Lab: Web cache poisoning via HTTP/2 request tunnelling

[@netletic]

Hey everyone! Check out this playlist for all my solutions to the HTTP Request Smuggling labs from PortSwigger - 👀 kzbin.info/aero/PLGb2cDlBWRUX1_7RAIjRkZDYgAB3VbUSw Here are the timestamps for this video - ⏱ 00:00 - Intro 00:27 - Detect the CRLF vulnerability 02:19 - Smuggle our first request 03:35 - Turn blind into non-blind using HEAD 04:16 - Find a resource larger than the frontpage 05:54 - Find a sink for a reflection attack 08:05 - Add padding to our sink to solve the lab

[@Saur3n]

Thanks man

[@lambermaybe8404]

Thank you, I've been stuck on this issue for a long time

[@netletic]

thanks @lambermaybe8404, glad it was helpful in getting you unstuck on this one 🔥

[@doya8130]

Thank you

[@NitrogenXP]

Hey, when I send all the A's I get "request path too long" any help? I did everything exactly as shown in the video multiple times