Skills
.Work. You
Rest

http-request-smuggling

Official

Exploit HTTP desync vulnerabilities.

Software Engineering#penetration testing#web security#vulnerability detection#session hijacking#http request smuggling#access control bypass
Authorsecurityfortech
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps identify and exploit vulnerabilities in how web servers and proxies interpret HTTP requests, leading to unauthorized access and data breaches.

Core Features & Use Cases

  • Vulnerability Detection: Identifies HTTP Request Smuggling flaws using CL.TE, TE.CL, and TE.TE techniques.
  • Exploitation: Bypasses access controls, poisons caches, hijacks sessions, and captures user requests.
  • Use Case: An attacker can use this skill to smuggle a request to an admin-only endpoint that is normally protected by a front-end proxy, gaining unauthorized access.

Quick Start

Use the http-request-smuggling skill to detect CL.TE vulnerabilities against the target URL.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: http-request-smuggling
Download link: https://github.com/securityfortech/hacking-skills/archive/main.zip#http-request-smuggling

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.