anshumanpattnaik/http-request-smugglingCLI tool to detect HTTP Request Smuggling vulnerabilities using time-delay analysis with built-in CL.TE and TE.CL payloads for automated security…
portswigger/http-request-smugglerBurp Suite extension for automated detection and exploitation of HTTP request smuggling vulnerabilities, supporting HTTP/1.1 and HTTP/2-downgrade…
defparam/smugglerPython-based HTTP request smuggling and desync testing tool that detects CL.TE and TE.CL vulnerabilities using configurable mutation payloads and…
bishopfox/h2csmugglerHTTP Request Smuggling over HTTP/2 Cleartext (h2c)
neex/http2smuglDetects and exploits HTTP request smuggling vulnerabilities via HTTP/2 to HTTP/1.1 conversion, using automated header smuggling techniques to…
dhmosfunk/cve-2023-25690-pocCVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling…
hahwul/smugglexRust-powered HTTP Request Smuggling Scanner.
dhmosfunk/http3onsteroidsPoC and lab environment for CVE-2023-25950: HTTP request smuggling via malformed header fields in HAProxy's HTTP/3 implementation, enabling DoS and…
sachinart/cve-2025-61882Multi-threaded scanner for CVE-2025-61882 in Oracle E-Business Suite, exploiting HTTP request smuggling to achieve unauthenticated remote code…
tess-ss/sap-memory-pipes-desynchronization-vulnerability-mpi-cve-2022-22536Proof-of-concept exploit for CVE-2022-22536, demonstrating HTTP request smuggling and cache poisoning against SAP NetWeaver servers to compromise…
giordy0424/cve-2023-25690_labHTTP Request Smuggling lab: Apache 2.4.55 CRLF injection
alikarimi999/cve-2021-40346Proof-of-concept exploit for CVE-2021-40346, an integer overflow in HAProxy enabling HTTP request smuggling and potential access control bypass.
becodoexploit-mrcat/sapgatebreaker-exploitSAPGateBreaker is a PoC exploit for CVE-2022-22536, a critical HTTP Request Smuggling vulnerability in SAP NetWeaver. It demonstrates how to bypass…
theopaid/cve-2026-66752-http-request-smuggling-via-unparsed-transfer-encoding-values-tiny_http-Security Advisory: HTTP Request Smuggling via Unparsed Transfer-Encoding Values (tiny_http)
thanhlam-attt/cve-2023-25690Proof-of-concept exploit for CVE-2023-25690 HTTP Request Smuggling in Apache mod_proxy. Includes lab environment with Docker, BurpSuite walkthrough,…
jmg0929/cve-2021-40346PoC exploit for CVE-2021-40346: HAProxy integer overflow enabling HTTP request smuggling and ACL bypass. Includes analysis, reproduction steps, and…
theopaid/cve-2026-67181-http-request-smuggling-via-transfer-encoding-desynchronization-rouille-Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization (rouille)
theopaid/cve-2026-67182-http-request-smuggling-enables-front-end-access-control-bypass-rouille-Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass (rouille)
