← Back to feed
research PortSwigger Research

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

PortSwigger Research

Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining.

Read the full story PortSwigger Research →

Related Coverage

research VMs won't contain cyber-capable agents Trail of Bits · Aug 26 research Exploits and vulnerabilities in Q2 2026 Kaspersky Securelist · Aug 26 research Recorded Future Launches AI Alert Filtering Recorded Future · Aug 26