HTTP Request Smuggling Courses and Certifications

NahamSec

HTTP Request Smuggling Explained

Discover HTTP request smuggling vulnerabilities with expert James Kettle through detailed explanations and practical demonstrations in this cybersecurity tutorial.

• YouTube
• 21 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

Leveraging HTTP Request Smuggling for Authentication Bypass and Remote Code Execution

Delve into HTTP Request Smuggling vulnerabilities, exploring real-world cases of authentication bypass and remote code execution in enterprise applications, with practical detection and mitigation strategies.

• YouTube
• 40 minutes
• On-Demand
• Free Video

DEFCONConference

HTTP 1.1 Must Die! The Desync Endgame

Uncover advanced HTTP request smuggling techniques and new desync attack classes that bypass modern mitigations, featuring real-world exploits and open-source research tools.

• YouTube
• 37 minutes
• On-Demand
• Free Video

NahamSec

Practical Attacks Using HTTP Request Smuggling

Explore practical HTTP request smuggling attacks, including CL.TE/TE.CL desync techniques, testing methods, and real-world examples. Learn to exploit vulnerabilities for session stealing and response queue poisoning.

• YouTube
• 45 minutes
• On-Demand
• Conference Talk

Black Hat

HTTP Desync Attacks - Request Smuggling Reborn

Explore HTTP request smuggling techniques to bypass security, manipulate web infrastructure, and exploit vulnerabilities. Learn detection, confirmation, and exploitation methods for various attack scenarios.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Black Hat

Browser-Powered Desync Attacks - A New Frontier in HTTP Request Smuggling

Explore advanced HTTP request smuggling techniques using browsers as attack platforms. Learn to exploit server vulnerabilities, poison connection pools, and launch sophisticated web attacks.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Black Hat

HTTP Request Smuggling in 2020 - New Variants, New Defenses and New Challenges

Explore new variants, defenses, and challenges of HTTP Request Smuggling, an attack technique exploiting interpretations of non-standard HTTP requests between client and server.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Cyber Mentor

HTTP Request Smuggling - Web Application Hacking Techniques

Explore HTTP Request Smuggling techniques for web application security, uncovering vulnerabilities and enhancing your hacking skills.

• YouTube
• 2 hours 7 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

Ekoparty #UniTalks Colombia - HTTP Request Smuggling

Explicación detallada sobre la vulnerabilidad HTTP Request Smuggling, sus implicaciones en la seguridad web y cómo los atacantes pueden explotarla para ejecutar diversos ataques en aplicaciones con arquitecturas de múltiples servidores.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

NDC Conferences

Modern Web Vulnerabilities 2020

Explore modern web vulnerabilities, including insecure deserialization, SSRF, ESI injection, prototype pollution, and HTTP request smuggling, with demos and prevention strategies.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

OWASP Foundation

WAF Bypass Techniques Using HTTP Standard and Web Servers' Behavior

Explore creative techniques to bypass web application firewalls using HTTP standards and server behaviors. Learn to smuggle and reshape requests for penetration testing and bug bounty hunting.

• YouTube
• 43 minutes
• On-Demand
• Free Video

NahamSec

The Art of Bypassing Web Application Firewalls - Live Demos

Explore hands-on techniques for bypassing modern web application firewalls. Learn to customize methods and payloads through practical labs, enhancing your skills in WAF evasion and web security.

• YouTube
• 1 hour 9 minutes
• On-Demand
• Free Video

DEFCONConference

Web Cache Exploitation: Advanced Techniques for Static Path Deception and Cache Key Confusion

Discover powerful web cache exploitation techniques, including Static Path Deception and Cache Key Confusion, to identify and exploit URL parsing vulnerabilities across major platforms like Azure Cloud and Cloudflare.

• YouTube
• 44 minutes
• On-Demand
• Free Video

NorthSec

Request Smuggling 101

Explore HTTP Request Smuggling attacks, risks, and payloads. Learn to detect and mitigate vulnerabilities in load balancers and proxies. Includes live demonstration and practical mitigation strategies.

• YouTube
• 34 minutes
• On-Demand
• Conference Talk

Ekoparty Security Conference

Gotta Cache Em All - Bending the Rules of Web Cache Exploitation

Discover powerful web cache exploitation techniques, including Static Path Deception and Cache Key Confusion, to identify vulnerabilities in major platforms and learn practical defense strategies for securing web applications.

• YouTube
• 59 minutes
• On-Demand
• Free Video