Post

HTTP is supposed to be stateless, but sometimes... it isn't! Some servers create invisible vulnerabilities by only validating the first request on each TCP/TLS connection. I've just published a Custom Action to help you detect & exploit this - here's a narrated demo: youtu.be/BAZ-z2fA8E4

youtu.beHTTP is supposed to be stateless...YouTube video by PortSwigger

22/10/25, 2:00 pm5 reposts22 likes

jstnkndy

@jstnkndy.bsky.social

22 Oct 2025

I think these demos are extremely valuable, especially when it's a technique that is demonstrated in less than 5 minutes. You will always find those who prefer reading writeups and those who prefer watching a demo; I think there is value in both. Great job!