h2spacex 0.1.14

HTTP/2 Single Packet Attack low level library based on Scapy

   H2SpaceX

HTTP/2 Single Packet Attack (Race Condition) low level library based on Scapy

TODO

• Single Packet Attack - POST &...
  • implement
  • test functionality on different H2 frameworks
• Single Packet Attack - GET
  • implement
  • Content-Length: 1 Method
  • POST Request with x-override-method: GET header
  • test functionality on different H2 frameworks
• Response Parsing
  • implement
  • implement threaded response parser
  • Body Decompression
    • gzip
    • br
    • deflate

Installation

H2SpaceX works with Python 3 (preferred: >=3.10)

pip install h2spacex

Quick Start

You can import the HTTP/2 TLS Connection and set up the connection. After setting up the connection, you can do other things:

from h2spacex import H2OnTlsConnection

h2_conn = H2OnTlsConnection(
    hostname='http2.github.io',
    port_number=443
)

h2_conn.setup_connection()
...

see more examples in Wiki Page

References & Resources

• James Kettle DEF CON 31 Presentation
• Portswigger Research Page
• HTTP/2 in Action Book

I also got some ideas from a previous developed library h2tinker.

Finally, thanks again to James Kettle for directly helping and pointing some other techniques.