Skip to content
cccskills

Results for “h2c”

5 skills · sorted by relevance

Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree on where one request ends and the next begins (Content-Length vs Transfer-Encoding header parsing inconsistency). CL.TE: front-end uses CL, back uses TE → smuggle by sending TE: chunked but with body that fits CL count. TE.CL: opposite. H2.CL: HTTP/2 downgrade, smuggle CL into HTTP/1.1 back-end. Detection tools: Burp HTTP Request Smuggler extension, smuggler.py, h2csmuggler. Confirm: time-delay technique (smuggled GET with 30s timeout) — if front-end returns slow on next victim request, smuggling works. Validate: cache poisoning chain (smuggle request that gets cached for victim), credential theft (smuggle X-Forwarded-For override that captures next user's cookies), bypass auth (smuggled internal-path request). Real paid examples from major CDN deployments. Use when hunting H1 paid programs running CDN+origin stacks, when targeting load balancer / WAF bypass.

The English summary is being prepared. Showing the original description.

elementalsouls/Claude-BugHunter5.2KUpdated Oct 18, 2026

HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to exploit binary framing, HPACK compression, h2c upgrade smuggling, pseudo-header injection, stream multiplexing abuse, or H2→H1 downgrade translation flaws.

The English summary is being prepared. Showing the original description.

yaklang/hack-skills2.5KUpdated Sep 13, 2026

End-to-end 3D printing for Bambu Lab printers. Finds models online (MakerWorld, Printables), generates them with AI (text-to-3D, image-to-3D) or as exact-dimension parametric CAD, checks and repairs printability, converts textures to AMS multi-color, renders previews, opens them in Bambu Studio for the user to print, and reads printer status, AMS filaments and print progress. Use this whenever the user wants to 3D print something, design or model an object for printing, work with STL/3MF/OBJ/GLB files for a printer, check on a Bambu Lab printer (A1, A1 Mini, A2L, P1S, P2S, X1C, X1E, X2D, H2C, H2S, H2D, H2D Pro), or asks about AMS filament, slicing or print progress, even if they don't say "Bambu".

The English summary is being prepared. Showing the original description.

heyixuan2/bambu-studio-ai229Updated Sep 20, 2026

HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to exploit binary framing, HPACK compression, h2c upgrade smuggling, pseudo-header injection, stream multiplexing abuse, or H2→H1 downgrade translation flaws.

The English summary is being prepared. Showing the original description.

ShulkwiSEC/bb-huge23Updated Jul 11, 2026

HTTP Request Smuggling — frontend/backend HTTP parser uyumsuzluğunu sömürerek auth bypass, cache poisoning, internal endpoint erişimi

The English summary is being prepared. Showing the original description.

MustafaKemal0146/fetih5Updated Oct 11, 2026