19 ms·
I think it's worth spelling out that 'chunk thingy' can lead to complete site takeover. For example, using this behaviour I was able to get persistent control o
by albinowax_ 6y ago
I think it's worth spelling out that 'chunk thingy' can lead to complete site takeover. For example, using this behaviour I was able to get persistent control of PayPal's login page.
That said, I tweeted this rather than posting a whitepaper because I haven't thoroughly explored the impact. I've shared my guess about what other issues you'll find here: https://news.ycombinator.com/item?id=25858015 https://news.ycombinator.com/item?id=25858015
- panpanna 6y agoDo you have any pointers to the PayPal hack?
- albinowax_ 6y agoYep, the original reports are here: https://hackerone.com/reports/488147 https://hackerone.com/reports/488147 https://hackerone.com/reports/510152 https://hackerone.com/reports/510152 And I posted a full whitepaper/presentation on the technique here: https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn https://portswigger.net/research/http-desync-attacks-request...
- panpanna 6y agoThis is awesome, thanks!
- Uberphallus 6y agoWow, excellent work!