LogoClawIndex
CasesSkillsAbout
LogoClawIndex

http-smuggling - HTTP Request Smuggling Detection and Exploitation

Detect and exploit HTTP Request Smuggling (CL.TE, TE.CL, TE.TE, H2.CL, H2.TE, CL.0) against targets behind reverse proxies, load balancers, or CDNs.

Tags

Updated: 2026-06-30
http-request-smugglingdesyncreverse-proxyvulnerability-huntingcache-poisoningauth-bypasssecurity-testing

Capabilities

Send crafted HTTP smuggling probesDetect CL.TE desync vulnerabilitiesDetect TE.CL desync vulnerabilitiesDetect TE.TE obfuscation vulnerabilities

Typical Inputs

Target URLReverse proxy chainHTTP request template

Typical Outputs

Vulnerability reportProof-of-concept HTTP requestsSmuggling detection results

What this skill does

  • Send crafted HTTP smuggling probes
  • Detect CL.TE desync vulnerabilities
  • Detect TE.CL desync vulnerabilities
  • Detect TE.TE obfuscation vulnerabilities
  • Detect H2.CL downgrade smuggling
  • Detect H2.TE downgrade smuggling
  • Detect CL.0 parsing discrepancies
  • Bypass front-end access controls
  • Capture subsequent user requests
  • Poison cache via smuggling
  • Generate vulnerability report

Inputs

  • Target URL
  • Reverse proxy chain
  • HTTP request template
  • Test account credentials

Outputs

  • Vulnerability report
  • Proof-of-concept HTTP requests
  • Smuggling detection results

Requirements

  • Burp Suite Pro with HTTP Request Smuggler extension
  • smuggler.py (Python 3)
  • Network access to target
  • HTTP/2-capable testing tools (nuclei, Burp Pro)

Source

  • Spec: SKILL.md

ClawIndex

OpenClaw Skills & Use Case Index

ClawIndex is an ecosystem-driven index of OpenClaw skills and real-world use cases.

Index

Skills·
Cases

Meta

About·
Disclaimer·
Email·
GitHub
© 2026 ClawIndex All Rights Reserved.