As cited
Copy frozen at (site build).
'HTTP Terminator' Hunts for Novel Desync Attacks
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
research
'HTTP Terminator' Hunts for Novel Desync Attacks
James Kettle of PortSwigger developed an artificial intelligence (AI) powered open source tool called HTTP Terminator that identifies novel HTTP request-smuggling techniques. The tool uncovered new desynchronization attack methods previously undetected by existing security approaches.
Why it matters: Application security teams and penetration testers need to understand these newly discovered HTTP desync attack vectors to test and defend their web applications against request-smuggling exploitation.
- Source published
- First seen by Cybersecurity Tracker