http-smuggling-advanced

该技能是面向 AI 代理的进攻性安全/利用指南，核心内容是实施 HTTP 请求走私后的凭据窃取、ACL 绕过、缓存投毒与账户接管。其能力与声明一致，但这种一致性本身表明它属于高风险攻击技能；同时还包含 OAST 外带流量与禁用 TLS 校验的示例代码。整体应判定为 SUSPICIOUS/高风险，而非确认恶意载荷，因为未见隐蔽窃密或预执行恶意代码。

The fragment appears to be an HTTP request-smuggling scanner and related security-testing documentation. It performs active network probing against a supplied target and includes instructions for escalating detection into potentially harmful exploitation. No clear malware behavior, data theft, persistence, command execution, or concealed payload is present in the visible portion. Use should be restricted to authorized targets and isolated testing environments.