YoVDO

Browser-Powered Desync Attacks - A New Frontier in HTTP Request Smuggling

Offered By: Black Hat via YouTube

Tags

Black Hat Courses Cybersecurity Courses Server-Side Request Smuggling (SSRS) Courses Offensive Security Courses HTTP Request Smuggling Courses

Course Description

Overview

Explore a cutting-edge technique in HTTP request smuggling through this 37-minute Black Hat conference talk. Discover how to leverage victim web browsers as desync delivery platforms, expanding the scope of request smuggling attacks to single-server websites and internal networks. Learn to combine cross-domain requests with server vulnerabilities to poison browser connection pools, install backdoors, and unleash desync worms. Gain insights from security researcher James Kettle as he unveils this new frontier in web application security, demonstrating the potential risks and implications for both defenders and penetration testers.

Syllabus

Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling


Taught by

Black Hat

Related Courses

Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Black Hat via YouTube Attacks From a New Front Door in 4G & 5G Mobile Networks
Black Hat via YouTube AAD Joined Machines - The New Lateral Movement
Black Hat via YouTube Better Privacy Through Offense - How to Build a Privacy Red Team
Black Hat via YouTube Whip the Whisperer - Simulating Side Channel Leakage
Black Hat via YouTube