response-smuggling

1 talk tagged with this topic.

Filters+

Loading filters…

1–1 of 1 talk · loading…

Sort

Main Stage·46 min

DEF CON
AppSec
Date: Aug 2021
Location: Las Vegas

Response Smuggling: Pwning HTTP/1.1 Connections

Martin Doyhenard

Martin Doyhenard introduces HTTP Response Smuggling, exploiting desynchronization in HTTP/1.1 response pipelines to poison caches and hijack user sessions.

httpresponse-smugglingrequest-smuggling+2