├── 01_http1_clte ├── README.md ├── docker-compose.yml ├── docker │ ├── ats7 │ │ ├── Dockerfile │ │ └── remap.config │ ├── nginx │ │ ├── Dockerfile │ │ └── nginx.conf │ └── php │ │ ├── Dockerfile │ │ └── php-fpm.conf └── public │ ├── _footer.php │ ├── _header.php │ ├── contact.php │ ├── css │ └── style.css │ ├── favicon.ico │ ├── index.php │ ├── post.php │ └── secret │ └── index.php ├── 02_http2_cl ├── Dockerfile-armeria ├── README.md ├── armeria │ └── vulnerable-armeria-all.jar ├── docker-compose.yml ├── exploit_http2_hrs.py ├── webmain │ └── index.php └── webstatic │ ├── .htaccess │ ├── documents │ └── flag.txt │ └── static │ ├── blockchain.jpg │ ├── diagram_full_size.png │ └── style.css ├── 03_websocket ├── Dockerfile-backend ├── boot-websocket │ ├── .classpath │ ├── .gitignore │ ├── pom.xml │ ├── spring-boot-test-websocket-1.0-SNAPSHOT.jar │ └── src │ │ └── main │ │ ├── java │ │ └── net │ │ │ └── gosecure │ │ │ └── websocket │ │ │ └── config │ │ │ ├── Application.java │ │ │ ├── HealthCheckController.java │ │ │ ├── SocketTextHandler.java │ │ │ └── WebSocketConfig.java │ │ └── resources │ │ ├── application.properties │ │ └── static │ │ ├── app.js │ │ ├── bootstrap.min.css │ │ ├── index.html │ │ ├── jquery-1.10.2.min.js │ │ ├── style.css │ │ └── technical-support.jpg ├── configs │ ├── cert.pem │ ├── default.conf │ ├── generate-certificates.sh │ ├── haproxy.cfg │ ├── haproxy.pem │ ├── key.pem │ └── nuster.cfg ├── docker-compose.yml ├── exploit.py └── src │ ├── index.htm │ └── main.py ├── 03_websocket_statuscode_helper ├── docker-compose.yml └── html │ └── index.php ├── 04_http2_cleartext ├── .gitignore ├── LICENSE ├── README.md ├── backend.Dockerfile ├── configs │ ├── generate-certificates.sh │ ├── haproxy.cfg │ ├── nginx.conf │ └── nuster.cfg ├── deb │ └── ubuntu-focal-libnginx-mod-http-naxsi_1.3_amd64.deb ├── docker-compose.yml ├── extensions │ ├── BurpExtension │ │ └── h2cSmugglingCheck.py │ └── nuclei-template │ │ ├── h2csmuggle-nuclei.yaml │ │ └── h2csmuggle-upgrade-only-nuclei.yaml ├── h2c.README.md ├── h2csmuggler.py ├── media │ ├── diagram.png │ ├── fail.png │ ├── success.png │ └── test.png ├── mysql_init.sql ├── naxsi.Dockerfile ├── nginx │ ├── naxsi-errors │ │ └── 50x.html │ ├── naxsi_core.rules │ ├── nginx.conf │ └── sites-available │ │ └── default └── src │ ├── admin.htm │ ├── get_deps.txt │ ├── go.mod.txt │ ├── index.htm │ ├── main.go │ ├── movie.htm │ └── static │ ├── border1.png │ ├── cover │ ├── tt0145487.jpg │ ├── tt0234215.jpg │ ├── tt0468569.jpg │ ├── tt1104001.jpg │ ├── tt1375666.jpg │ └── tt202111.jpg │ └── style.css ├── README.md └── codelabs ├── .gitignore ├── README.md ├── assets ├── cache_poisoning.png ├── clcl_first.png ├── clcl_last.png ├── h2c_sequence_diagram.png ├── hrs_workshop.png ├── http_tunneling - Copy.png ├── http_tunneling.png ├── infrastructure.png ├── naxsi.png ├── websocket_sequence_diagram.png └── workshops │ ├── binanalysis.png │ ├── binanalysis_small.png │ ├── template.png │ ├── template_small.png │ ├── xxe.png │ └── xxe_small.png └── index.md /01_http1_clte/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/README.md -------------------------------------------------------------------------------- /01_http1_clte/docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/docker-compose.yml -------------------------------------------------------------------------------- /01_http1_clte/docker/ats7/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/docker/ats7/Dockerfile -------------------------------------------------------------------------------- /01_http1_clte/docker/ats7/remap.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/docker/ats7/remap.config -------------------------------------------------------------------------------- /01_http1_clte/docker/nginx/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/docker/nginx/Dockerfile -------------------------------------------------------------------------------- /01_http1_clte/docker/nginx/nginx.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/docker/nginx/nginx.conf -------------------------------------------------------------------------------- /01_http1_clte/docker/php/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/docker/php/Dockerfile -------------------------------------------------------------------------------- /01_http1_clte/docker/php/php-fpm.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/docker/php/php-fpm.conf -------------------------------------------------------------------------------- /01_http1_clte/public/_footer.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/public/_footer.php -------------------------------------------------------------------------------- /01_http1_clte/public/_header.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/public/_header.php -------------------------------------------------------------------------------- /01_http1_clte/public/contact.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/public/contact.php -------------------------------------------------------------------------------- /01_http1_clte/public/css/style.css: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/public/css/style.css -------------------------------------------------------------------------------- /01_http1_clte/public/favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/public/favicon.ico -------------------------------------------------------------------------------- /01_http1_clte/public/index.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/public/index.php -------------------------------------------------------------------------------- /01_http1_clte/public/post.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/01_http1_clte/public/post.php -------------------------------------------------------------------------------- /01_http1_clte/public/secret/index.php: -------------------------------------------------------------------------------- 1 | SECRET-1234 -------------------------------------------------------------------------------- /02_http2_cl/Dockerfile-armeria: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/Dockerfile-armeria -------------------------------------------------------------------------------- /02_http2_cl/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/README.md -------------------------------------------------------------------------------- /02_http2_cl/armeria/vulnerable-armeria-all.