The Most Overlooked Bug in Web Apps: HTTP Request Smuggling (Deep Dive)
đ Portfolio: https://portfolio.medusa0xf.com/ âď¸ Bug Bounty WriteUps:   / medusa0xf  HTTP Request Smuggling is a stealthy web vulnerability that can bypass proxies, load balancers, and app defenses, and itâs often missed. In this video, I cover the theory, walk through a practical live demo with working payloads and a stepâbyâstep live exploitation, and review real-life reports so bug bounty hunters and pentesters can detect, exploit responsibly, and write high-impact findings. -------------------------------------------------------------------------------------------------------------------------------------------- đą Socials: X:   / medusa_0xf  Discord:   / discord  LinkedIn:   / insha-j-38b822225  Instagram:   / medusa_0xf  -------------------------------------------------------------------------------------------------------------------------------------------- Reports: https://hackerone.com/reports/726773 https://hackerone.com/reports/1063627 ------------------------------------------------------------------------------------------------------------------------------------------- Timestamps: Introduction: 0:00 Chapter 1: 0:25 Chapter 2: 3:23 Chapter 3: 7:06 Chapter 4: 13:28 Final Thoughts: 19:41 -------------------------------------------------------------------------------------------------------------------------------------------- #bugbounty #pentesting #infosec #cybersecurity #websecurity #portswigger #DOMInvader #securityresearch #ethicalhacking #vulnerability #exploit #javascript #webhacking #bugbountytips #reportwriting #zeroday #cve #idor #xss #oauth #chatgpt #owasp #owasptop10 #ssrf #recon #ethicalhacking #portswigger #owasp #bugbounty #cve #cybersecurity #graphql #apihacking #developer #hackerone #jwt #api #subdomain #portswigger #bugbounty #bola #postman #podcast #pentesting #api #hack #bola #tryhackme #hackerone -------------------------------------------------------------------------------------------------------------------------------------------- lukrembo - biscuit Music from #InAudio: https://inaudio.org/ Dark Star    â˘Â Sport Gaming Cyberpunk by Infraction [No C...  Venom:    â˘Â Sport Racing Rave by Infraction [No Copyri...  Japan:    â˘Â Lo-Fi Chill Fashion Hip-Hop by Infraction ... Â

HTTP Request Smuggling Explained (with James Kettle)

How i do recon in 2026?

How to Discover High-Paying IDOR Bugs in Real Apps?

Top 5 API Vulnerabilities That Pay in Bug Bounties

AI tool For HACKING ? Shannon EXPLAINED

albinowax - HTTP Desync Attacks: Smashing into the Cell Next Door - DEF CON 27 Conference

Attacking AI - Jason Haddix - NDC Security 2026

HTTP Request Smuggling - False Positives

$6,5k + $5k HTTP Request Smuggling mass account takeover - Slack + Zomato

HTTP Request Smuggling Attack Explained // Untangling the HTTP Desync Attack

How The FBI Finds Your REAL IP Address

How an HTTP Request Gets Served - In Great Detail

How I Found a $500 Bug Bounty + AI Recon Tips!

CORS Misconfigurations: How Hackers Steal Your Cookies?

Paid Courses Wonât Teach You These Blind XSS Methods

Missing HTTP Security Headers - Bug Bounty Tips

Request smuggling - do more than running tools! HTTP Request smuggling bug bounty case study

Anthropic is Completely F*cked.

How Hackers Use Burp Suite to Get Into Websites

