$ loading_
Run HTTP security tests with low-level request control and find API risks.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "io.github.Kjopstad-IT/rqwstr" yet — see the docs or source repo.
Use this MCP tool to test a staging target for HTTP request smuggling. Craft raw HTTP/1.1 requests with conflicting Content-Length and Transfer-Encoding headers, record response differences, and summarize any frontend/backend parsing mismatch risks.
A request smuggling test report with raw request samples, response behavior, risk assessment, and remediation advice.
Send both HTTP/2 and HTTP/1.1 requests to the target service, compare header handling, path parsing, status codes, and error responses, and check for downgrade-related auth bypass, routing inconsistencies, or cache issues. Output your findings.
A protocol difference analysis showing whether HTTP/2-related security issues exist and how to reproduce them.
Bulk test a set of API endpoints with raw requests containing spoofed Host, X-Forwarded-For, X-Original-URL, and X-Rewrite-URL headers. Identify possible host header injection, source spoofing, path rewrite bypass, or access control flaws, and organize the results by severity.
A severity-ranked findings list with affected endpoints, trigger conditions, and remediation guidance.
Run AI-assisted penetration testing through safety-hardened MCP security tool endpoints.
Integrate multiple security tools for AI-assisted pentesting and vulnerability validation.
Run authorized penetration testing and security auditing workflows with one MCP tool.
Run domain and service recon to assess network exposure and security signals.
Run MCP-based pentests, OWASP Top 10 probes, and vulnerability verification.
Audit web performance and SEO with code fixes and real-user vitals.