Client-side desync vulnerabilities - a breakthrough in request smuggling techniques

Check out Intigriti - the sponsor of today's video: https://www.intigriti.com/ 📧 Subscribe to BBRE Premium: https://bbre.dev/premium Subscribe to ‪@intigriti‬ on YouTube: ‪@intigriti‬ ✉️ Sign up for the mailing list: https://bbre.dev/nl 📣 Follow me on twitter: https://bbre.dev/tw This video is about a new hacking technique discovered by James Kettle, one of the best, if not the best web security researcher in the world. This vulnerability is called client-side desync or browser-powered desync and is a subclass of request smuggling vulnerabilities. The video shows the CL.0 variant and how many websites built on Akamai could be hacked with it. 🖥 Get $100 in credits for Digital Ocean: https://bbre.dev/do The article: https://portswigger.net/research/brow... James' Twitter:  / albinowax   Timestamps: 00:00 Intro 00:36 Intigriti - the sponsor of today's video 01:08 Desynchronising the browser and a vulnerable server 06:03 Confusing the browser by returning a different response 09:44 XSS using HEAD tunnelling