

Date: 7 August 2024

Bounty : undisclosed

Vulnerabilities :

• Timing Attack
• SSRF
• WAF Bypass
• Reverse Proxy Misconfiguration

Programs :

• Undisclosed

Authors :

• James Kettle (@Albinowax)

Link :
https://portswigger.net/research/listen-to-the-whispers-web-timing-attacks-that-actually-work