HTTP-Smuggling-Lab

HTTP-Smuggling-Lab is a lab for learning about the http request smuggling.

Installation

use docker-compose to build the lab in each directory.

Read the README.md in details in each directory.

In Lab1, we will chain some Reverse Proxy relations, Nginx will be the final backend, HaProxy the front load balancer, and between Nginx and HaProxy we will go through ATS6 or ATS7 based on the domain name used (dummy-host7.example.com for ATS7 and dummy-host6.example.com for ATS6).
Lab2 uses ATS as front server and uses LAMP and LNMP as backend servers.
Jetty is jetty v9.4.9. You will get more information in Jetty-README.
Websocket Lab is about the websocket http smuggling. You will get more information in Websocket-README.
HTTP/2 cleartext request smuggling please use this: h2csmuggler

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

Please make sure to update tests as appropriate.

Thanks to @regilero and mengchen@Knownsec 404 Team.

Name		Name	Last commit message	Last commit date
Latest commit History 20 Commits
h2c		h2c
jetty		jetty
lab1		lab1
lab2		lab2
lab3		lab3
nginx		nginx
websocket/lab1		websocket/lab1
.gitignore		.gitignore
README.md		README.md