smuggle

Documentation

Overview

Package smuggle implements time-based HTTP request smuggling detection (CL.TE and TE.CL desync) using raw sockets, because net/http normalizes and forbids the conflicting Content-Length / Transfer-Encoding headers required.

Method follows the standard time-based technique: a crafted request that desyncs a vulnerable front-end/back-end pair leaves the back-end waiting for more data, producing a measurable delay. A control request establishes the baseline latency.

Index

• type Result
  • func Check(rawURL string, timeout time.Duration) ([]Result, error)

Types

type Result

type Result struct {
	URL     string
	Variant string // "CL.TE" or "TE.CL"
	Delayed bool
	BaseMs  int64
	ProbeMs int64
	Detail  string
}

func Check

func Check(rawURL string, timeout time.Duration) ([]Result, error)

Check runs CL.TE and TE.CL time-based probes against the target.