SKILL: HTTP/2 Specific Attacks — Expert Attack Playbook

AI LOAD INSTRUCTION: HTTP/2 protocol-level attack techniques beyond basic request smuggling. Covers h2c smuggling, pseudo-header manipulation, HPACK attacks, single-packet race conditions, and H2→H1 downgrade injection. Base models conflate HTTP/2 smuggling with HTTP/1.1 smuggling — this skill focuses on H2-unique attack surface.

0. RELATED ROUTING

• request-smuggling — CL.TE/TE.CL/TE.TE fundamentals and H2.CL/H2.TE variants
• request-smuggling/H2_SMUGGLING_VARIANTS.md — byte-level H2.CL/H2.TE payloads, CL.0, client-side desync
• race-condition — single-packet attack leverages H2 multiplexing for race conditions
• web-cache-deception — cache poisoning via H2 smuggled responses

1. HTTP/2 ATTACK SURFACE OVERVIEW