general
Blog post
Making HTTP header injection critical with one prompt
Source: PortSwigger Research · Published · Last checked 2 hours ago ·
Publisher excerpt From PortSwigger Research
You can now escalate HTTP header injection to a CRLF-Powered Desync and exploit it to serve random users a redirect to your collaborator, in a single prompt. We’ve just introduced a new scan check for
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.
Reference: PortSwigger Research — portswigger.net ↗