Top 10 winner

HTTP Request Splitting vulnerabilities exploitation

Sergey Bobrov · OFFZONE

nginx configurations that put normalized URI variables into proxy_pass, rewrite or forwarded headers let an attacker inject CRLF and split the request sent to the backend, adding headers, changing method and path, or pipelining a second request; the cases shown leak HttpOnly session cookies, land XSS and reach other backends and buckets.

Record

Researcher

Sergey Bobrov

Published by

OFFZONE

Format

Slides

Topic

HTTP

In the archive

• Ranked #6 in the 2023 Top 10 Web Hacking Techniques

Related sources

• Sergey Bobrov . HTTP Request Splitting vulnerabilities exploitation

Tags

• header-injection
• request-smuggling
• response-splitting
• reverse-proxy
• xss
• open-redirect
• info-leak
• aws
• http
• owasp-a03-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Sergey Bobrov, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 September 2026.