wgpsec/aboutsecurity

http-smuggling-advanced

HTTP 请求走私高级利用方法论。扩展 cache-poisoning-smuggling 的走私部分。当已确认存在 CL.TE/TE.CL/TE.TE/H2.CL 走私时使用。覆盖链式利用（窃取凭据、绕过 ACL、投毒 Web 缓存、XSS 其他用户）和 HTTP/2 降级走私

First seen Apr 22, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity

View on skills.sh ↗ GitHub repository ↗

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

request-smuggling Similar name

>- HTTP request smuggling and desynchronization testing. Use when front proxies, CDNs, or load …

>- Detects and exploits HTTP request smuggling caused by Content-Length/Transfer-Encoding parsi…

hunt-http-smuggling Similar name

Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end s…

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity

More details

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared

Cursor Not declared

Codex Not declared

GitHub Copilot Not declared

Windsurf Not declared

Gemini CLI Not declared

Cline Not declared

OpenCode Not declared

Stars 1.7K

Default branch master

Open issues 0

Status Active

npx skills add https://github.com/wgpsec/aboutsecurity