Update DesyncBox.java - Githubissues

cocoh-23 commented 1 year ago

Some techniques are added from Regileros blog and some of his HTTPWookie payloads.

cocoh-23 commented 1 year ago

Hi. Have you been able to review this? It's just to know, as I am using it myself and I'd love to know if everything is ok with the updates.

Thank you!!

albinowax commented 1 year ago

From a glance, most of these look good but there's a couple like

I think 'regilero-spaceTE' may be a duplicate
A couple like 'CL-nullbytevariation3' contain a payload, which can have bad side effects like affecting other users when running the usually safe timeout-based detection
I tried a ton of techniques when developing HTTP Request Smuggler, and only kept techniques that worked on at least one system. Ideally to merge this, it would only have proven techniques.

Anyway thanks for the PR, I'll look to merge this once I have capacity to test it properly.

cocoh-23 commented 1 year ago

Great @albinowax. I hope it helps in the future. Thank you!

PortSwigger / http-request-smuggler