http-smuggling - HTTP Request Smuggling Detection and Exploitation
Detect and exploit HTTP Request Smuggling (CL.TE, TE.CL, TE.TE, H2.CL, H2.TE, CL.0) against targets behind reverse proxies, load balancers, or CDNs.
Tags
Updated: 2026-06-30http-request-smugglingdesyncreverse-proxyvulnerability-huntingcache-poisoningauth-bypasssecurity-testing
Capabilities
Typical Inputs
What this skill does
- Send crafted HTTP smuggling probes
- Detect CL.TE desync vulnerabilities
- Detect TE.CL desync vulnerabilities
- Detect TE.TE obfuscation vulnerabilities
- Detect H2.CL downgrade smuggling
- Detect H2.TE downgrade smuggling
- Detect CL.0 parsing discrepancies
- Bypass front-end access controls
- Capture subsequent user requests
- Poison cache via smuggling
- Generate vulnerability report
Inputs
- Target URL
- Reverse proxy chain
- HTTP request template
- Test account credentials
Outputs
- Vulnerability report
- Proof-of-concept HTTP requests
- Smuggling detection results
Requirements
- Burp Suite Pro with HTTP Request Smuggler extension
- smuggler.py (Python 3)
- Network access to target
- HTTP/2-capable testing tools (nuclei, Burp Pro)
