24.6 Lab: Exploiting HTTP request smuggling to capture users requests - Karthikeyan Nagaraj | 2024

Description - Portswigger Lab
This lab involves a front-end and back-end server, and the front-end server doesn't support chunked encoding. To solve the lab, smuggle a request to the back-end server that causes the next user's request to be stored in the application. Then retrieve the next user's request and use the victim user's cookies to access their account | Karthikeyan Nagaraj

#cybersecurity #walkthrough #career