skills.rest
bingook
bingookCOMMUNITY
Explore all skills by this author →
GitHub

http2-specific-attacks

Exploit HTTP/2 protocol vulnerabilities including HPACK compression and stream multiplexing abuse.

Updated Aug 23, 2026
Search Tags:#vulnerability assessment#security testing#http2#protocol attacks#binary framing
One-click install
npx skills add https://github.com/bingook/bingo --skill http2-specific-attacks-bingook
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: http2-specific-attacks
Source: https://github.com/bingook/bingo/tree/main/bingo/skills/hack-skills/http2-specific-attacks
Command: npx skills add https://github.com/bingook/bingo --skill http2-specific-attacks-bingook

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a specialized playbook for HTTP/2 protocol attacks, enabling security professionals to exploit vulnerabilities in the HTTP/2 protocol for targeted security testing.

Core Features & Use Cases

  • HTTP/2 Protocol Attacks: Exploit binary framing, HPACK compression, h2c upgrade smuggling, pseudo-header injection, stream multiplexing abuse, and H2→H1 downgrade translation flaws.
  • Use Case: When targeting a server that supports HTTP/2 and requires specific attack techniques beyond basic request smuggling.

Quick Start

Use the http2-specific-attacks skill to scan for HTTP/2-specific vulnerabilities in the target server.

Frequently Asked Questions about http2-specific-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test for HTTP/2 protocol vulnerabilities like h2c upgrade smuggling?▼

Testing for HTTP/2 protocol vulnerabilities involves exploiting specific features like binary framing, HPACK compression, and h2c upgrade smuggling to identify security weaknesses unique to the HTTP/2 protocol.

What is HTTP/2 stream multiplexing abuse and how does it impact security?▼

HTTP/2 stream multiplexing abuse is an attack technique that exploits the protocol's concurrent stream handling. It impacts security by enabling targeted exploitation of server resource allocation and connection handling flaws unique to HTTP/2.

Can I use this for HTTP/2 downgrade translation flaws and pseudo-header injection?▼

Yes, this targets H2→H1 downgrade translation flaws and pseudo-header injection directly. It applies to environments using HTTP/2, focusing on exploiting attack surfaces unique to the protocol.

When do I need specialized techniques for HTTP/2 security testing?▼

You need specialized techniques for HTTP/2 security testing when targeting a server that supports HTTP/2 and requires specific attack methods beyond basic request smuggling, focusing on protocol-specific vulnerabilities like HPACK compression flaws.

What is the best way to scan a target server for HTTP/2 specific vulnerabilities?▼

The best way to scan for HTTP/2 specific vulnerabilities is to apply a specialized playbook targeting binary framing and stream multiplexing abuse. This identifies and exploits security weaknesses unique to the HTTP/2 protocol.

Related Skills

Explore More Software Engineering Skills→
utsavthakurutsavthakur

http2-specific-attacks

Identify and exploit HTTP/2 protocol security vulnerabilities in binary framing, HPACK, and multiplexing.

Community
Advanced
ok-helloworldok-helloworld
241

http2-specific-attacks

Identify and test HTTP/2-specific request-smuggling and desynchronization vulnerabilities.

Community
Advanced
DorianGalloDorianGallo
5

http2-specific-attacks

Identifies HTTP/2 attack paths exploiting framing, HPACK compression, multiplexing quirks, and downgrade flaws for authorized security testing.

Community
Advanced
lNwNllNwNl
2

http2-specific-attacks

Identify HTTP/2 attack vectors exploiting binary framing, HPACK, multiplexing, and downgrade flaws.

Community
Advanced