HTTP Request Smuggling Attack Explained // Untangling the HTTP Desync Attack

In this video, Aron Molnar untangles HTTP request smuggling aka HTTP desync attacks. The basic concept is first explained. The vulnerability is then exploited in a practical example of Portswigger's web security academy. Detect http smuggling attacks using Offensity: https://www.offensity.com/en/signup/#... Portswigger Web Security Academy Lab ("Exploiting HTTP request smuggling to capture other users' requests"): https://portswigger.net/web-security/... Subscribe to my newsletter at https://securityguide.me Timestamps: 0:00 Intro 0:15 http smuggling is like ordering a pizza 3:28 Create an http request 5:53 Exploitation: Intercept the original request 8:01 Exploitation: Using the request smuggler 12:32 Exploitation: Smuggle attack using the turbo intruder 14:36 Exploitation: Smuggling a malicious request 18:21 Detect http smuggling using Offensity 18:48 Outro