SecurityPortSwigger Research4 months ago
HTTP/1.1 Must Die: Conquering the 0.CL Challenge
1 min read
0.CL is an HTTP request smuggling variant where the front-end interprets Content-Length as 0 while the back-end reads differently. This discrepancy lets the first request absorb bytes from the next request. The technique is demonstrated in the PortSwigger lab to trigger an alert().
Level
Hype check
Tap to vote and see what everyone thinks.
