Web › Module 6 › Lesson 5
Lab — Request Smuggling Lab
Learn CL.TE request shape and complete the Cyberlium smuggling detection lab
Opening
Desync on purpose — in a sandbox
Full proxy stacks are heavy for a phone lab. Here you study a CL.TE payload shape, then prove understanding in the Cyberlium Academy smuggling lab (pattern recognition + safe quiz-style check).
1. CL.TE sketch
Illustrative smuggled shape (lab study only)POST / HTTP/1.1 Host: lab.cyberlium.local Content-Length: 13 Transfer-Encoding: chunked 0 SMUGGLED
POST / HTTP/1.1 Host: lab.cyberlium.local Content-Length: 13 Transfer-Encoding: chunked 0 SMUGGLED
Front ends that honor Content-Length may forward bytes the back end later interprets as a new request start. Real exploitation needs a mismatched proxy pair—never paste these into live sites.
2. Detection checklist
Timing
Unusual delays when TE/CL disagree can hint at desync (lab environments).
Differential responses
Compare paired probes that should behave identically if parsing is consistent.
Fix verification
Reject requests that send both TE and CL; normalize at the edge.
Lab checklist