Rust-powered HTTP Request Smuggling Scanner.

Smugglex is a security testing tool that detects HTTP Request Smuggling vulnerabilities in web applications. It tests for CL.TE, TE.CL, TE.TE, H2C, and H2 smuggling attacks.

For detailed documentation, visit smugglex.hahwul.com.

brew install hahwul/smugglex/smugglex

Requires Rust 1.70 or later:

git clone https://github.com/hahwul/smugglex
cd smugglex
cargo install --path .

For other installation methods, see Installation Guide.

Basic scan:

smugglex https://target.com

Read URLs from stdin:

cat urls.txt | smugglex

For detailed usage and options, see Usage Guide.

smugglex https://target.com -v -o results.json
cat urls.txt | smugglex --exit-first

Common issues and solutions are available in the Troubleshooting Guide.

• Documentation
• GitHub Repository
• HTTP Request Smuggling Research