Tools

martinfabianionut/cve-2025-55315

Proof-of-concept exploit for CVE-2025-55315 (.NET HTTP Request Smuggling). Demonstrates how improperly parsed chunked encoding lets attackers smuggle…

n0npax/cve-2020-35669

Proof-of-concept exploit for CVE-2020-35669 demonstrating HTTP request smuggling and header injection in Dart's http package via crafted method…

abhisek3122/cve-2025-23167

Working exploit for CVE-2025-23167 – HTTP request smuggling in vulnerable Node.js 20.x versions before 20.19.2

vuongnv3389-sec/cve-2019-20372

Proof-of-concept exploit for CVE-2019-20372: HTTP request smuggling via nginx error_page directive, enabling access to hidden resources.

alexoarga/cve-2021-40346

Proof-of-concept for CVE-2021-40346, demonstrating HTTP request smuggling in HAProxy via integer overflow, with Docker-based environment to bypass…

metapox/cve-2020-25613

Proof-of-concept exploit for HTTP request smuggling vulnerability CVE-2020-25613, demonstrating chunked transfer encoding parsing bypass to poison…

progfay/nodejs-http-transfer-encoding-smuggling-poc

PoC of HTTP Request Smuggling in nodejs (CVE-2020-8287)

sh1yo/request_smuggler

Http request smuggling vulnerability scanner

bahruzjabiyev/t-reqs

Grammar-based HTTP/1 fuzzer with mutation ability

zemarkhos/cve-2025-55315-poc-exploit

CVE-2025-55315 PoC Exploit

soltanali0/cve-2024-40725

exploit CVE-2024-40725 (Apache httpd) with

jlinebau/cve-2025-55315-scanner-monitor

Quick and Simple Scripts to Scan for Vulnerable Servers and Packet Level Monitors

moften/cve-2019-20372

Nginx CVE-2019-20372 PoC, Unauthenticated File Upload Exploit

george0papasotiriou/cve-2026-1010-websocket-connection-smuggling-via-malformed-upgrade-header

Proof-of-concept exploit for CVE-2026-1010, demonstrating WebSocket connection smuggling and request splitting through a malformed Upgrade header…