CRLFuzz
Scan for CRLF injection vulnerabilities.
KaliParrothigh
pkg: crlfuzz
CRLFuzz fuzzes URLs for CRLF injection that can lead to response splitting and header injection.
Syntax
crlfuzz -u {url}
Example
crlfuzz -u https://target.tld
Tests the target for CRLF/response-splitting issues.
Advantages
- Focused CRLF detection
- Fast, pipeline-friendly
Disadvantages
- Active injection
- Narrow scope
Tags
#crlf#web
Official docs: CRLFuzz ↗
Related commands
Frequently asked questions
What is CRLFuzz used for?
CRLFuzz fuzzes URLs for CRLF injection that can lead to response splitting and header injection.
What is an example CRLFuzz command?
A common example is: crlfuzz -u https://target.tld — Tests the target for CRLF/response-splitting issues.
Is CRLFuzz part of Kali Linux?
Yes. CRLFuzz ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install crlfuzz.
What category of security tool is CRLFuzz?
CRLFuzz is a Web Application tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.