A rapid HTTP downgrade smuggling scanner written in Go.
A curated list of awesome blogs and tools about HTTP request smuggling attacks. Feel free to contribute! 🍻
HTTP request smuggling attack helper/CLI tools to manipulate HTTP packets
Blog about HTTP Request Smuggling, including a demo application.
Automated Discovery of Parsing Discrepancy Related Bypasses in Web Application Firewalls Using HTTP Request Fuzzing.
A lab-driven course on breaking web applications and explaining how to fix them — 491 notes, 36 reproducible labs, mapped to OWASP WSTG and the PortSwigger Top 10 Web Hacking Techniques.
Differential fuzzer that finds HTTP parser discrepancies across 54 servers to uncover request-smuggling primitives.
Burp extension to calculate the byte size of selections made in text windows
Compliance evidence for HTTP header security. Assesses both sides of the exchange — the request headers an attacker manipulates and the response headers you must send — confirms every finding with a second probe, maps it to OWASP ASVS 5.0 and PCI DSS 4.0.1, and reports what it could not assess instead of counting it as a pass.
Burp Suite Pro extension (Montoya API): HTTP request-smuggling / desync hypothesis scanner with a framing-aware, oracle-free classifier and Burp Collaborator OOB (SSRF) detection.
An HTTP/1.1 parser with a hard memory ceiling: 2352 bytes per request, 48-byte deepest stack frame, zero heap allocations - each enforced by the build rather than promised in prose.
Phage: an evolutionary HTTP/3-to-HTTP/1 request-smuggling desync fuzzer. A fork of CyberArk QuicDrawH3 that adds a MAP-Elites engine, QUIC-state genes (bare FIN, RESET), and H3/H2 downgrade operators on top of the Quic-Fin-Sync primitive.
HTTP Request Smuggling & Client-Side Desync framework for Exchange OWA. CL.TE/TE.CL detection, email spoofing, cache poisoning.
Lab didático de HTTP Request Smuggling (TE.CL) — servidor vulnerável em C + exploits Python
sRX87 is SSL/TLS reconnaissance and exploitation framework. It runs 12 stages: transport recon, cert parsing, cipher enumeration, real crypto oracles, HTTP smuggling, auth bypass, SSRF, cloud metadata, CVE correlation, and 20-format reporting.
Detect and confirm HTTP/S desync vulnerabilities
8-phase cache & transport attack scanner — cache poison, request smuggling, H2C, CDN bypass
automatic HTTP request smuggling vulnerability detection
To associate your repository with the request-smuggling topic, visit your repo's landing page and select "manage topics."