CRLF-Powered Desync Attacks: Beheading HTTP Streams
PortSwigger demonstrates that CRLF injection in HTTP headers can be weaponised into full HTTP desync attacks, fundamentally reframing header injection as a critical vulnerability class.
Summary written by editorial AI · Source link below
Abstract In this paper we’ll show that HTTP Header Injection is severely underestimated. Forget open redirects or Cross-Site Scripting and instead, embrace the catastrophic potential of the CRLF-Power
Editorial Analysis
Organisations that have deprioritised HTTP header injection as low-severity need to reassess — when chained with desync techniques, it can bypass WAFs and compromise backend systems.
Re-classify CRLF/header injection findings in your vulnerability management system and prioritise remediation of exposed HTTP header construction paths.
HTTP header injection, long considered low-risk, can now be weaponised into attacks that bypass web application firewalls and compromise backend infrastructure.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at PortSwigger Research in a new tab.
More from the Research Desk
- Firecracker VM Escape: PwnEscape Part 23d
- A Gingerbread House for LLM Agents: Source-Planned Honeypots That Lure Autonomous Attackers into an Isolated Shadow3d
- LABBA: LLM-Assisted Behavioral Biometric Authentication3d
- A Cyber Range Evaluation of Inductive Autonomous Network Incident Response Agents3d
- KeHoSu: Keyed Homoglyph Substitution for Authenticated Text Provenance over Copy-Paste Channels3d