web-vuln-http-smuggling

What problem does it solve?

This Skill provides a structured methodology to discover and confirm HTTP request smuggling (desync) vulnerabilities that arise from parser disagreements between front-end proxies/CDNs and back-end servers, preventing cache poisoning, request hijacking, WAF bypass, and credential theft.

Core Features & Use Cases

• Variant Coverage: Tests CL.TE, TE.CL, TE.TE, and H2.CL variants using timing probes, header obfuscation, and downgrade checks.
• Practical Probes: Provides repeatable curl and netcat probe patterns plus guidance for Burp Suite automation to generate timing signals and differential responses.
• Verification & Impact: Describes differential-response confirmation techniques and documents impact chains and proxy fingerprint indicators to support triage and reporting.
• Use Case: Ideal for penetration testing or bug bounty assessments of web applications behind CDNs, load balancers, or reverse proxies where misframed requests can be abused.

Quick Start

Run the CL.TE timing probe against a POST endpoint behind a proxy and follow up any timing signals with differential response verification using curl or netcat.