domains / families / security / http2-specific-attacks

http2-specific-attacks

separate

HTTP/2 protocol-specific attack playbook. Use when the target supports HTTP/2 and you need to exploit binary framing, HPACK compression, h2c upgrade smuggling, pseudo-header injection, stream multiplexing abuse, or H2→H1 downgrade translation flaws.

When to use

• h2c upgrade smuggling
• pseudo-header injection
• HPACK compression attacks
• stream multiplexing abuse
• H2→H1 downgrade translation flaws
• binary framing manipulation
• single-packet race conditions
• server push cache poisoning

When not to use

• HTTP/1.1 request smuggling fundamentals
• basic request smuggling

Skill page

Source