| Naziv |
HTTP Request Splitting |
|---|---|
| Sažetak | HTTP Request Splitting (also known as HTTP Request Smuggling) is an attack pattern where an attacker attempts to insert additional HTTP requests in the body of the original (enveloping) HTTP request in such a way that the browser interprets it as one request but the web server interprets it as two. There are several ways to perform HTTP request splitting attacks. One way is to include double Content-Length headers in the request to exploit the fact that the devices parsing the request may each use a different header. Another way is to submit an HTTP request with a "Transfer Encoding: chunked" in the request header set with setRequestHeader to allow a payload in the HTTP Request that can be considered as another HTTP Request by a subsequent parsing entity. A third way is to use the "Double CR in an HTTP header" technique. There are also a few less general techniques targeting specific parsing vulnerabilities in certain web servers. |
| Preduvjeti | User-manipulateable HTTP Request headers are processed by the web server |
| Rješenja | ['Make sure to install the latest vendor security patches available for the web server.', 'If possible, make use of SSL.', 'Install a web application firewall that has been secured against HTTP Request Splitting', 'Use web servers that employ a tight HTTP parsing process'] |
