refactor(inpv-15, inpv-16): separate and modernize response splitting and request smuggling guides #1314
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
- Renamed 4.7.15 from 'HTTP Splitting Smuggling' to 'HTTP Response Splitting' to decouple it from Request Smuggling. - Modernized the content of WSTG-INPV-15. - Updated Table of Contents and all internal links throughout the project to point to the new filename.
- Replaced legacy 'Testing for HTTP Incoming Requests' (which was a proxy tooling guide) with a dedicated 'Testing for HTTP Request Smuggling' guide. - Added methodologies for detecting CL.TE, TE.CL, TE.TE, H2C, and HTTP2 Downgrade Smuggling. - Renamed file to reflect the new scope. - Updated Table of Contents and all internal links throughout the project to point to the new filename. - Closes OWASP#1307
|
The following links are broken: |
Contributor
Author
|
@kingthorin The link checker failed on the Archive.org URL for "HTTP Request Smuggling" (cgisecurity.com), likely due to a timeout or bot protection. I've verified manually that the link is valid and accessible. This appears to be a false positive. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR covers issue #1307.
What did this PR accomplish?
Modernized & Decoupled WSTG-INPV-15: - Refactored section 4.7.15 to focus exclusively on HTTP Response Splitting (CRLF Injection).
Overhauled WSTG-INPV-16: - Renamed from "Testing for HTTP Incoming Requests" to "Testing for HTTP Request Smuggling".
Thank you!