Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update DesyncBox.java #61

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Conversation

cocoh-23
Copy link

Some techniques are added from Regileros blog and some of his HTTPWookie payloads.

Some techniques are added from Regileros blog and some of his HTTPWookie payloads.
@cocoh-23
Copy link
Author

Hi. Have you been able to review this? It's just to know, as I am using it myself and I'd love to know if everything is ok with the updates.

Thank you!!

@albinowax
Copy link
Collaborator

albinowax commented Mar 30, 2023

From a glance, most of these look good but there's a couple like

  • I think 'regilero-spaceTE' may be a duplicate
  • A couple like 'CL-nullbytevariation3' contain a payload, which can have bad side effects like affecting other users when running the usually safe timeout-based detection
  • I tried a ton of techniques when developing HTTP Request Smuggler, and only kept techniques that worked on at least one system. Ideally to merge this, it would only have proven techniques.

Anyway thanks for the PR, I'll look to merge this once I have capacity to test it properly.

@cocoh-23
Copy link
Author

Great @albinowax. I hope it helps in the future. Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants