Topic

HTTP Request Smuggling

A web attack technique that exploits differences in how chained servers parse HTTP request boundaries, often via conflicting Content-Length and Transfer-Encoding headers.

Current clusters

security1 publisher

Turbo Intruder hits 100,000 requests a second from a laptop over HTTP/3

PortSwigger has shipped HTTP/3 support in Turbo Intruder and a Burp Suite adapter, pushing more than three times the request rate it managed over HTTP/1.1 and adding two QUIC race techniques for tighter timing windows.

Publishers:portswigger.net

Reality

Evidence52
Adoption14
Hype gap+20
Incentives78
Confidence58