Academy
Expert track

HTTP Request Smuggling

Two servers, two framings, one hidden request in the gap.

Create a free account to track progress and earn the certificate. You can read the syllabus below without one.

Final exam

3 questions in 10 minutes, 3 to pass. Certificates require it.

Take the exam
  1. 01How request smuggling worksFront-end and back-end disagree on where a request ends. Yours hides in between.
  2. 02Lab: hide a requestFront-end reads Content-Length, back-end reads chunked. Split them.
  3. 03Request smuggling quizThree questions on framing, shapes, and impact.