Skip to content

PortSwigger Research company blog

HTTP Desync Attacks: Request Smuggling Reborn

by James Kettle portswigger.net published 2019-08-07

Read on portswigger.net → Archived copy

Points: 0
HN comments: 0
Submissions: 0
Cited by: 11 commenters

Security & Privacy Web & Frontend 2019

Cited in comments

Linked from 13 Hacker News comments by 11 different people, from Oct 2019 to Aug 2025.

Most recent:

Tohsig · Aug 3, 2025
asveikau · Jul 21, 2025
Thorrez · Jan 3, 2025
semi · Sep 6, 2023
X-Istence · Oct 21, 2022
notriddle · Dec 15, 2021

Search every comment that links here →

More from PortSwigger Research

All 24 posts →

Web hacking techniques of 2021

2022567 points50 comments Security & Privacy details

HTTP/2-exclusive threats caused by implementation flaws and RFC imperfections

2021393 points112 commentscited by 4Security & Privacy details

Microsoft pushes ahead with controversial ‘buy now, pay later’ feature for Edge

2021336 points291 comments Tech Industry & Business details

uBlock, I exfiltrate: exploiting ad blockers with CSS

2021270 points99 commentscited by 4Security & Privacy details

Researchers exploit HTTP/2, WPA3 protocols to stage ‘timeless timing’ attacks

2020241 points26 comments Security & Privacy details

HTTP/3: Everything you need to know about the next-generation web protocol

2022220 points156 comments Networking & Internet details

Related posts from the same era

No Cookie for You

The GitHub Blog20202,941 points609 commentscited by 30 details

Why I’m done with Chrome

Matthew Green20182,357 points838 commentscited by 4 details

Reading privileged memory with a side-channel

Google Project Zero20182,334 points594 commentscited by 26 details

When you browse Instagram and find Tony Abbott's passport number

mango.pdf.zone20202,326 points446 commentscited by 9 details

Oppose the Earn IT Act

Mozilla Foundation20202,229 points543 comments details

Ken Thompson's Unix Password

Leah Neukirchen20192,101 points637 comments details