← Back to Home

HTTP Request Mutator

Generate curated raw HTTP request variants for smuggling and parser-diff testing.

Input Request

Raw HTTP request

Use these variants only in authorized environments. The goal is to surface parser differences, not exploit them.

0 variants

Provide a raw HTTP request and select at least one mutation.

Keep it authorized: Use only on targets you own or have explicit permission to test.
Start with safe probes: Observe response inconsistencies before deeper testing.
Track parser behavior: Note which upstream/proxy/backend components disagree on request boundaries.
Document thoroughly: Capture raw requests and response timing for reporting.