Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Response Smuggling - Pwning HTTP/1.1 Connections

Hack In The Box Security Conference via YouTube

Start learning Write review
University of the People Ad

Earn Your Business Degree, Tuition-Free, 100% Online!

Learn More → Babbel Ad

You’re only 3 weeks away from a new language

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This presentation examines response pipeline desynchronization as an HTTP smuggling attack vector. It demonstrates message injection, session hijacking, response flooding, and Response Scripting against real ERP systems.

Syllabus

Introduction
Agenda
What is Response Smuggling
Connection Headers
Exploits
Request Smuggling
Desynchronization
Synchronization Attack
Synchronization Attack Example
Demo
Cache Control Demo
In Real Systems
Video Demo
New Response
Conclusions
Questions

Taught by

Hack In The Box Security Conference

Reviews

Start your review of Response Smuggling - Pwning HTTP/1.1 Connections

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.