This course aims to provide learners with an understanding of the emerging network protocol HTTP/2 and its mechanisms. By the end of the course, students will be able to identify the components of HTTP/2, explain the flow control mechanism, and recognize new attacks on this protocol. The course teaches skills such as implementing HTTP/2, conducting research on new attacks, and utilizing industry multiplexing. The teaching method includes lectures, demonstrations, and technical details. This course is intended for cybersecurity professionals, web developers, network engineers, and individuals interested in understanding and securing the HTTP/2 protocol.
Hacking HTTP/2 - New Attacks on the Internet's Next Generation Foundation
Overview
Syllabus
Introduction
Who am I
Credits
Agenda
Why HTTP2
HTTP1 Problems
Who Uses HTTP2
Components of HTTP
Frame
New Attacks
Research
Implementation
Flow Control Mechanism
Low Data Rate Attack
Video Demo
Industry Multiplexing
Attack Flow
Attack Flow Demo
Header Compression
HPack
Dynamic Table
Funny Story
What can we do
Option 1 Abandon HTTP2
Option 2 Patch
Option 3 Patch
Virtual Patching
Key takeaways
Technical details
Taught by
Black Hat
