Etiqueta: Practitioner

Username enumeration via account lock

Broken brute-force protection, IP block

Username enumeration via response timing

HTTP request smuggling, obfuscating the TE header

HTTP request smuggling, basic TE.CL vulnerability

HTTP request smuggling, basic CL.TE vulnerability

CL.0 request smuggling

HTTP/2 request smuggling via CRLF injection

H2.CL request smuggling

Response queue poisoning via H2.TE request smuggling