← Back to feed
research PortSwigger Research

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

PortSwigger Research

Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining.

Read the full story PortSwigger Research →

Related Coverage

research Agent Running in the Age of AI Recorded Future · Sep 22 research 21st September – Threat Intelligence Report Check Point Research · Sep 21 research SAML: A fractal of bad design Trail of Bits · Sep 21