• caglararli@hotmail.com
  • 05386281520

How to exploit HTTP Request Smuggling?

Çağlar Arlı      -    11 Views

How to exploit HTTP Request Smuggling?

I set up the following lab using HAProxy and Gunicorn.

enter image description here

Both "Smuggler.py" tool and "HTTP Request Smuggler" BurpSuite extension detected CL.TE vulnerability.

I checked it manually by sending below request:

enter image description here

Here is the request in HAProxy:

enter image description here

and, this is the request in Gunicorn (processed as two requests):

enter image description here

enter image description here

So based on this behavior, it seems vulnerability exists.

Now, here is the question:

While there is no request remaining in HAProxy or even Gunicorn, how the next user request will be appended to it and HRS will be exploited??