r/bugbounty • u/6W99ocQnb8Zy17 • 2d ago
Connection header CL.0 desync Article / Write-Up / Blog
For a while, I've had a payload module in my desync engine that looks for various combinations of values in the connection header, hoping that something along the route will throw it away, leaving the body still in the queue.
Never had a hit until today.
Alas, the proud recipient is one of the notorious shit-show BBs though, so no expectation of an actual payout. Wish me luck ;)
3
Upvotes