Response Smuggling - Exploiting HTTP/1.1 Connections

Explore a novel approach to HTTP smuggling attacks in this conference talk from Ekoparty 2021. Delve into response pipeline desynchronization, an unexplored attack vector in HTTP Smuggling. Learn how advanced techniques can bypass restrictions and breach the security of critical web applications. Gain insights from security researcher Martin Doyhenard as he shares his expertise in Web stack security, reverse engineering, and binary analysis. Understand the evolution of HTTP request smuggling and its implications for complex systems and landscapes.

Response Smuggling: Exploiting HTTP/1.1 Connections ▪ Martin Doyhenard ▪ Ekoparty 2021