Find HTTP/2 flaws beyond basic request smuggling.
Guides selection of HTTP/2-specific attack techniques for testing protocol weaknesses and proxy-to-backend inconsistencies.
When to use it
Use when a target supports HTTP/2 and the work involves exploiting protocol-specific framing, compression, headers, multiplexing, or downgrade translation.
Give it an HTTP/2 target; it provides attack guidance selected according to the target's protocol and proxy behavior.
What you provide
No setup requirements listed.
No additional actions listed.