vuln-crlf

To test for CRLF injection in HTTP headers, probe web application parameters by injecting Carriage Return and Line Feed sequences to determine if user input can manipulate the HTTP response headers. This skill automates the reflection testing process.

HTTP response splitting is a vulnerability where CRLF injection successfully terminates HTTP headers and injects a malicious response body. This skill verifies response splitting by checking if injected CRLF sequences can break header boundaries on authorized targets.

Yes, you can use this skill for penetration testing and bug bounty hunting. It is specifically designed for security assessments to identify header manipulation risks like cache poisoning and session fixation during authorized web target testing.

Identify cookie injection vulnerabilities by testing parameters for CRLF sequences that allow overwriting or fixating session cookies. This skill assesses whether attacker-controlled input can inject malicious Set-Cookie headers into the HTTP response.

Testing CRLF injection vulnerabilities requires strict adherence to scope definitions, engagement markers, and safety gates. This ensures the validation process prevents unauthorized impact on production systems during security assessments.