AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
PortSwigger's James Kettle built HTTP Terminator, an AI-assisted research system that fed 138 HTTP and SMTP RFCs split into about 15,000 fragments to generate 30,000 candidate desync vectors, then tested 30,000 authorized websites and found roughly 700...