Detect and map HTTP request smuggling vulnerabilities across proxies and backends.
npx skills add https://github.com/Yliken/ai4 --skill request-smuggling-yliken
Please help me install this Agent Skill. Skill: request-smuggling Source: https://github.com/Yliken/ai4/tree/main/skills/request-smuggling Command: npx skills add https://github.com/Yliken/ai4 --skill request-smuggling-yliken
HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load balancers disagree with the origin on message framing (Content-Length vs Transfer-Encoding), on HTTP/2→HTTP/1 translation, or when exploring client-side desync via browser fetch pipelines.
Run authorized, controlled tests against a target to identify HTTP request smuggling boundaries and document the findings.
High-intent search queries and answers about installing and using this skill.
HTTP request smuggling detection involves running repeatable probes across proxy hops to identify CL.TE, TE.CL, and TE.TE boundary desynchronization. It validates where front proxies and origin servers disagree on message framing and documents findings with logs.
CL.TE and TE.CL are HTTP request smuggling variants describing how proxies and backends disagree on message framing. CL.TE prioritizes Content-Length front and Transfer-Encoding back, while TE.CL reverses it. Repeatable probes validate both and collect evidence.
Yes, testing HTTP/2 downgrade smuggling and client-side desync is supported. Probes validate HTTP/2 to HTTP/1 translation disagreements and browser fetch pipeline desynchronization, producing logs and evidence for analysis.
Validate HTTP request smuggling mitigations by assessing network paths through your CDN to uncover where HTTP request framing differs between hops. Repeatable probes test CL.TE, TE.CL, and TE.TE variants to verify boundary disagreements are resolved.
HTTP request smuggling probes require authorized, controlled testing against targets. Limitations include the need for careful execution to avoid service disruption and the potential inability to cover all custom proxy configurations or non-standard HTTP implementations.
salmanabdurrahmanDetect HTTP request smuggling via timing probes and differential response testing.
TheBushidoCollectiveDetect and prevent security vulnerabilities in PHP web applications.
jinyimeng01Detect HTTP request smuggling vulnerabilities via CL.TE, TE.CL, and TE.TE testing.
SnailSploitDetect and exploit HTTP request smuggling vulnerabilities across HTTP versions and proxy configurations.
