skills.rest
blacklanternsecurity
blacklanternsecurityOFFICIAL
Explore all skills by this author →
WebsiteGitHub

request-smuggling

Detect and exploit HTTP request smuggling vulnerabilities using Burp Suite or smuggler.py.

253|37|Updated Feb 22, 2026
Search Tags:#penetration testing#web security#vulnerability exploitation#request smuggling#http desync#http/2
One-click install
npx skills add https://github.com/blacklanternsecurity/red-run --skill request-smuggling
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: request-smuggling
Source: https://github.com/blacklanternsecurity/red-run/tree/main/skills/web/request-smuggling
Command: npx skills add https://github.com/blacklanternsecurity/red-run --skill request-smuggling

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires smuggler.py, h2csmuggler, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps penetration testers identify and exploit HTTP request smuggling vulnerabilities, where front-end and back-end servers disagree on request boundaries, enabling attacks like request hijacking and access control bypass.

Core Features & Use Cases

  • Vulnerability Detection: Identifies CL.TE, TE.CL, and HTTP/2 downgrade smuggling.
  • Exploitation: Facilitates request hijacking, access control bypass, and cache poisoning.
  • Use Case: A penetration tester suspects a web application is vulnerable to request smuggling. They use this Skill to confirm the vulnerability and then craft a smuggled request to bypass an IP-based access control list, gaining access to an administrative interface.

Quick Start

Use the request-smuggling skill to detect and exploit CL.TE vulnerabilities against the target URL 'https://example.com'.

Frequently Asked Questions about request-smuggling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I exploit HTTP request smuggling vulnerabilities like CL.TE and TE.CL?▼

HTTP request smuggling exploits parsing discrepancies between front-end and back-end servers to manipulate request boundaries. By detecting CL.TE or TE.CL inconsistencies, attackers can hijack requests and bypass access controls.

Can I use h2csmuggler for HTTP/2 downgrade smuggling attacks?▼

Yes, h2csmuggler is specifically designed for HTTP/2 downgrade and H2C smuggling attacks. This tool helps leverage protocol parsing differences to establish smuggled communication channels with backend servers.

What is HTTP desync and how does it enable cache poisoning?▼

HTTP desync occurs when front-end and back-end servers disagree on request boundaries, allowing an attacker to inject malicious requests. This can be leveraged for cache poisoning by injecting responses that get cached and served to other users.

Does request smuggling work with HTTP/2 downgrade techniques?▼

Yes, HTTP/2 downgrade smuggling works by forcing a protocol downgrade to exploit parsing differences between HTTP/2 and HTTP/1.1. This allows attackers to bypass security controls by smuggling requests through the protocol translation layer.

What tools do I need to detect HTTP request smuggling vulnerabilities?▼

Detecting HTTP request smuggling requires tools like Burp Suite, smuggler.py, or h2csmuggler for automated scanning. These tools identify vulnerabilities by testing for CL.TE, TE.CL, and HTTP/2 downgrade parsing discrepancies.

Why does HTTP request smuggling allow access control bypass?▼

HTTP request smuggling bypasses access controls because the smuggled request is processed directly by the back-end server, bypassing the front-end server's security checks. This allows an attacker to access restricted interfaces like administrative panels.

Related Skills

Explore More Software Engineering Skills→
jokken79jokken79
1

Burp Suite Web Application Testing

Intercept, modify, and analyze HTTP traffic to identify web application vulnerabilities.

Community
Advanced
SkobynSkobyn

hunt-http-smuggling

Detect and exploit HTTP request smuggling vulnerabilities using time-delay techniques.

Community
Advanced
riparinoriparino
1

offensive-request-smuggling

Identify and test HTTP request smuggling vectors across front-end and back-end servers.

Community
Advanced
cybersecwomancybersecwoman
5

hunt-http-smuggling

Detect and exploit HTTP request smuggling vulnerabilities in web applications.

Community
Advanced