HACKING HTTP/2: h2c SMUGGLING

[@N7Tonik]

3:07 I don't understand why the proxy stops monitoring the content? how does the h2c connection prevent the proxy from monitoring the connection??

[@abdulx01]

Where is the article link ?>

[@FarahHawa]

in the description!

[@virenjoshi]

I was trying to complete new portswigger labs related to this topic and I found your video :D

[@meljithpereira5532]

Beautiful explain as well as good concept...❤️🇮🇳

[@macktheripper7454]

Gorgeous as always and great video

[@tangent69]

So good to see you after a long time

[@gurpreetapej]

All proxies, load balancers do not monitor or inspect layer 7 headers and its pay load and if you want that to be inspected one has to have WAF ( web application firewall ) so that each HTTP transaction is inspected. Its not Load balancer or proxy job to inspect path or its content.

[@MokshitKalRa]

Finally She remembered, She has a KZbin channel also 😀😀 😂

[@manline_root2770]

good Explained !! but we can't use of burpsuite so intercept their request am right ???

[@anirudhm.s.4546]

Hey, I found the visual representation of the protocol switch very helpful ( 1:11 - 2:26 ). Throwing out an idea here but I think you should do that when you're explaining H2C as a concept as well (I mean in the beginning 0:27 - 1:11 where I see you speaking about it but there isn't a visual reference for me) What I mean to say is, because of this video, I have a good understanding of the switching of protocol to H2C but not about H2C in general. This is like a User-Experience feedback I guess and I hope it helps your upcoming videos.

[@FarahHawa]

Hmmm interesting! I’ll keep this is mind for future videos, thanks for the suggestion! :)

[@Aolpha]

So you are saying When a h2c is established It's not check by the proxy server and it's forwarded to the server directly?

[@mathusankar5671]

😍After long time see you 😍And make attacks h2c in your video 😍

[@dhivishvarshan3857]

Hey!Super clear explanation.please do a practical video about dependency confusion.

[@jellemulckhuijse1771]

You cannot bypass every access control of the application. just the ones that are in the proxy part of the application.

[@shivamchaudhary6974]

Farah please tell me programming language is essential or not for bug bounties Please. 🤗

[@kishor6881]

Mam 1 month ke baad...

[@bravo-6900]

why you in haste?

[@Thisisrealfaizan]

Where from you?

[@maheshkumarkaushik7582]

Very very good explanation 👍☺️

[@kabirsingh9584]

i am class 10th student. and I already learn owasp top 10 with help of DVWA and burpsuit. and learn html css and javascript language. and solve portswigger lab but i am not find bug . i am window user mein wifi ka password hack karna sikh gya, multiple ip addersse use karna sikha gya , kya mujha linux tool use karna nahi aata can you suggest me how to learn tools like assetfinder , dirsearch.etc

[@premprakash6138]

The best you tuber

[@omjha90]

New video After a long time ❤️🙂

[@bertrandfossung1216]

Thank you very much Farah👍🏽

[@AyushKumar-hv2ww]

Nice topics because different 🙌🙌👏

[@deepdhakate3462]

Videos on API please

[@rajjadhav3053]

Hi I have one question to you can you tell me if we choose infosec filled then what about packages (salary ) . Write now I am in 2nd year of b tech and I have interest in infosec filled but when I think about packages it's good or not compare to web development .. please answer my question or create one video job opportunity and salary in infosec filled

[@haritupadhyay.9145]

Farah !! You should make tutorials , surely help you to gain some serious subscribers ... 👍👍

[@freyeahshah4494]

Long time no see 😭 we missed u

[@HackerSumitJi]

Pls make a video on how to bypass modsecurity firewall

[@batista98854]

Please make videos regularly ☺️

[@VJ-qr9pe]

Can you plz tell us Can someone learn cyber security ownly Without any college And if it is, Are those students able to high package jobs As it is without college or degree???

Yes you can learn cyber security without college degree... Most of the eh, pen testers, bug bounty hunters are self thought... Even I am from commerce background

[@anik6393]

Eid Mubarak ❤️.

[@masti2point0]

thanku mam for helpful content 😊

[@sand3epyadav]

I love bug bounty people.

[@danishalvi9731]

Make video on software engineering

[@anujmahajan6642]

Video after long time farah, How are you, doing well👍

[@FarahHawa]

I'm great! Thanks for asking :)

[@devanshjain6171]

Good explanation.

[@senvishal9023]

Farah howz you...? after Long time Hope that you are fine..... 🤗

[@arinagrawal575]

Long time no see, hope you were doing well 😁!!

[@leaoaugusto]

hey!! great video! You should get a better microphone, your videos would sound much more awesome. Thanks for sharing it!

[@FarahHawa]

Will def look into the mic issue!

[@krishg767]

please makes videos regularly.....

[@toorkali4283]

SECOND VIEWS😄

[@yashverma5683]

Insightful

[@danishalvi9731]

😊😎

[@lapuranjan5574]

Sorry iam late 💘💘💘💘💘💘💘💘💘💘

[@Aolpha]

Http smuggling made easy

[@Hackworm]

🤐🤐