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/armeria/vulnerable-armeria-all.jar -------------------------------------------------------------------------------- /02_http2_cl/docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/docker-compose.yml -------------------------------------------------------------------------------- /02_http2_cl/exploit_http2_hrs.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/exploit_http2_hrs.py -------------------------------------------------------------------------------- /02_http2_cl/webmain/index.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/webmain/index.php -------------------------------------------------------------------------------- /02_http2_cl/webstatic/.htaccess: -------------------------------------------------------------------------------- 1 | Options +Indexes -------------------------------------------------------------------------------- /02_http2_cl/webstatic/documents/flag.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/webstatic/documents/flag.txt -------------------------------------------------------------------------------- /02_http2_cl/webstatic/static/blockchain.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/webstatic/static/blockchain.jpg -------------------------------------------------------------------------------- /02_http2_cl/webstatic/static/diagram_full_size.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/webstatic/static/diagram_full_size.png -------------------------------------------------------------------------------- /02_http2_cl/webstatic/static/style.css: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/02_http2_cl/webstatic/static/style.css -------------------------------------------------------------------------------- /03_websocket/Dockerfile-backend: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/Dockerfile-backend -------------------------------------------------------------------------------- /03_websocket/boot-websocket/.classpath: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/.classpath -------------------------------------------------------------------------------- /03_websocket/boot-websocket/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/.gitignore -------------------------------------------------------------------------------- /03_websocket/boot-websocket/pom.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/pom.xml -------------------------------------------------------------------------------- /03_websocket/boot-websocket/spring-boot-test-websocket-1.0-SNAPSHOT.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/spring-boot-test-websocket-1.0-SNAPSHOT.jar -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/java/net/gosecure/websocket/config/Application.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/java/net/gosecure/websocket/config/Application.java -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/java/net/gosecure/websocket/config/HealthCheckController.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/java/net/gosecure/websocket/config/HealthCheckController.java -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/java/net/gosecure/websocket/config/SocketTextHandler.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/java/net/gosecure/websocket/config/SocketTextHandler.java -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/java/net/gosecure/websocket/config/WebSocketConfig.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/java/net/gosecure/websocket/config/WebSocketConfig.java -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/resources/application.properties: -------------------------------------------------------------------------------- 1 | server.port=8081 -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/resources/static/app.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/resources/static/app.js -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/resources/static/bootstrap.min.css: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/resources/static/bootstrap.min.css -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/resources/static/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/resources/static/index.html -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/resources/static/jquery-1.10.2.min.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/resources/static/jquery-1.10.2.min.js -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/resources/static/style.css: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/resources/static/style.css -------------------------------------------------------------------------------- /03_websocket/boot-websocket/src/main/resources/static/technical-support.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/boot-websocket/src/main/resources/static/technical-support.jpg -------------------------------------------------------------------------------- /03_websocket/configs/cert.pem: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/configs/cert.pem -------------------------------------------------------------------------------- /03_websocket/configs/default.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/configs/default.conf -------------------------------------------------------------------------------- /03_websocket/configs/generate-certificates.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/configs/generate-certificates.sh -------------------------------------------------------------------------------- /03_websocket/configs/haproxy.cfg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/configs/haproxy.cfg -------------------------------------------------------------------------------- /03_websocket/configs/haproxy.pem: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/configs/haproxy.pem -------------------------------------------------------------------------------- /03_websocket/configs/key.pem: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/configs/key.pem -------------------------------------------------------------------------------- /03_websocket/configs/nuster.cfg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/configs/nuster.cfg -------------------------------------------------------------------------------- /03_websocket/docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/docker-compose.yml -------------------------------------------------------------------------------- /03_websocket/exploit.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GoSecure/request-smuggling-workshop/HEAD/03_websocket/exploit.py -------------------------------------------------------------------------------- /03_websocket/src/index.htm: -------------------------------------------------------------------------------- 1 |