LLM-Assisted Research Uncovers New HTTP Desynchronization Techniques

PortSwigger researcher James Kettle said a large language model helped generate novel web attack ideas through an autonomous system called HTTP Terminator, which creates and tests tens of thousands of candidate HTTP desynchronization techniques. The system reportedly surfaced previously unconsidered desync methods, and Kettle described a workflow focused on validating machine-generated findings, filtering false positives, and using unexpected results to drive further research rather than treating AI as fully autonomous offensive tooling.

The work aligns with Kettle’s broader campaign against legacy HTTP parsing behavior, including his argument that HTTP/1.1 remains a root cause of request smuggling and desynchronization risk. By combining large-scale automated hypothesis generation with practical testing against HTTP parsing edge cases, the research highlights how AI can accelerate discovery of exploitable protocol ambiguities while reinforcing the need for defenders to reduce exposure to desync-prone architectures and outdated protocol handling.