Request tunnelling via desync

Request tunnelling via desync

TL;DR: Smuggled requests share connections but never reach the front-end, exfiltrating response data across users on shared infrastructure.

Stub — to be filled in.

What it is

TODO

Preconditions / where it applies

TODO

Technique

TODO

Detection and defence

TODO

References