skills.rest
lNwNl
lNwNlCOMMUNITY
Explore all skills by this author →
GitHub

http2-specific-attacks

Identify HTTP/2 attack vectors exploiting binary framing, HPACK, multiplexing, and downgrade flaws.

2|Updated May 15, 2026
Search Tags:#multiplexing#security assessment#protocol testing#http2#request smuggling#h2c#hpack
One-click install
npx skills add https://github.com/lNwNl/Methodos --skill http2-specific-attacks
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: http2-specific-attacks
Source: https://github.com/lNwNl/Methodos/tree/main/docker/opencode/skills/http2-specific-attacks
Command: npx skills add https://github.com/lNwNl/Methodos --skill http2-specific-attacks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps security testers understand and reproduce HTTP/2 protocol-specific weaknesses that are missed by HTTP/1.1-oriented request-smuggling or race-condition checklists.

Core Features & Use Cases

  • HTTP/2 h2c Upgrade Smuggling Playbooks: Probe and attempt bypasses where proxies forward Upgrade: h2c without inspecting the resulting HTTP/2 tunnel.
  • Pseudo-header Manipulation & Routing Confusion: Test discrepancies across :path, :authority, and :scheme that can yield access-control bypasses or vhost confusion.
  • HPACK & Multiplexing Abuse: Assess HPACK compression/table behaviors and multiplexing edge cases like stream races, priority starvation, and rapid resets.
  • H2→H1 Downgrade Translation Checks: Identify downgrade-induced vulnerabilities such as header injection via binary formatting, TE/CL discrepancies, and malformed header handling.

Quick Start

Use the http2-specific-attacks skill to generate an HTTP/2-focused testing plan for a target URL and include concrete probes for h2c, pseudo-header discrepancies, HPACK/multiplexing behaviors, and any observed H2→H1 downgrade path.

Frequently Asked Questions about http2-specific-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for HTTP/2 request smuggling via h2c upgrade?▼

To test HTTP/2 h2c upgrade smuggling, you probe whether proxies forward the Upgrade: h2c header without inspecting the resulting HTTP/2 tunnel, executing playbook-ready attack flows to validate bypasses.

What are common HTTP/2 pseudo-header manipulation attack vectors?▼

Common HTTP/2 pseudo-header manipulation vectors exploit discrepancies across :path, :authority, and :scheme to trigger routing confusion and access-control bypasses, validated using targeted detection probes.

How does HPACK table poisoning work in HTTP/2 security assessments?▼

HPACK table poisoning abuses HTTP/2 compression and dynamic table behaviors to inject or manipulate headers, causing cache poisoning or routing issues across multiplexed streams.

Can I detect single-packet race conditions using HTTP/2 multiplexing?▼

Yes, you detect single-packet race conditions by exploiting HTTP/2 multiplexing edge cases like concurrent stream races and rapid RST_STREAM abuse to assess concurrency vulnerabilities.

What vulnerabilities occur during HTTP/2 to HTTP/1.1 downgrade translation?▼

H2 to H1 downgrade translation flaws include header injection via binary formatting, TE/CL discrepancies, and malformed header handling caused when proxies translate between protocols.

Related Skills

Explore More Software Engineering Skills→
DorianGalloDorianGallo
5

http2-specific-attacks

Identifies HTTP/2 attack paths exploiting framing, HPACK compression, multiplexing quirks, and downgrade flaws for authorized security testing.

Community
Advanced
xalgordxalgord
846

http2-attacks

Assess HTTP/2 attack vectors including H2C smuggling and HPACK injection.

Community
Advanced
ok-helloworldok-helloworld
241

http2-specific-attacks

Identify and test HTTP/2-specific request-smuggling and desynchronization vulnerabilities.

Community
Advanced
Prohao42Prohao42
120

http2-specific-attacks

Analyze HTTP/2 protocol vulnerabilities including binary framing, HPACK compression, and multiplexing.

Community
Advanced