5 min read
H2C Smuggling: Bypassing Reverse Proxies via HTTP/2 Cleartext Upgrade
The H2C Smuggling technique: abusing the HTTP/2 cleartext upgrade to bypass reverse proxy access controls and reach internal endpoints
Read full articleTags
web-security
7 min read
HTTP Request Smuggling: CL.TE and TE.CL Attack Techniques
Analysis of HTTP Request Smuggling (HTTP DeSync Attack): how CL.TE and TE.CL deserialization vulnerabilities bypass frontend security controls and poison the backend request queue
Read full article