You can find the whitepaper, tool, and online labs at portswigger.net/research/http-desync-attacks-request-smuggling-reborn
@mo9382 жыл бұрын
@xXRedTheDragonXx3 жыл бұрын
This is legitimately one of the worst vulnerabilities ever discovered. Honestly, this should scare every developer, server host, backend developer, frontend developer, CDN developer, anyone who's software was exploited in the chain and every user on the internet. Being able to inject code to random users page with nothing but a few post requests is absolutely terrifying, and being able to steal plain-text creds is horrifying
@kof2002x4 жыл бұрын
honestly i like the researches of albinowax "Respect"
@ChadChad17764 жыл бұрын
Scariest talk I've ever watched.
@BeggarsAreChoosers4 жыл бұрын
As always, outstanding research material by James (albinowax). This is such a big material by itself, I don't know how to understand every bit of this attack. Just checked that his blog on this attack is around 26 pages long with lots of other pointers and links. It's almost kind of a book. I don't know I will be able to understand fully as only a Genius like him can make this type of material and only a Genious will understand it fully. This might take my entire life to go through all research materials that he alone contributes every year. His name will be in the history of Ethical Hacking.
@0x1h0b4 жыл бұрын
Man.. i love how good he explains.. huge respect sir..
@CropCircleSystems4 жыл бұрын
Great exploits. I could smell this vulnerability almost as long as I can remember and it's just insane how long, far and wide it's still applicable after being documented over a decade ago. I never could have done and put together all this research and implemented such effective exploits. Thorough exploration of the problem space. Thorough documentation of cause and effect. GREAT presentation. My favorite from DEFCON 27. I was on the edge of my seat the entire time. On another note, I've been pronouncing the letter H wrong my entire life. Thank you so much for this albinowax!
@UsamaAli-kr2cw Жыл бұрын
This is mind blowing research done by james :)
@jpphoton23 күн бұрын
the vast domain space of http and a brilliant mind laying it down like Shakespeare extremely insightful thank you
@sveneFX Жыл бұрын
Thx so much for sharing, this is insane - well done!
@nikivc4 жыл бұрын
Super awesome, what a good talk !
@KristyLeeDeTert-qr3ybАй бұрын
😊❤
@JuanBotes2 жыл бұрын
Thanks for sharing your knowledge \o/
@KeithMakank3 Жыл бұрын
Missed opertunity to call this a : Joiny Cache vulnerability
@DaveKupratis4 жыл бұрын
Very well done!
@FantubeChannel4 жыл бұрын
Awesome!
@steiner2542 жыл бұрын
This is awesome!
@siddharthchhetry42183 жыл бұрын
Godly guy.
@gddaredevil Жыл бұрын
*_great_*
@iamkid43574 жыл бұрын
awesome
@5uSWEq7t4 жыл бұрын
wizard class hacker
@alphawolf44464 жыл бұрын
0 dislikes - that's my boy standard : )
@amithc94294 жыл бұрын
😍😍😍
@TheIndiaView3 жыл бұрын
fucking awesome
@RyanLynch14 жыл бұрын
wow I want to be that smart one day lol... then maybe I can get PayPal to give me 40k too haha