HTTP Request Smuggling

To achieve a successful HTTP Request Smuggling attack, one must find an area of a web application that is writeable and reflect a victim users HTTP request into that area. A web application is vulnerable to this attack when the frontend and backend servers are not able to agree on the Content-Length and Transfer-Encoding headers. Due to this, typically one HTTP request splits into two. This means that a victims HTTP request will likely append the second HTTP request sent by the attacker. This may lead to disclosure of sensitive data, such as session cookies.

Check out my UDEMY course: https://www.udemy.com/course/learn-burpsuite-fast/?referralCode=3BC3FD2C6CFB395169DD

~~~
This is an educational video, gain permission from target owners before attempting anything from this tutorial. By not doing so, you risk being penalised by the computer misuse act or equivalent in your country
~~~

Burp Lab - https://portswigger.net/web-security/request-smuggling/exploiting/lab-capture-other-users-requests

0:00 Introduction
0.47 Finding a writeable area
1:26 Setting up the payload
4:00 Exploiting the issue
5:13 Login as another user
5:38 Outro

Don't forget to subscribe and like the video for continued Cyber Security viewing!

Twitter: https://twitter.com/TurvSec