The Silent Danger in HTTP: Identifying HTTP Desync Vulnerabilities with Gray-box Testing

Keran Mu

34th USENIX Security Symposium (USENIX Security '25) · Day 1 · Network Security 1: Censorship, Evasion, and Trustworthy Infrastructure