← Back to feed
research PortSwigger Research

CRLF-Powered Desync Attacks: Beheading HTTP Streams

PortSwigger Research •

Abstract In this paper we’ll show that HTTP Header Injection is severely underestimated.

Read the full story PortSwigger Research →

Related Coverage

research MATCHBOIL: New tricks, same old evil intentions ESET Research · Oct 8 research Introducing AlertZero: Inbox zero for your alert queue Elastic Security Labs · Oct 8 research Japan Adopts Proactive Cyber Defense Strategy Recorded Future · Oct 8