Rating: 5.0

A HTTP desync between HAProxy and Gunicorn with malform `Transfer-Encoding:\vchunked` header leads to stealing flag from Flag BOTS HTTP request.

ScalpelMay 18, 2020, 5:26 p.m.

Good write-up!