Stealing Zomato X-Access-Token: in Bulk using HTTP Request Smuggling on api.zomato.com
该报告还没有中文解读。
原文摘录
摘自原文（7400 字符中的一小部分）
Intro Hi Zomato Security Team! My name is Evan Custodio and this is my first time evaluating your platform. I specialize in looking for server-side vulnerabilities. Recently I've taken a deep look at HTTP Request Smuggling issues. I have custom tools to evaluate over 150 types of HTTP Smuggling …
原文中的代码
DELETE / HTTP/1.1 Transfer-Encoding: chunked Host: api.zomato.com Content-Length: 51 User-Agent: Treasure/6.7 0 GET /some/other/endpoint HTTP/1.1 X-Ignore: X[STOP]
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Eternal 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @defparam · 版权归作者与 Eternal 所有