← Back to feed
research PortSwigger Research

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

PortSwigger Research

Sometimes people think they've found HTTP request smuggling, when they're actually just observing HTTP keep-alive or pipelining.

Read the full story PortSwigger Research →

Related Coverage

research HTTP/3 in Burp Suite - it’s time to find a bigger wordlist PortSwigger Research · Sep 23 research The Lure Isn't The Malware. It's Your Logo. Recorded Future · Sep 23 research Looking for free Robux? Here’s what’s real, and what’s a scam ESET Research · Sep 22