hunt-request-smuggling SKILL.md skillA
hunt-request-smuggling from galact-byte/galact-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add galact-byte/galact-skills/hunt-request-smuggling@git:20260806.bbab2e5Pins git:20260806.bbab2e5 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- galact-byte/galact-skills
- Path
skills/hunt-request-smuggling/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260806.bbab2e5, committed Aug 6, 2026
- Size
- 5,496 bytes
- Repository stars
- 7
- License
- a license file GitHub does not identify
在授权渗透测试中系统性挖掘 HTTP 请求走私（HTTP Request Smuggling / desync）。当目标前面有反向代理/CDN/负载均衡（前端）转发给后端应用，且怀疑前后端对 Content-Length 与 Transfer-Encoding、畸形头、chunked trailer 的解析不一致时使用——典型场景：想毒化后端 socket 劫持他人请求、批量窃取会话 Cookie/令牌、缓存投毒、绕过前端访问控制。适用目标类型 Web / REST API（有分层代理）。触发场景包括用户说"测下有没有 HTTP 走私/desync""这个 CDN 后端解析一致吗""能不能毒 socket 偷别人 cookie""CL.TE / TE.CL 打一下"。输出：带 desync 时序证据与原始报文的 finding 报告（含 killed 记录）。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# hunt-request-smuggling · HTTP 请求走私猎杀 只解决 **HTTP 请求走私（前后端解析分歧导致的 desync）** 一类。核心是找到"前端按一种方式切分请求边界、后端按另一种方式切分"的差异点，用**时序探测**先判活，再谨慎做 socket 毒化验证。 走私会影响**其他用户的请求**，破坏性和法律风险都高。默认只做**自打自（self-smuggling）时序探测**确认 desync，不在生产上毒化真实用户 socket，除非 scope 明确授权。关键探测走 `tools/` 脚本（raw socket，curl 发不了畸形头）。绕过变体与真实报告见 `reference.md`。 ## Scope（授权范围） **先确认授权，再发探测。** 走私探测本身会向后端注入"半个请求"，可能污染连接。 开工前落实： - 授权目标与**是否允许 socket 毒化验证**（区别于只做时序判活）。 - 测试窗口（低峰期），避免影响真实用户。 - 允许的验证深度：仅 desync 时序确认 / 允许自请求走私 / 允许受控毒化。 任一不清楚就停下问。**绝不**在未授权目标或高峰期做毒化。 ## Goal 判定前端与后端是否对请求边界解析不一致（CL.TE / TE.CL / TE.TE / 畸形头 / trailer），给出可复现的 desync PoC 与影响（socket 毒化劫持请求、偷 Cookie/令牌、缓存投毒、绕前端 ACL），并留存原始报文与时序证据。 ## Workflow `scope-check → recon → hunt → validate → report`。 ### 1. scope-check - **输入**：授权范围 + 是否允许毒化。 - **动作**：写入 `evidence/scope.txt`（含 allow_poison 标记与测试窗口）。 - **命令**：`bash tools/recon.sh <target> --scope-only`。 - **终止条件**：`evidence/scope.txt` 存在且授权明确，否则 KILL。 ### 2. recon - **输入**：in-scope 目标。 - **动作**：识别分层结构——是否有 CDN/反代（看 `Via`、`X-Cache`、`Server`、`CF-*` 头）、支持的 HTTP 版本、是否 keep-alive 复用连接。 - **输出**：`recon/frontend.json`（前端指纹、是否值得试走私）。 - **命令**：`bash tools/recon.sh <target>`。 …
Read the whole file at its exact version.
How to install
mdr add galact-byte/galact-skills/hunt-request-smuggling@sha256:7f16e119f5f48503The line at the top of this page pins the label git:20260806.bbab2e5, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_gwbg2qzmcevpc6eo)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 6, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5496 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
galact-byte/galact-skills · 7 stars · license a license file GitHub does not identify · pushed 2026-10-12 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_gwbg2qzmcevpc6eo GET https://markdownregistry.com/api/v1/resolve?ref=galact-byte/galact-skills/hunt-request-smuggling GET https://markdownregistry.com/api/v1/blob/7f16e119f5f48503e794130a530378d713726e00d0de994935703f8d557e1bcb
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.