Exploiting HTTP request smuggling to perform web cache poisoning (Video solution, Audio)

Exploiting HTTP request smuggling to perform web cache deception (Video solution, Audio)

CSRF where token is duplicated in cookie (Audio, Explanations)

Cache Poisoning? - Solution to November '22 XSS Challenge

Exploiting origin server normalization for web cache deception - Lab#03

JWT Lab05

Lab: H2.CL request smuggling

CSRF where token is duplicated in cookie (Audio, Comments)

20.3 Lab: Web cache poisoning via ambiguous requests - Karthikeyan Nagaraj | 2024

Cache Poison Bug Bounty | Cross Site Scripting

Web App Pentesting - HTTP Cookies & Sessions

JWT Lab02

CSRF where Referer validation depends on header being present (Video solution, Audio)

How to scan a website for vulnerabilities using Burp Scanner

What is HTTP? How the Internet Works! #1

CSRF where token is tied to non-session cookie (Video solution, Audio)

DEF CON 30 - James Kettle - Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling

PortSwigger Labs - DOM XSS in jQuery selector sink using a hashchange event

HTTP in detail - How the web works

JWT Lab08

CORS - Lab #1 CORS vulnerability with basic origin reflection | Long Video