Top 10 winner

Playing with HTTP/2 CONNECT

In HTTP/2 the CONNECT method tunnels over a single stream instead of hijacking the whole TCP connection, so many tunnels can be multiplexed on one connection. The author builds a Go tool that abuses this against misconfigured proxies to port-scan internal networks quickly, and notes the multiplexed traffic can slip past network monitoring.

Record

Published by

blog.flomb.net

Topic

HTTP

In the archive

• Ranked #9 in the 2025 Top 10 Web Hacking Techniques

Related sources

• HTTP/2 CONNECT tunnel source

Tags

• http2
• proxy
• ssrf
• go
• tooling
• http
• info-leak
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of blog.flomb.net, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.