← Back to feed
research PortSwigger Research

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

PortSwigger Research •

Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining.

Read the full story PortSwigger Research →

Related Coverage

research MacSync under the microscope: new delivery methods and a new payload Kaspersky Securelist · Sep 24 research Russia Escalating Hybrid Attacks Across Europe Recorded Future · Sep 24 research HTTP/3 in Burp Suite - it’s time to find a bigger wordlist PortSwigger Research · Sep 23