smuggler-py

Python tool used to test for HTTP Desync/Request Smuggling attacks.

webappRed Team

Official docs ↗

Platforms: Linux · Last verified October 1, 2026

Python tool used to test for HTTP Desync/Request Smuggling attacks.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Install on BlackArch with `pacman -S smuggler-py` (or add the BlackArch repository to an existing Arch Linux install). See the official BlackArch tool listing linked above for details.

Commonly preinstalled on

BlackArch

Arch Linux-based distribution with one of the largest pentest tool repositories