GrrrDog/weird_proxies resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1886 stars · 221 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A cheat sheet documenting the behavior of various reverse proxies, cache proxies, and load balancers (Nginx, Apache, HAProxy, Varnish, Traefik, Envoy, Caddy, AWS, Cloudflare, etc.) and proxy-related attacks such as request smuggling and header manipulation. It is the result of security research and includes test labs and links to related presentations and white papers.

Use cases

• look up how a reverse proxy handles ambiguous HTTP requests
• learn about request smuggling attacks through proxies
• prepare for a web application penetration test involving proxies
• compare header handling between Nginx, Envoy, and Cloudflare
• find references on h2c smuggling and hop-by-hop header abuse
• study proxy misconfigurations that lead to security bypasses

When to choose

• you are pentesting or securing an architecture behind a reverse proxy
• you need a quick reference on proxy-specific HTTP parsing quirks
• you are researching request smuggling or header injection techniques

When to avoid

• you need a working reverse proxy implementation rather than documentation
• you need up-to-date coverage of the latest proxy versions and behaviors
• you need a maintained tool with a license and active development

Facets

learning-resource · maturity maintenance

security proxy developer-tools security penetration-testing web-development networking cross-platform cheatsheet reverse-proxy request-smuggling pentesting http documentation

Member repositories

For agents

markdown · JSON · MCP: product_card(name="GrrrDog/weird_proxies")