pentester.land· Jul 25, 2024· by Bahruz Jabiyev (@BahruzJabiyev), Anthony Gavazzi, Kaan Onarlioglu, Engin Kirda

Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies

Open Original Article ↗
Target Program: ATS, Nginx, HAProxy
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Web cache poisoning#CPDoS#HTTP request smuggling#Access control bypass