smuggler
Detects HTTP request smuggling (CL.TE / TE.CL desync) against a target with minimal, safe probes. First stop before manual desync exploitation.
Tags: request-smuggling, desync, http
- Category
- smuggling
- Maintenance signal
- maintained
Use this when: Smuggling. A timing difference is a lead. Keep the probe off other users' requests.
Install
git
git clone https://github.com/defparam/smuggler && cd smugglerCommand templates
Test a host
python3 smuggler.py -u {url}