desync

Black Hat·48 min

• Black Hat
• Red Team
• Date: 2025
• Location: Black Hat

Security researchers examine technical aspects of HTTP Desync Attacks: Request Smuggling Reborn.

Black Hat·50 min

• Black Hat
• Red Team
• Date: 2025
• Location: Black Hat

Engineers explore architecture and security mechanisms for HTTP Desync Attacks: Smashing into the Cell Next Door.

Briefings·38 min

• Black Hat
• Red Team
• Date: Aug 2025
• Location: Las Vegas

James Kettle

Some people think the days of critical HTTP request smuggling attacks on hardened targets have passed.

OWASP Foundation·45 min

• OWASP
• AppSec
• Date: 2025
• Location: Owasp

James Kettle

James Kettle explores HTTP Desync Attacks: Smashing Into The Cell Next Door.

RomHack Conference 2025·42 min

• ROMHACK
• Blue Team
• Date: 2025
• Location: Romhack

James “albinowax” Kettle

Explores romHack 2025 - James “albinowax” Kettle - HTTP/1.1 Must Die! The Desync Endgame and evaluates key implications for security practitioners.

Main Stage·42 min

• DEF CON
• AppSec
• Date: Aug 2022
• Location: Las Vegas

James Kettle

PortSwigger head of research James Kettle unveils browser-powered desync attacks, turning victim web browsers into desynchronization weapons against major websites.

Main Stage·40 min

• DEF CON
• AppSec
• Date: Aug 2021
• Location: Las Vegas

James Kettle

PortSwigger researcher James Kettle pioneers HTTP/2 request smuggling, uncovering critical implementation flaws when front-end reverse proxies downgrade to back-end HTTP/1.1.

Main Stage·46 min

• DEF CON
• AppSec
• Date: Aug 2021
• Location: Las Vegas

Martin Doyhenard

Martin Doyhenard introduces HTTP Response Smuggling, exploiting desynchronization in HTTP/1.1 response pipelines to poison caches and hijack user sessions.