HTTP Parameter Pollution (HPP) (offensive-parameter-pollution)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

HTTP Parameter Pollution (HPP) and JSON key duplication auditing across Express, Django, Flask, Spring, ASP.NET, and PHP backends, analyzing how front-end validators and back-end handlers resolve duplicate parameters. Use when auditing multi-layer validation and API gateways.

Operational Workflow