Python, Prompt Engineering, Data Science — Build the Skills Employers Want Now
The Fastest Way to Become a Backend Developer Online
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore a cutting-edge technique in HTTP request smuggling through this 37-minute Black Hat conference talk. Discover how to leverage victim web browsers as desync delivery platforms, expanding the scope of request smuggling attacks to single-server websites and internal networks. Learn to combine cross-domain requests with server vulnerabilities to poison browser connection pools, install backdoors, and unleash desync worms. Gain insights from security researcher James Kettle as he unveils this new frontier in web application security, demonstrating the potential risks and implications for both defenders and penetration testers.
Syllabus
Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling
Taught by
Black Hat