Top 10 winner
Playing with HTTP/2 CONNECT
In HTTP/2 the CONNECT method tunnels over a single stream instead of hijacking the whole TCP connection, so many tunnels can be multiplexed on one connection. The author builds a Go tool that abuses this against misconfigured proxies to port-scan internal networks quickly, and notes the multiplexed traffic can slip past network monitoring.
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.