S1N6H

0x002132 Skills Bugbounty Hunt HTTP Smuggling — Development skill for Claude Code

Development community

Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE).

How to install 0x002132 Skills Bugbounty Hunt HTTP Smuggling

Installs to ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-http-smuggling/SKILL.md

Terminal

mkdir -p ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-http-smuggling && curl -fsSL https://raw.githubusercontent.com/S1N6H/Bug-Bounty-Skills/HEAD/skills/0x002132-skills-bugbounty-hunt-http-smuggling.md -o ~/.claude/skills/s1n6h-bug-bounty-skills-0x002132-skills-bugbounty-hunt-http-smuggling/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What 0x002132 Skills Bugbounty Hunt HTTP Smuggling does

name: hunt-http-smuggling description: "Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree on where one request ends and the next begins (Content-Length vs Transfer-Encoding header parsing inconsistency). CL.TE: front-end uses CL, back uses TE → smuggle by sending TE: chunked but with body that fits CL count. TE.CL: opposite. H2.CL: HTTP/2 downgrade, smuggle CL into HTTP/1.1 back-end. Detection tools: Burp HTTP Request Smuggler exten

Alternatives in Development

Bypass 403 — Probe a 403/401 endpoint with the most-paid bypass tricks (header injection, path encoding, method swap, WAF f 4.5k ★
License — Check that every Python source file carries the required SPDX Apache-2.0 license header 1.1k ★
Synthesis — Write the synthesis under the ## Synthesis header 664 ★