← Back to feed
research PortSwigger Research

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

PortSwigger Research

Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining.

Read the full story PortSwigger Research →

Related Coverage

research What's in a tag name? JavaScript, apparently PortSwigger Research · Aug 25 research State divergence enables unauthorized access Trail of Bits · Aug 25 research The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution Unit 42 · Aug 25