As pentesters, we are usually asked to operate in an unfamiliar environment, find as many software, logical, or misconfiguration vulnerabilities as possible, and do all of that under stress due to ...

HTTP header injection is often under-estimated and misclassified as a moderate severity flaw equivalent to XSS or worse, Open Redirection. In this post, I'll share a simple technique I used to take a

Automated web application attacks are terminally limited by the number of HTTP requests they can send. It's impossible to know how many hacks have gone off the rails because you didn't quite manage to