Crlf

Description

--- description: Test for CRLF / HTTP response-splitting and host-header injection — Set-Cookie injection, cache poisoning, reset-poisoning. Usage: /crlf <url> [--host-header] | /crlf -l urls.txt --- # /crlf Inject carriage-return/line-feed sequences into the path/query (and optionally the Host/forwarding headers) and check whether an attacker-controlled header lands in the **response** — proof of CRLF injection. ## Usage ``` /crlf "https://target.com/redirect?url=x" /crlf https://target.com

Installation

Installs to ~/.claude/skills/awarexone-agentic-bug-hunter-crlf/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.