Hi! I'm a pentester and a bug bounty hunter who's learning every day and sharing useful resources as I move along. Subscribe to my channel because I'll be sharing my knowledge in new videos regularly.
BUY ME A COFFEE:
www.buymeacoffee.com/farahhawa
SOCIAL MEDIA:
Follow me on Twitter: / farah_hawaa
Follow me on Instagram: / farah_hawaa
Connect with me on LinkedIn: / farah-hawa-a012b8162
TIME STAMPS:
00:00 Introduction
00:27 What is h2c?
00:43 What is the difference?
01:11 How can we upgrade to h2c?
01:39 Flow of upgrading to h2c
02:26 HTTP/2 RFC directives
02:50 The Bug
03:38 Summary
GITHUB REPOSITORY FOR THE CUSTOM CLIENT:
github.com/BishopFox/h2csmuggler
ORIGINAL RESEARCH:
labs.bishopfox.com/tech-blog/...
ASSETNOTE'S BLOG:
blog.assetnote.io/2021/03/18/...
Негізгі бет HACKING HTTP/2: h2c SMUGGLING
Пікірлер: 52