http-parameter-pollution

What problem does it solve?

HTTP Parameter Pollution (HPP) arises when servers, proxies, and application frameworks interpret duplicate query or body keys differently, enabling bypasses, logic abuse, or token confusion. This skill helps you identify and exploit divergent parameter handling to assess security gaps.

Core Features & Use Cases

• Behavior mapping: understand how different stacks (CDNs, WAFs, app frameworks) treat duplicate keys across GET and POST.
• Attack planning: design multi-hop scenarios (HPP + SSRF, CSRF, or business logic) to reveal misconfigurations.
• Assessment playbooks: craft targeted payloads and test sequences to validate defense gaps in real systems.

Quick Start

Inspect a test request with duplicate parameters across URL and body, observe how downstream components interpret values, and document divergent behavior.