Questions tagged [request-smuggling]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
43 views

Python Script POST Body Containing CRLF Characters and Malformed Headers. HTTP Request Smuggling [migrated]

Lately I have been attempting Portswiggers WebSecAcademy's HTTP request smuggling labs with the additional challenge of writing a python script to complete the challenge for me. Intended solution ...
0
votes
0answers
50 views

Is this an example of HTTP request smuggling?

I believe I found an HTTP smuggling vulnerability but I'm not sure. When I send a request like this POST /test HTTP/1.1 Host: www.example.com Accept-Encoding: gzip, deflate Accept: */* Accept-...
2
votes
1answer
43 views

What does “connection” mean in context of request smuggling

I recently read about request smuggling. This is a very interesting attack that I didn't know about. A vulnerability to this was recently discovered at Slack, disclosed responsibly and a bounty was ...