InfraGuard

Detection rule: Response Desync (Smuggling)

HTTP flow where request-response pairs cannot be matched.

CriticalHTTP ComplianceSuricata

What it detects

HTTP flow where request-response pairs cannot be matched.

Why it fires

Possible HTTP request smuggling, desync or intermediary confusion.

Worst case

Request smuggling

Matching signatures

unable to match response

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.