Uploaded July 2023 | Updated September 2026, 10 hours ago

---

In this video, Tib3rius explains HTTP Request Smuggling in detail, and completes three HTTP Request Smuggling labs from Portswigger Web Academy.

The labs completed are as follows:

CL.TE: portswigger.net/web-security/request-smuggling/lab-basic-cl-te
TE.CL: portswigger.net/web-security/request-smuggling/lab-basic-te-cl
TE.TE: portswigger.net/web-security/request-smuggling/lab-obfuscating-te-header

0:00 - Introduction
0:20 - Starting the CL.TE HTTP Request Smuggling lab.
1:10 - Overview of HTTP Request Parsing.
5:19 - Overview of Content-Length and Transfer-Encoding.
10:29 - How HTTP Request Smuggling can occur.
11:18 - Exploiting CL.TE HTTP Request Smuggling.
14:52 - "Visual" explanation of CL.TE Request Smuggling using a text editor!
20:17 - Starting the TE.CL HTTP Request Smuggling lab.
23:49 - Exploiting TE.CL HTTP Request Smuggling.
31:33 - Exploiting TE.CL HTTP Request Smuggling properly.
34:19 - Starting the TE.TE HTTP Request Smuggling lab.
34:41 - Explanation of TE.TE HTTP Request Smuggling.
38:06 - Using the HTTP Request Smuggler extension to find the vulnerability.
42:51 - Exploiting TE.TE HTTP Request Smuggling using the extension.
45:32 - Outro

Twitter: twitter.com/0xTib3rius
Twitch: twitch.tv/0xTib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
LinkedIn: linkedin.com/in/tib3rius
Facebook: facebook.com/0xTib3rius