TLDR Web Dev · MISCELLANEOUS

LISTEN TO THE WHISPERS: WEB TIMING ATTACKS THAT ACTUALLY WORK

portswigger.net33 min read

Summary from the TLDR Web Dev newsletter

Web timing attacks have become more effective and have wider applicability due to advancements in minimizing noise and maximizing signal. This article introduces novel attack concepts, such as the single-packet attack, for discovering hidden vulnerabilities and misconfigurations in web applications.