HTTP Request Smuggling Audit (offensive-request-smuggling)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

HTTP request smuggling and desynchronization auditing covering CL.TE, TE.CL, TE.TE obfuscation, HTTP/2 to HTTP/1.1 downgrade desync (H2.CL, H2.TE), header newline injection, and reverse-proxy/origin parser normalization. Use when auditing multi-tier load balancers, CDNs, and reverse proxy deployments.

Operational Workflow