http2-specific-attacks

Name: http2-specific-attacks
Availability: InStock
Author: Prohao42

Analyze HTTP/2 protocol vulnerabilities including binary framing, HPACK compression, and multiplexing.

120|8|Updated Jun 2, 2026

Search Tags:#race conditions #http2 #security vulnerabilities #header injection #protocol attacks

Ready to run

npx skills add https://github.com/Prohao42/aimy-skill --skill http2-specific-attacks-prohao42

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: http2-specific-attacks
Source: https://github.com/Prohao42/aimy-skill/tree/main/ai-mian/hack-skills/skills/http2-specific-attacks
Command: npx skills add https://github.com/Prohao42/aimy-skill --skill http2-specific-attacks-prohao42

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires h2, nghttp2, curl, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the unique security vulnerabilities in the HTTP/2 protocol, allowing users to exploit and defend against HTTP/2-specific attack vectors.

Core Features & Use Cases

HTTP/2 Protocol Attacks: Identifies and leverages binary framing, HPACK compression, multiplexing, server push, and pseudo-header injection flaws.
Single-packet Race Conditions: Exploits the HTTP/2 stream multiplexing to create race conditions for attacks.
Header Injection: Discovers and manipulates HTTP/2 pseudo-headers to bypass security controls.
Use Case: For security professionals looking to uncover and mitigate HTTP/2 vulnerabilities in their environments.

Quick Start

Run the skill to perform an HTTP/2-specific attack analysis on a target URL.

Frequently Asked Questions about http2-specific-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I exploit single-packet race conditions using HTTP/2 multiplexing?▼

To exploit single-packet race conditions using HTTP/2 multiplexing, you analyze binary framing and stream concurrency to send simultaneous requests. This Skill identifies stream multiplexing flaws to execute detailed network-level race condition attacks.

How does HPACK compression expose HTTP/2 protocol vulnerabilities?▼

HPACK compression exposes HTTP/2 protocol vulnerabilities by enabling header injection through dynamic table manipulation. This Skill analyzes HPACK encoding alongside binary framing to uncover and leverage pseudo-header injection flaws.

Can I use curl and nghttp2 to test HTTP/2 pseudo-header injection?▼

Yes, you can use curl and nghttp2 to test HTTP/2 pseudo-header injection. This Skill utilizes these dependencies to perform detailed network-level analysis and manipulate pseudo-headers to bypass security controls.

What is the best way to analyze HTTP/2 server push vulnerabilities?▼

The best way to analyze HTTP/2 server push vulnerabilities is to examine binary framing and stream multiplexing behavior. This Skill identifies and leverages server push flaws alongside HPACK compression issues for comprehensive protocol attacks.

Do I need advanced protocol knowledge to perform HTTP/2 specific attacks?▼

Yes, you need advanced knowledge of the HTTP/2 protocol to perform specific attacks. This Skill requires understanding binary framing, HPACK, and multiplexing to execute detailed network-level analysis and exploit protocol-specific vulnerabilities.