AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
An AI-assisted system called HTTP Terminator discovered novel HTTP desynchronization techniques after testing 30,000 candidate vectors, while a separate human-led investigation uncovered a zero-day vulnerability in Apache Traffic Server.
PortSwigger’s AI-assisted system, HTTP Terminator, built by James Kettle, discovered novel HTTP desynchronization techniques after exploring 30,000 candidate vectors. The system generated and proved the new techniques. Separately, a human-guided discovery cascade exposed a zero-day vulnerability in Apache Traffic Server. HTTP Terminator also tested 30,000 websites.