writeups.xyz / Making desync attacks easy with TRACE

Submitter : c2a

Date: 19 March 2024

Bounty : undisclosed

Vulnerabilities :

• Desync Attack
• HTTP Request Smuggling
• Web Cache Poisoning

Programs :

• Undisclosed

Authors :

• Martin Doyhenard (@Tincho_508)

Link :
https://portswigger.net/research/trace-desync-attack