http smuggling
HTTP Request Smuggling: CL.TE, TE.CL, TE.TE for auth bypass and cache poisoning.
Quick answer
What is http smuggling?
HTTP Request Smuggling: CL.TE, TE.CL, TE.TE for auth bypass and cache poisoning.
Articles
2
Beginner
0
Intermediate
0
Advanced
2
Advanced level
2HTTP request smuggling — H2→H1 desync, TE.CL, CL.TE and H2.CL in 2026
An updated catalog of HTTP smuggling: classic CL.TE, TE.CL, H2→H1 downgrade desyncs, HTTP/2 SETTINGS frame abuse, chunked extensions and HTTP/2 pseudo-headers.
HTTP Request Smuggling — CL.TE, TE.CL, TE.TE and caching exploitation
When the frontend and the backend interpret the same request differently. Smuggling for auth bypass, cache poisoning, victim-aware attacks.
Practice http smuggling with real labs
Apply the techniques in safe environments based on real bug bounty reports.
- hunters training
- 711
- labs from real reports
- 55
- completions
- 1,205
- in bounties practiced
- $213,970
hunters training
labs from real reports
completions
in bounties practiced
Stop reading about bugs and start hunting them
Create your free account and practice on labs based on real reports that paid out thousands of euros. The Academy is free forever.
No card · free Academy · cancel anytime