skills.rest
Prohao42
Prohao42COMMUNITY
Explore all skills by this author →
GitHub

http2-specific-attacks

Analyze HTTP/2 protocol vulnerabilities including binary framing, HPACK compression, and multiplexing.

120|8|Updated Jun 2, 2026
Search Tags:#race conditions#http2#security vulnerabilities#header injection#protocol attacks
One-click install
npx skills add https://github.com/Prohao42/aimy-skill --skill http2-specific-attacks-prohao42
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: http2-specific-attacks
Source: https://github.com/Prohao42/aimy-skill/tree/main/ai-mian/hack-skills/skills/http2-specific-attacks
Command: npx skills add https://github.com/Prohao42/aimy-skill --skill http2-specific-attacks-prohao42

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires h2, nghttp2, curl, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the unique security vulnerabilities in the HTTP/2 protocol, allowing users to exploit and defend against HTTP/2-specific attack vectors.

Core Features & Use Cases

  • HTTP/2 Protocol Attacks: Identifies and leverages binary framing, HPACK compression, multiplexing, server push, and pseudo-header injection flaws.
  • Single-packet Race Conditions: Exploits the HTTP/2 stream multiplexing to create race conditions for attacks.
  • Header Injection: Discovers and manipulates HTTP/2 pseudo-headers to bypass security controls.
  • Use Case: For security professionals looking to uncover and mitigate HTTP/2 vulnerabilities in their environments.

Quick Start

Run the skill to perform an HTTP/2-specific attack analysis on a target URL.

Frequently Asked Questions about http2-specific-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I exploit single-packet race conditions using HTTP/2 multiplexing?▼

To exploit single-packet race conditions using HTTP/2 multiplexing, you analyze binary framing and stream concurrency to send simultaneous requests. This Skill identifies stream multiplexing flaws to execute detailed network-level race condition attacks.

How does HPACK compression expose HTTP/2 protocol vulnerabilities?▼

HPACK compression exposes HTTP/2 protocol vulnerabilities by enabling header injection through dynamic table manipulation. This Skill analyzes HPACK encoding alongside binary framing to uncover and leverage pseudo-header injection flaws.

Can I use curl and nghttp2 to test HTTP/2 pseudo-header injection?▼

Yes, you can use curl and nghttp2 to test HTTP/2 pseudo-header injection. This Skill utilizes these dependencies to perform detailed network-level analysis and manipulate pseudo-headers to bypass security controls.

What is the best way to analyze HTTP/2 server push vulnerabilities?▼

The best way to analyze HTTP/2 server push vulnerabilities is to examine binary framing and stream multiplexing behavior. This Skill identifies and leverages server push flaws alongside HPACK compression issues for comprehensive protocol attacks.

Do I need advanced protocol knowledge to perform HTTP/2 specific attacks?▼

Yes, you need advanced knowledge of the HTTP/2 protocol to perform specific attacks. This Skill requires understanding binary framing, HPACK, and multiplexing to execute detailed network-level analysis and exploit protocol-specific vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
ryukyagamilightryukyagamilight
1

traffic-analysis

Capture and analyze network packets using tcpdump and tshark.

Community
Intermediate
lNwNllNwNl
2

http2-specific-attacks

Identify HTTP/2 attack vectors exploiting binary framing, HPACK, multiplexing, and downgrade flaws.

Community
Advanced
ok-helloworldok-helloworld
241

http2-specific-attacks

Identify and test HTTP/2-specific request-smuggling and desynchronization vulnerabilities.

Community
Advanced
randrand
126

discover-protocols

Automate discovery of protocol skills for HTTP, TCP, UDP, and QUIC workflows.

Community
Basic