HTTP HTTP CONNECT HTTP proxy proxytunnel # Server-side HTTP/1.1 200 OK Content-Length: 0 HTTP/1.1 200 OK%CR X-Evil: he%hex[%00]hex%llo%CR %CR # Client-side http http-proxy proxy HTTP CONNECT response with a nul byte in a header http://%HOSTIP:%HTTPPORT/%TESTNUMBER -p -x http://%HOSTIP:%PROXYPORT # Verify data after the test has been "shot" 8