Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Browser-Powered Desync Attacks - A New Frontier in HTTP Request Smuggling

Black Hat via YouTube

Overview

Explore a cutting-edge technique in HTTP request smuggling through this 37-minute Black Hat conference talk. Discover how to leverage victim web browsers as desync delivery platforms, expanding the scope of request smuggling attacks to single-server websites and internal networks. Learn to combine cross-domain requests with server vulnerabilities to poison browser connection pools, install backdoors, and unleash desync worms. Gain insights from security researcher James Kettle as he unveils this new frontier in web application security, demonstrating the potential risks and implications for both defenders and penetration testers.

Syllabus

Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling

Taught by

Black Hat

Reviews

Start your review of Browser-Powered Desync Attacks - A New Frontier in HTTP Request Smuggling

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.