← Back to feed
research PortSwigger Research

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

PortSwigger Research

Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining.

Read the full story PortSwigger Research →

Related Coverage

research Auditing in the age of (good enough) AI Trail of Bits · Sep 18 research A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity Unit 42 · Sep 18 research ‘Nudify’ apps: What to do if someone makes a fake nude of you ESET Research · Sep 18