HTTP/2 Single Packet Attack low level library based on Scapy
Project description
H2SpaceX
HTTP/2 low level library based on Scapy which can be used for Single Packet Attack (Race Condition on H2)
TODO
- Single Packet Attack - POST &...
- implement
- test functionality on different H2 frameworks
- Single Packet Attack - GET
- implement
- Content-Length: 1 Method
- POST Request with x-override-method: GET header
- test functionality on different H2 frameworks
- Response Parsing
- implement
- implement threaded response parser
- Body Decompression
- gzip
- br
- deflate
- Proxy
- Socks5 Proxy
More Research
Some following statements are just ideas and not tested or implemented.
- More Request in a Single Packet
- Increase MSS (Idea by James Kettle)
- Out of Order TCP Packets (Idea by James Kettle)
- IP Fragmentation
- Proxy the Single Packet Request through SOCKS
- Single Packet Attack on GET Requests
- Content-Length: 1 Method (Idea by James Kettle)
- x-override-method: GET Method (Idea by James Kettle)
- Index HPACK Headers to Make GET Requests Smaller
- HEADERS Frame without END_HEADER Flag
- HEADERS Frame Without Some Pseudo Headers
Installation
H2SpaceX works with Python 3 (preferred: >=3.10)
pip install h2spacex
Quick Start
You can import the HTTP/2 TLS Connection and set up the connection. After setting up the connection, you can do other things:
from h2spacex import H2OnTlsConnection
h2_conn = H2OnTlsConnection(
hostname='http2.github.io',
port_number=443
)
h2_conn.setup_connection()
...
see more examples in Wiki Page
References & Resources
I also got some ideas from a previous developed library h2tinker.
Finally, thanks again to James Kettle for directly helping and pointing some other techniques.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
h2spacex-0.1.16.tar.gz
(23.5 kB
view hashes)
Built Distribution
h2spacex-0.1.16-py3-none-any.whl
(23.0 kB
view hashes)
Close
Hashes for h2spacex-0.1.16-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | f28de13291d88785867d9de702ffc1038e591577e7735a04425d88afcfe91e83 |
|
MD5 | 59a3da5c3e45b3351c878363f1a99e33 |
|
BLAKE2b-256 | 4e213a351a1d70ecd28e3904cb0a52ffd4cca7c6bc6edfbe2f2895bc299b0cb8 |