← Back to feed
research PortSwigger Research

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

PortSwigger Research •

Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining.

Read the full story PortSwigger Research →

Related Coverage

research MATCHBOIL: New tricks, same old evil intentions ESET Research · Oct 8 research Introducing AlertZero: Inbox zero for your alert queue Elastic Security Labs · Oct 8 research Japan Adopts Proactive Cyber Defense Strategy Recorded Future · Oct 8