#HTTP1MustDie - Twitter Hashtag

8 months ago

Google Cloud Platform was vulnerable to a HTTP desync attack leading to "responses being misrouted between recipients for certain third-party models". Aka your LLM response goes to someone else. The Expect header strikes again! #http1mustdie

albinowax's tweet photo. Google Cloud Platform was vulnerable to a HTTP desync attack leading to "responses being misrouted between recipients for certain third-party models". Aka your LLM response goes to someone else. The Expect header strikes again! #http1mustdie https://t.co/7QqAyjSnc7

5

207

18

53

11K

d4d

@zakfedotkin

10 months ago

Did you know? The newline handling quirks from The Tangled Web by @lcamtuf still work in modern Chrome, if the server doesn’t support HTTP/2. An unsafe Nginx redirect config can let you inject cookies via /%0dset-cookie: foo=bar. #HTTP1MustDie

zakfedotkin's tweet photo. Did you know? The newline handling quirks from The Tangled Web by @lcamtuf still work in modern Chrome, if the server doesn’t support HTTP/2. An unsafe Nginx redirect config can let you inject cookies via /%0dset-cookie: foo=bar. #HTTP1MustDie https://t.co/DsJO06Y0YY

2

137

26

66

13K

Burp Suite @Burp_Suite

10 months ago

24 million websites compromised. 🧵 PortSwigger's Director of Research, James Kettle (@albinowax), & AppSec expert John Hammond (@_JohnHammond) reveal the fatal flaws in HTTP/1.1 that attackers are abusing right now. #HTTP1MustDie

Burp_Suite's tweet photo. 24 million websites compromised. 🧵

PortSwigger's Director of Research, James Kettle (@albinowax), & AppSec expert John Hammond (@_JohnHammond) reveal the fatal flaws in HTTP/1.1 that attackers are abusing right now.

#HTTP1MustDie https://t.co/8CwtOyhWc3

3

145

23

58

12K

PortSwigger @PortSwigger

10 months ago

The team will be at @defcon again today! Don't miss out on your free HTTP/1.1 Must Die t-shirt in the Bug Bounty Village (while stocks last...👀 ). #DEFCON33 #BugBountyVillage #HTTP1MustDie #PortSwigger #BurpSuite

PortSwigger's tweet photo. The team will be at @defcon again today!

Don't miss out on your free HTTP/1.1 Must Die t-shirt in the Bug Bounty Village (while stocks last...👀 ).

#DEFCON33 #BugBountyVillage #HTTP1MustDie #PortSwigger #BurpSuite https://t.co/VnJ9P36oRO

1

42

0

3K

PortSwigger @PortSwigger

10 months ago

The ground-breaking new research release HTTP/1.1 Must Die! The Desync Endgame will be hitting @defcon this afternoon at 4.30pm. Join the movement 👉 https://t.co/pIOerQPxTt #HTTP1MustDie #DEFCON33

1

19

3

1

2K

Burp Suite @Burp_Suite

10 months ago

The ground-breaking new research release HTTP/1.1 Must Die! The Desync Endgame will be hitting @defcon this afternoon at 4.30pm. Join the movement 👉 https://t.co/GcLsYQGOyK #HTTP1MustDie #DEFCON33

0

16

3

7

3K

PortSwigger @PortSwigger

11 months ago

Today at DEF CON 33 - don't miss @albinowax's new HTTP/1.1 Must Die talk! We're proudly sponsoring the @BugBountyDEFCON and are excited to be this year's CTF triage partner. Drop by, say hello, pick up some swag, and have fun! #DEFCON33 #BurpOnTour2025 #HTTP1MustDie

PortSwigger's tweet photo. Today at DEF CON 33 - don't miss @albinowax's new HTTP/1.1 Must Die talk!

We're proudly sponsoring the @BugBountyDEFCON and are excited to be this year's CTF triage partner. Drop by, say hello, pick up some swag, and have fun!

#DEFCON33 #BurpOnTour2025 #HTTP1MustDie https://t.co/0L3JgRX0SE

1

39

6

1

3K

Burp Suite @Burp_Suite

11 months ago

Missed @albinowax's new HTTP/1.1 Must Die! The Desync Endgame at Black Hat USA yesterday? Catch it at 4.30pm tomorrow at @defcon! Learn more 👉 https://t.co/GcLsYQGOyK #HTTP1MustDie

0

9

1

3

3K

BApp Store @BApp_Store

11 months ago

🚨 BlackHat Research Releases! Brand new to the BApp Store: 🚀 HTTP Hacker Major updates: 🔥 WebSocket Turbo Intruder 🔥 HTTP Request Smuggler 🔥 Turbo Intruder #HTTP1MustDie #BlackHatUSA #BHUSA

1

13

3

6

1K

Web Security Academy @WebSecAcademy

11 months ago

5 hours until the desync endgame begins. https://t.co/sGe3a0tfI2 #HTTP1MustDie

1

22

5

6

3K

PortSwigger @PortSwigger

11 months ago

5 hours until the desync endgame begins. https://t.co/pIOerQPxTt #HTTP1MustDie

0

16

2

2K

Burp Suite @Burp_Suite

11 months ago

5 hours until the desync endgame begins. https://t.co/GcLsYQGOyK #HTTP1MustDie

0

11

0

2

2K

PortSwigger @PortSwigger

11 months ago

Didn't grab a HTTP/1.1 Must Die! tee before they all went at @BSidesLV? We'll be dishing more out at DEF CON's Bug Bounty Village later this week! @BugBountyDEFCON #HTTP1MustDie #BSidesLV #DEFCON33