yaklang logo
General & Other

Real file from a public repo · synced Sep 3, 2026

http2-specific-attacks

h2c is HTTP/2 without TLS, negotiated via the HTTP/1.1 Upgrade mechanism. Many reverse proxies forward the Upgrade: h2c header without understanding it, allowing attackers to bypass proxy-level access controls.

yaklang/hack-skills2.8k installsMIT

Works with

Claude CodeCursorCodex CLIGitHub CopilotGemini CLI

Install in three steps

  1. 1

    Download the ZIP

    One file per agent, plus INSTALL.md with the exact paths below.

  2. 2

    Claude Code: copy SKILL.md into your skills folder

    .claude/skills/http2-specific-attacks/SKILL.md    # this project
    ~/.claude/skills/http2-specific-attacks/SKILL.md   # every project
  3. 3

    Other agents: use the matching file

    skill.mdc goes in Cursor’s .cursor/rules/. AGENTS.md works as GitHub Copilot instructions, a legacy .cursorrules, or a Codex / Gemini CLI instructions file.

More General & Other skills

All General & Other skills

Check your AI visibility

One URL in, a 0–100 score and the exact fixes out.

RUN THE CHECK

Browse all the tools

15 tools across six categories
13 of them never send your data anywhere

Free · No signup · No trial clock

SEE THE DIRECTORY