
User Struggles with HTTP/2 Request Smuggling Challenge on TryHackMe
HTTP/2RequestSmugglingWebSecurityVulnerabilities
The user is attempting Task 5 of an HTTP/2 Request Smuggling challenge on TryHackMe. They captured a request to [MACHINE-IP]:8100/hello, modified it in Burp Suite’s Repeater by replacing the body with a crafted HTTP/2 request containing a Foo header, and appended an HTTP/1.1 POST request. Despite sending the request twice, adjusting line breaks, and following multiple walkthroughs, they do not receive the expected flag. The user has also restarted the VMs multiple times without success.