CYBERSECURITY
FEATURED ANALYSIS
Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling
SOURCE
PortSwigger Research
DATE
READ
1 min read
Sometimes people think they’ve found HTTP request smuggling, when they’re actually just observing HTTP keep-alive or pipelining. This is usually a false positive, but sometimes there’s actually a real
Sometimes people think they’ve found HTTP request smuggling, when they’re actually just observing HTTP keep-alive or pipelining. This is usually a false positive, but sometimes there’s actually a real