Http2

me vs request smugglingPOST

19 July 2022 ~12 min By Leon Jacobs
Ctf Requestsmuggling Http2
I’ve come to realise that I wasn’t the only one that has never actually exploited an HTTP Request Smuggling vulnerability, three years after James Kettle reminded the world of it. Like many, I’ve seen the buzz, read it all, thought I understood it, but honestly, I didn’t. While the potential impact sounds great from an attacker perspective, I’ve been mostly confused by a lot of it. That was until the…

Adventures into HTTP2 and HTTP3

27 May 2021 ~16 min By Jacques Coertze
Http2 Http3 Quic Webapps
A few months ago I was exploring the write-ups and video solutions for the retired HackTheBox machine – Quick. It’s during this exploration that I came across HTTP/3. For those that are not aware, HTTP/3 is the upcoming third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web, succeeding HTTP/2. Now, to be honest, my knowledge of the Hypertext Transfer Protocol (HTTP) has…