regilero's user avatar
regilero's user avatar
regilero's user avatar
regilero
  • Member for 9 years, 7 months
  • Last seen more than a month ago
  • France
8 votes
Accepted

Exploiting HTTP redirect function via the Host header

5 votes
Accepted

Combining HTTP smuggling & Trace HTTP method

3 votes

Large / Over-sizesd HTTP Header Lengths and Security Implications

2 votes

What does "connection" mean in context of request smuggling

2 votes

What are some potential attacks that could be done to a website that doesn't manage url-encoding properly?

2 votes

In te.cl type http request smuggling, how is the packet length in the smuggling request calculated?

1 vote

HTTP Response Splitting in practice

1 vote
Accepted

In which settings is it possible to launch a HTTP Response Splitting Attack but not completely replace the HTTP message?

1 vote

Is a HTTP Request Smuggling a concern when using load balancers?

1 vote
Accepted

Is HTTP Request Smuggling domain/subdomain wide or directory wide?

1 vote
Accepted

Arbitrary query parameter reflected in server response header. Is it exploitable?

0 votes
Accepted

What is happening to second response in HTTP Splitting?

0 votes

Server echoes HTTP headers back to client - any security issues with that?

0 votes

Is it possbile to conduct http header injection attack with a web site or web app uses https?