Tests HTTP request smuggling and desynchronization between proxies, CDNs, and origin servers.
npx skills add https://github.com/lNwNl/Praxis --skill request-smuggling-lnwnl
Please help me install this Agent Skill. Skill: request-smuggling Source: https://github.com/lNwNl/Praxis/tree/main/skills/request-smuggling Command: npx skills add https://github.com/lNwNl/Praxis --skill request-smuggling-lnwnl
High-intent search queries and answers about installing and using this skill.
Start with a CL.TE probe: send a POST with both Content-Length and Transfer-Encoding: chunked headers, using a short Content-Length so the front end ends the request early while the back end continues chunk parsing. Confirm with timing delays or a smuggled prefix affecting the next request on the same connection.
CL.TE occurs when the front end trusts Content-Length but the back end trusts Transfer-Encoding, leaving extra bytes for the next request. TE.CL is the reverse: the front end parses chunked encoding while the back end reads only Content-Length, leaving the remaining chunk bytes buffered.
Burp Suite's HTTP Request Smuggler extension automates variant scanning and timing-delta checks. The defparam/smuggler Python scripts batch-generate CL.TE and TE.CL probes, and h2csmuggler handles HTTP/2 cleartext smuggling scenarios.
Yes, when a front end speaks HTTP/2 and downgrades to HTTP/1.1 toward the back end. H2.CL exploits disagreement between the H2 frame length and a forwarded content-length header, while H2.TE exploits transfer-encoding headers that proxies fail to strip during downgrade.
CL.0 occurs when a back end ignores the Content-Length header entirely and treats the body as empty, leaving body bytes in the socket buffer for the next request. It applies to endpoints that respond without consuming the body, such as redirects, static file servers, and health checks.
Avoid testing outside authorized scope, since concurrent smuggling can poison shared connection pools, corrupt caches, and affect other tenants. Prefer isolated environments or low-traffic windows, and lower probe concurrency on production systems.
EntroVyxDetects and validates HTTP request smuggling vulnerabilities via timing-based probes and desync payloads.
xalgordTests web applications for HTTP Host header injection vulnerabilities including password reset poisoning and cache poisoning.
dreadnodeConstruct nested CRLF injection payloads to execute JavaScript despite strict Content Security Policy.
chatbotkitDetect HTTP request smuggling variants using Burp extension and time-delay techniques.
