A low-level Python library for HTTP/2 single packet attacks and timing attacks using Scapy.
H2SpaceX is a Python library built on Scapy that enables security researchers to perform HTTP/2 single packet attacks and timing attacks. It exploits race conditions in HTTP/2 implementations by sending crafted packets and measuring response times with high precision to identify vulnerabilities.
Security researchers, penetration testers, and red teamers who need to test HTTP/2 implementations for race condition and timing vulnerabilities.
Developers choose H2SpaceX for its low-level packet manipulation capabilities, nanosecond timing precision, and implementation of cutting-edge attack techniques like the enhanced single packet attack method from Black Hat 2024.
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Built on Scapy, it enables granular manipulation of HTTP/2 packets for crafting precise attacks, as emphasized in the library's philosophy for advanced security testing.
Measures response times in nanoseconds for accurate vulnerability detection, specifically supporting timing attacks as highlighted in the key features and enhanced SPA methods.
Implements cutting-edge methods like the improved single packet attack from Black Hat 2024, including ping frames for timing analysis, as referenced in the README.
Includes SOCKS5 proxy integration and threaded response parsing with gzip, br, and deflate decompression, making it versatile for stealthy testing and data handling.
Relies on Scapy, which can cause installation errors requiring manual upgrades, and the need for SSL key logging adds overhead for proper traffic analysis.
The 'More Research' section lists untested ideas like IP fragmentation, indicating some capabilities are experimental and may not be reliable for production use.
As a specialized tool, it lacks extensive community support or tutorials beyond the wiki, making debugging and advanced usage challenging for newcomers.
Exclusively targets HTTP/2, so it cannot be used for testing HTTP/1.1, HTTP/3, or other web protocols without significant modification or additional tools.