AI‑crafted HTTP Attacks: How the ‘HTTP Terminator’ Invented New Exploits
PortSwigger’s HTTP Terminator lets an autonomous LLM generate previously unknown HTTP‑desync triggers, gadgets and exploits that breached real banks, security products and government sites. The research proves AI can invent novel attack techniques at scale, while also highlighting where human insight remains essential. All code and findings are open‑source.