Http request smuggling vulnerability scanner

Last update: Dec 18, 2022

Related tags

Overview

Request smuggler

Http request smuggling vulnerability scanner

Based on the amazing research by James Kettle. The tool can help to find servers that may be vulnerable to request smuggling vulnerability.

Usage

Example: -H 'one:one' 'two:two' -X, --method (default is "POST") -u, --url -v, --verbose 0 - print detected cases and errors only, 1 - print first line of server responses (default is 0) ">

USAGE:
    request_smuggler [FLAGS] [OPTIONS] --url 

FLAGS:
        --full       Tries to detect the vulnerability using differential responses as well.
                     Can disrupt other users!!!
    -h, --help       Prints help information
    -V, --version    Prints version information

OPTIONS:
        --amount-of-payloads     low/medium/all (default is "low")
    -H, --header                            Example: -H 'one:one' 'two:two'
    -X, --method                             (default is "POST")
    -u, --url 
    -v, --verbose 
            0 - print detected cases and errors only, 1 - print first line of server responses (default is 0)

Installation

Linux

from releases

from source code (rust should be installed)

git clone https://github.com/Sh1Yo/request_smuggler
cd request_smuggler
cargo build --release

using cargo install

cargo install request_smuggler --version 0.1.0-alpha.1

Mac

from source code (rust should be installed)

git clone https://github.com/Sh1Yo/request_smuggler
cd request_smuggler
cargo build --release

using cargo install

cargo install request_smuggler --version 0.1.0-alpha.1

Windows
- from releases

Automated attack surface mapper and vulnerability scanner

Phaser Automated attack surface mapper and vulnerability scanner What is this? Phaser is a high-performance and automated attack surface mapper and vu

74 Dec 16, 2022

python dependency vulnerability scanner, written in Rust.

🐍 Pyscan A dependency vulnerability scanner for your python projects, straight from the terminal. 🚀 blazingly fast scanner that can be used within l

80 Jun 4, 2023

RustVulnsScan is a powerful system vulnerability scanner written in Rust

RustVulnsScan is a powerful system vulnerability scanner written in Rust. It allows you to perform comprehensive scans of your system to identify potential vulnerabilities and security risks.

2 Jul 2, 2023

An experimental HTTP server in Rust that supports HTTP/1.1, HTTP/2, and HTTP/3 over QUIC.

🚀 H123 An experimental HTTP server in Rust that supports HTTP/1.1, HTTP/2, and HTTP/3 over QUIC. Warning This is an experimental project and not inte

7 Dec 15, 2022

HTTP request logger

nosy - HTTP request logger How hard can it be to build your own HTTP request logger in Rust? Well, not that easy if you've never written a webapp in R

1 Nov 26, 2021

HTTP microservice using Axum and Reqwest to request the Google Translate TTS endpoint without rate limits

5 Oct 5, 2022

A blazingly fast HTTP client with a magnificent request building syntax, made for humans.

🔗 glue Make requests, select JSON responses, nest them in other requests: A magnificent syntax for blazingly fast cli HTTP calls, made for humans. Ta

4 Dec 7, 2022

Command-line HTTP client for sending a POST request to specified URI on each stdin line.

line2httppost Simple tool to read lines from stdin and post each line as separate POST request to a specified URL (TCP connection is reused though). G

3 Jan 3, 2023

HTTP client/libcurl TUI front end in Rust, with request + key storage

Rust TUI HTTP Client with API Key Management This project is still in active development and although it is useable, there may still be bugs and signi

23 Nov 9, 2023

serde support for http crate types Request, Response, Uri, StatusCode, HeaderMap

serde extensions for the http crate types Allows serializing and deserializing the following types from http: Response Request HeaderMap StatusCode Ur

3 Nov 1, 2023

A more modern http framework benchmarker supporting HTTP/1 and HTTP/2 benchmarks.

rewrk A more modern http framework benchmark utility.

273 Dec 27, 2022

A fast tool to scan prototype pollution vulnerability written in Rust. 🦀

ppfuzz Prototype Pollution Fuzzer A fast tool to scan prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Us

410 Dec 27, 2022

Common vulnerability scanning on steroids ☄️

Hogg 🐽 An experimental passive website scanner. Hogg acts as a proxy between you and your DNS server and scans every website you visit for common vul

13 Jan 8, 2023

💔 Heartbleed vulnerability exploit written in Rust

Heartbleed 💔 Heartbleed vulnerability exploit written in Rust What is it Heartbleed is a buffer over-read vulnerability in outdated versions of OpenS

4 May 23, 2023

🤖 The Modern Port Scanner 🤖

➡️ Discord | Installation Guide | Usage Guide ⬅️ The Modern Port Scanner. Fast, smart, effective. 🐋 Docker (Recommended) 👩‍💻 Kali / Debian 🏗️ Arch

8.8k Jan 8, 2023

A simple scanner that loops through ips and checks if a minecraft server is running on port 25565

scanolotl Scanolotl is a simple scanner that loops through ips and checks if a minecraft server is running on port 25565. Scanolotl can also preform a

3 Jul 28, 2022

A high performance TCP SYN port scanner.

Armada A High-Performance TCP SYN scanner What is Armada? Armada is a high performance TCP SYN scanner. This is equivalent to the type of scanning tha

259 Dec 19, 2022

simple multi-threaded port scanner written in rust

knockson simple multi-threaded port scanner written in rust Install Using AUR https://aur.archlinux.org/packages/knockson-bin/ yay -Syu knockson-bin M

4 Oct 5, 2022

A simple port scanner built using rust-lang

1 Nov 6, 2021

Comments

This Issue

warning: build failed, waiting for other jobs to finish... error: failed to compile request_smuggler v0.1.0-alpha.1, intermediate artifacts can be found at /tmp/cargo-installgMlo6q

Caused by: build failed

opened by Fawadkhanfk 2
HTTP request smuggling payload variants

Evan Custodio 's smuggler, https://github.com/defparam/smuggler, has variants. Please add them to your project. Your tool is very useful for creating PoCs for bug bounties and for that, I am very grateful.
enhancement

opened by Arqib 2