skills.rest
Kisilev13
Kisilev13COMMUNITY
Explore all skills by this author →
GitHub

hunt-http-smuggling

Detect and exploit HTTP request smuggling vulnerabilities in web applications.

Updated Jun 18, 2026
Search Tags:#security#exploitation#vulnerability detection#web application security#http request smuggling
One-click install
npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-http-smuggling-kisilev13
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-http-smuggling
Source: https://github.com/Kisilev13/Hermes-Agent-Workspace/tree/main/skills/hunt-http-smuggling
Command: npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill hunt-http-smuggling-kisilev13

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and exploits HTTP request smuggling vulnerabilities, enabling the attacker to bypass security measures and perform unauthorized actions.

Core Features & Use Cases

  • Vulnerability Detection: Identifies CL.TE, TE.CL, H2.CL, and H2.TE vulnerabilities.
  • Exploitation: Provides methods to exploit these vulnerabilities.
  • Use Case: Detect and exploit vulnerabilities in web applications that use inconsistent header parsing between front-end proxies and back-end servers.

Quick Start

Use the hunt-http-smuggling skill to check for HTTP request smuggling vulnerabilities on the target domain 'example.com'.

Frequently Asked Questions about hunt-http-smuggling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How does HTTP request smuggling bypass front-end proxy security measures?▼

HTTP request smuggling exploits parsing discrepancies between front-end proxies and back-end servers to bypass access controls and perform unauthorized actions on web applications.

What is the difference between CL.TE and TE.CL vulnerabilities?▼

CL.TE and TE.CL represent HTTP request smuggling variants exploiting inconsistent header parsing between proxies and servers, using Content-Length and Transfer-Encoding discrepancies to desynchronize request processing.

Can I detect H2.CL and H2.TE vulnerabilities in HTTP/2 web applications?▼

Yes, H2.CL and H2.TE vulnerabilities in HTTP/2 web applications can be detected by targeting parsing inconsistencies between HTTP/2 front-end proxies and HTTP/1.1 back-end servers to identify request smuggling vectors.

How do I exploit HTTP request smuggling vulnerabilities on a target domain?▼

Exploit HTTP request smuggling on a target domain by applying CL.TE, TE.CL, H2.CL, and H2.TE techniques to identify parsing inconsistencies, bypass security measures, and execute unauthorized actions.

When should I test web applications for HTTP request smuggling?▼

Test web applications for HTTP request smuggling when they use HTTP/1. or HTTP/2 protocols with front-end proxies and back-end servers, as inconsistent header parsing between these layers creates exploitable vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
Prohao42Prohao42
120

request-smuggling

Detect CL.TE, TE.CL, and HTTP/2 downgrade desynchronization between proxies and origins.

Community
Advanced
AcczdyAcczdy
2

conducting-internal-network-penetration-test

Simulate internal network penetration tests to reveal lateral movement and privilege escalation paths.

Community
Advanced
cmndcntrlcybercmndcntrlcyber
3

hunt-http-smuggling

Detect HTTP request smuggling vulnerabilities by analyzing header parsing inconsistencies.

Community
Advanced
jayjpatel9717jayjpatel9717

xss-review

Detect cross-site scripting vulnerabilities in web applications using pattern-based analysis.

Community
Advanced