<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>James Kettle: Browser-Powered Desync — A New Era of HTTP Request Smuggling</title>
        <link>https://peertube.eqver.se/videos/watch/61ccefaa-8e11-4eb7-91ce-7b35d59e7d7a</link>
        <description>A DEF CON 30 talk about a new class of HTTP Request Smuggling attacks where the victim’s browser becomes a tool for request desynchronization. The presentation shows how cross-domain requests combined with server-side flaws can poison the browser’s connection pool, install backdoors, and spread desync worms. The techniques are demonstrated against major platforms and services including Apache, Akamai, Varnish, Amazon, and several web VPN solutions.</description>
        <lastBuildDate>Fri, 24 Jul 2026 11:24:34 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>PeerTube - https://peertube.eqver.se</generator>
        <image>
            <title>James Kettle: Browser-Powered Desync — A New Era of HTTP Request Smuggling</title>
            <url>https://peertube.eqver.se/client/assets/images/icons/icon-512x512.png</url>
            <link>https://peertube.eqver.se/videos/watch/61ccefaa-8e11-4eb7-91ce-7b35d59e7d7a</link>
        </image>
        <copyright>All rights reserved, unless otherwise specified in the terms specified at https://peertube.eqver.se/about and potential licenses granted by each content's rightholder.</copyright>
        <atom:link href="https://peertube.eqver.se/feeds/video-comments.xml?videoId=61ccefaa-8e11-4eb7-91ce-7b35d59e7d7a" rel="self" type="application/rss+xml"/>
    </channel>
</rss>