Web Hack List

Other nomination

Funky chunks – addendum: a few more dirty tricks

Extends the chunked-body smuggling family. If one parser blindly skips two bytes as the chunk-body terminator while the other accepts a bare newline, a byte of the next chunk size is consumed and the two disagree on its length. A bare newline in the trailer section gives the same split.

Record

Researcher
Jeppe Bonde Weikop
Date

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Jeppe Bonde Weikop, first published at the original source. Preserved copies are kept so the citation survives its host.