About this talk
This talk focuses on HTTP/3 and the challenges in security tooling for it, particularly the lack of support for major interception proxies. Maor Abutbul from CyberArk Labs discusses how the common belief that QUIC's per-stream multiplexing prevents race conditions has been challenged. The session explores the development of QuicDraw, an open-source tool designed for fuzzing and race condition testing over HTTP/3. Key topics include HTTP/3's QUIC transport, how the QUIC-FIN sync technique can exploit multiplexing, and the functionality of QuicDraw and QuicDraw-UI, including their compatibility with existing browser and proxy workflows.
More from this event
See all 28 talks →
Ai, Deception And Deepfakes When Trust Becomes The Primary Attack Surface
36:15
Cloud Resilience Simplified Less Data, Stronger Security
33:14
Demystifying Driver Research A Systematic Approach For Vulnerability Hunting
25:24
Dpdpa In Action Designing A 72 Hour Breach Response That Actually Works
22:56