James Kettle: Browser-Powered Desync — A New Era of HTTP Request Smuggling
A DEF CON 30 talk about a new class of HTTP Request Smuggling attacks where the victim’s browser becomes a tool for request desynchronization.
The presentation shows how cross-domain requests combined with server-side flaws can poison the browser’s connection pool, install backdoors, and spread desync worms. The techniques are demonstrated against major platforms and services including Apache, Akamai, Varnish, Amazon, and several web VPN solutions.
The presentation shows how cross-domain requests combined with server-side flaws can poison the browser’s connection pool, install backdoors, and spread desync worms. The techniques are demonstrated against major platforms and services including Apache, Akamai, Varnish, Amazon, and several web VPN solutions.