🧰 HTTP Terminator

The items that name it 6

• [tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards
  article2026-09-17

  Autonomous system built by James Kettle of PortSwigger that invents HTTP desync techniques and validates them against live bug bounty targets; generated 30,000 vectors tested against 30,000 websites

• HTTP Terminator: Can AI Invent New Attack Techniques? (James Kettle, PortSwigger)
  article2026-08-12

  Autonomous system built by James Kettle that invents new attack techniques and uses them to hack live websites at scale; follows four stages (ideation, evaluation, weaponization, cascade); read 138 technical specifications, broke them into 15,000 fragments of inspiration, generated 30,000 unique att

• Can AI Do Novel Security Research? Meet the HTTP Terminator
  writeup2026-08-05

  Autonomous AI-driven research system built by the author to invent, evaluate, and weaponize novel HTTP desync attack triggers at scale against live, authorized websites; planned to be open-sourced.

• Can AI do novel security research? Meet the HTTP Terminator (James Kettle)
  writeup2026-08-05

  Autonomous AI-driven research system built by James Kettle to invent, evaluate, and weaponize novel HTTP desync attack techniques against live websites at scale; planned to be open-sourced

• AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
  article

  AI-assisted research system built by James Kettle (PortSwigger) that generates and proves novel HTTP desync techniques; tested 30,000 candidate desync vectors derived from 138 HTTP and SMTP RFCs split into ~15,000 fragments; now open-sourced; uses Claude for document extraction and test-case generat

• PortSwigger/http-terminator
  repoIt is written here as http-terminator.

  AI-assisted research pipeline for discovering and exploiting HTTP request-smuggling / response-desynchronisation vulnerabilities