At Black Hat 2021 @PortSwiggerRes introduced multiple new classes of HTTP/2-exclusive threats and showed how these flaws enable desync attacks. Catch up on these before @albinowax presents the next stage of the journey, Browser-Powered Desync Attacks. https://t.co/JcrIAan8cp
@dhakal_ananda Auth bypass u can login or create a new account using uppercase and when u login it logins to the already made user account since it's converting to lowercase