Find CRLF flaws in HTTP headers and server logs.
What it does
Guides testing for CRLF injection in HTTP headers and logs, including related attack chains and encoding bypasses.
When to use it
Use when user input reaches response headers, redirects, cookies, or logs where CRLF characters could inject content.
How to use it
Give it a target URL; it assesses CRLF injection through redirects, cookies, response bodies, and logs.
What you provide
- the target URL
Latest review
What you need · 0
No setup requirements listed.
Access · 1
This skill
target web application
Write
Sends CRLF test payloads