HTTP header injection: Difference between revisions

Revision as of 10:05, 30 July 2015

Revision as of 15:48, 26 October 2015

Line 3:

== Sources ==

* [http://lists.grokwebappsec.org.uk/pipermail/full-disclosurewebsecurity_lists.webappsec.org/20062008-FebruaryApril/042358003692.html HTTPFile ResponseDownload SmugglingInjection]{{Citation broken|date=June 2014}}

* [https://www.owasp.org/index.php/HTTP_Request_Smuggling OWASP HTTP request Smuggling]

* [http://palisade.plynt.com/issues/2006Sep/http-request-smuggling/ HTTP Request Smuggling]{{Citation broken|date=February 2015}}

* [https://www.owasp.org/index.php/Testing_for_HTTP_Splitting/Smuggling_%28OTG-INPVAL-016%29 OWASP Testing for HTTP Splitting/Smuggling]

* [http://www.webappsec.org/lists/websecurity/archive/2008-04/msg00003.html File Download Injection]

* [http://regilero.github.io/security/english/2015/10/04/http_smuggling_in_2015_part_one/ HTTP Smuggling in 2015]

== Tools ==