> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/http-request-smuggling/h2csmuggler.md).

# h2csmuggler

h2cSmuggler smuggles HTTP traffic past insecure edge-server proxy\_pass configurations by establishing HTTP/2 cleartext (h2c) communications with h2c-compatible back-end servers, allowing a bypass of p

```

sudo git clone https://github.com/BishopFox/h2csmuggler.git

#Run httprobe against targets, save output as urls.txt

sudo python3 h2csmuggler.py --scan-list urls.txt --threads 5

```