Etiqueta: Practitioner

Exploiting HTTP request smuggling to deliver reflected XSS

Exploiting HTTP request smuggling to capture other users’ requests

Exploiting HTTP request smuggling to reveal front-end request rewriting

Exploiting HTTP request smuggling to bypass front-end security controls, TE.CL vulnerability

Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE vulnerability

Manipulating the WebSocket handshake to exploit vulnerabilities

Cross-site WebSocket hijacking

HTTP request smuggling, confirming a TE.CL vulnerability via differential responses

HTTP request smuggling, confirming a CL.TE vulnerability via differential responses

Exploiting time-sensitive vulnerabilities