Mini-game · Chapter 5

Request Smuggling Lab

An HTTP/1.1 request between a frontend proxy and a backend server. When the two parsers disagree on where the body ends, the attacker hides a second request inside the first. Three rounds: CL.TE, TE.CL, TE.TE.

Educational training material. This game demonstrates an attack technique inside a sandboxed quiz UI for security learning. Do not apply these techniques against systems you do not own or have explicit written permission to test.

Round 1 / 3 Score 0 Time 00:00