Setting arbitrary request headers in Chromium via CRLF injection

blog.bentkowski.infosite

from

Web Security

added

2026-10-10

likes

0

similar

1. ▲

   XSS via a spoofed React element danlec.com

   site link ↗
   site
2. ▲

   Large-scale analysis of style injection by relative path overwrite blog.acolyer.org

   site link ↗
   
3. ▲

   SSD Advisory – Chrome Turbofan Remote Code Execution blogs.securiteam.com

   site link ↗
   site
4. ▲

   Stealing CSRF tokens with CSS injection (without iFrames) github.com

   tool link ↗
   tool
5. ▲

   chrome-remote-interface Wiki github.com

   Handy recipes for common raw-CDP tasks.

   site link ↗
   site
6. ▲

   Potential command injection in resolv.rb github.com

   site link ↗
   site

Web Security › Browser Exploitation > Frontend (like SOP bypass, URL spoofing, and something like that): “Written by Michał Bentkowski.”