Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Practical Attacks Using HTTP Request Smuggling

NahamSec via YouTube

Start learning Write review
Coursera Ad

AI, Data Science & Cloud Certificates from Google, IBM & Meta

Learn More → Boot.dev Ad

Learn Backend Development Part-Time, Online

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This advanced course demonstrates practical HTTP request-smuggling attacks, including CL.TE and TE.CL desynchronization, testing methods, reconnaissance, and proof-of-concept session theft.

Syllabus

Intro
CL.TE / TE.CL Desync Attacks
CL.TE Desync Attack
Testing for Request Smuggling
Impact Radius of RS
Desync Attack/Recon Story #1
Desync Attack/Recon Story #2
Desync Attack/Recon Story #3
POC #1 - Sesson Stealing using an Open Redirect
PoC #1 - Session Stealing using an Open Redirect
POC #2 - Session Stealing using Response Queue Poisoning
VIRTUAL SECURITY CONFERENCE 06.13.2020

Taught by

NahamSec

Reviews

Start your review of Practical Attacks Using HTTP Request Smuggling

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.