skills.rest
cybersecwoman
cybersecwomanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

hunt-http-smuggling

Detect and exploit HTTP request smuggling vulnerabilities in web applications.

5|Updated May 27, 2026
Search Tags:#exploitation#web security#vulnerability detection#security auditing#http request smuggling
One-click install
npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-http-smuggling-cybersecwoman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-http-smuggling
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/hunt-http-smuggling
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-http-smuggling-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and leverages HTTP request smuggling vulnerabilities, allowing for bypassing security measures and accessing sensitive information.

Core Features & Use Cases

  • Detection of HTTP Request Smuggling: Identifies CL.TE, TE.CL, H2.CL, and H2.TE vulnerabilities.
  • Exploitation Techniques: Provides methods to exploit the vulnerabilities for various purposes, such as bypassing authentication or stealing credentials.
  • Use Case: When auditing web applications, this Skill can be used to detect and exploit HTTP request smuggling vulnerabilities, potentially leading to unauthorized access or data breaches.

Quick Start

Use the hunt-http-smuggling skill to test for HTTP request smuggling vulnerabilities on the target application.

Frequently Asked Questions about hunt-http-smuggling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect HTTP request smuggling vulnerabilities in web applications?▼

You detect HTTP request smuggling vulnerabilities by testing web applications for CL.TE, TE.CL, H2.CL, and H2.TE scenarios using specialized detection scripts and auditing techniques.

What is HTTP request smuggling and how does it bypass web security measures?▼

HTTP request smuggling exploits how front-end and back-end servers process HTTP requests, allowing attackers to bypass security measures, access sensitive information, or steal credentials.

Do I need prior knowledge of the HTTP protocol to test for request smuggling?▼

Yes, you need knowledge of the HTTP protocol and web application security to effectively detect and exploit HTTP request smuggling vulnerabilities using this Skill.

How do I exploit CL.TE and TE.CL HTTP request smuggling vulnerabilities?▼

You exploit CL.TE and TE.CL vulnerabilities by applying the Skill's provided exploitation techniques to manipulate request headers, bypass authentication, and access restricted data.

Can I use this Skill to audit for H2.CL and H2.TE smuggling scenarios?▼

Yes, you can use the Skill to audit for H2.CL and H2.TE HTTP request smuggling scenarios, alongside traditional CL.TE and TE.CL detection techniques.

Related Skills

Explore More Software Engineering Skills→
cmndcntrlcybercmndcntrlcyber
3

hunt-http-smuggling

Detect HTTP request smuggling vulnerabilities by analyzing header parsing inconsistencies.

Community
Advanced
pdparchitectpdparchitect
13

cloud-iam-deep

Analyze cloud IAM privilege escalation paths across AWS, Azure, and GCP.

Community
Advanced
blacklanternsecurityblacklanternsecurity
253

request-smuggling

Detect and exploit HTTP request smuggling vulnerabilities using Burp Suite or smuggler.py.

Official
Advanced
SnailSploitSnailSploit
2.9k

request-smuggling

Detect and exploit HTTP request smuggling vulnerabilities across HTTP versions and proxy configurations.

Community
Advanced