> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/http-request-smuggling.md).

# HTTP Request Smuggling

- [smuggler](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/http-request-smuggling/smuggler.md)
- [http-request smuggler](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/http-request-smuggling/http-request-smuggler.md)
- [h2csmuggler](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/http-request-smuggling/h2csmuggler.md): h2cSmuggler smuggles HTTP traffic past insecure edge-server proxy\_pass configurations by establishing HTTP/2 cleartext (h2c) communications with h2c-compatible back-end servers, allowing a bypass of p