What is pentest-http-smuggling?
HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing. Source: jd-opensource/joysafeter.
·pentest-http-smuggling
!
pentest-http-smuggling
✓HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing.
Installation
How to Install pentest-http-smuggling
Quickly install pentest-http-smuggling AI skill to your development environment via command line
- Open Terminal: Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.)
- Run Installation Command: Copy and run this command: npx skills add https://github.com/jd-opensource/joysafeter --skill pentest-http-smuggling
- Verify Installation: Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code, Cursor, or OpenClaw
Source: jd-opensource/joysafeter.
SKILL.md
View rawPurpose Detect and exploit discrepancies between front-end proxies and back-end servers in HTTP request parsing. These attacks bypass security controls, poison caches, and hijack requests — entirely absent from standard taint analysis pipelines.
| WSTG-INPV-15 | HTTP Request Smuggling | ✅ | | WSTG-INPV-17 | Host Header Injection | ✅ |
| Smuggling Detection | smuggler.py, HTTP Request Smuggler (Burp) | Automated CL.TE/TE.CL detection | | HTTP/2 Testing | h2csmuggler, curl --http2, nghttp | H2 downgrade and desync attacks | | Timing Attacks | Turbo Intruder | Microsecond-precision request timing | | Raw Requests | Python sockets, netcat | Crafted malformed HTTP requests |
HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing. Source: jd-opensource/joysafeter.
Facts (cite-ready)
Stable fields and commands for AI/search citations.
- Install command
npx skills add https://github.com/jd-opensource/joysafeter --skill pentest-http-smuggling- Source
- jd-opensource/joysafeter
- Category
- !Security
- Verified
- ✓
- First Seen
- 2026-02-26
- Updated
- 2026-03-10
Quick answers
How do I install pentest-http-smuggling?
Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.) Copy and run this command: npx skills add https://github.com/jd-opensource/joysafeter --skill pentest-http-smuggling Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code, Cursor, or OpenClaw
Where is the source repository?
https://github.com/jd-opensource/joysafeter
Details
- Category
- !Security
- Source
- skills.sh
- First Seen
- 2026-02-26