Struct AuthSmuggleProbe 

pub struct AuthSmuggleProbe {
    pub variant: AuthHeaderVariant,
    pub header_lines: Vec<(String, String)>,
    pub description: String,
    pub canary: Canary,
}

An Authorization-header smuggle probe.

Fields

variant: AuthHeaderVariant

Which smuggle shape this probe implements.

header_lines: Vec<(String, String)>

Header lines to attach to the request. Most variants emit exactly one (name, value) pair; the duplicate-header variant emits two.

description: String

Telemetry description.

canary: Canary

Per-probe correlation token.

Implementations

impl AuthSmuggleProbe

pub fn lowercase_scheme(header_name: &str, scheme: &str, token: &str) -> Self

bearer <token> — lowercase scheme.

pub fn no_whitespace_after_scheme( header_name: &str, scheme: &str, token: &str, ) -> Self

Bearer<token> — no whitespace between scheme and token.

pub fn tab_between_scheme_and_token( header_name: &str, scheme: &str, token: &str, ) -> Self

Bearer\t<token> — TAB instead of SP between scheme and token.

pub fn multiple_spaces_after_scheme( header_name: &str, scheme: &str, token: &str, ) -> Self

Bearer <token> — 3-7 spaces between scheme and token.

pub fn duplicate_header_first_wins_benign( header_name: &str, scheme: &str, benign_token: &str, smuggle_token: &str, ) -> Self

Two header lines with the same name; first benign, second the real smuggled token. nginx-style “first wins” parsers see benign; Apache-style “last wins” parsers see smuggle.

pub fn quoted_scheme(header_name: &str, scheme: &str, token: &str) -> Self

"Bearer" <token> — scheme wrapped in double quotes.

pub fn trailing_junk_after_token( header_name: &str, scheme: &str, token: &str, junk: &str, ) -> Self

Bearer <token> <junk> — extra bytes after the token.

pub fn control_byte_in_token( header_name: &str, scheme: &str, token: &str, ) -> Self

Bearer <token-with-ctl> — control byte injected at the token midpoint. CTL pool randomised per call.

Trait Implementations

impl Clone for AuthSmuggleProbe

fn clone(&self) -> AuthSmuggleProbe

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthSmuggleProbe

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl SmuggleProbe for AuthSmuggleProbe

fn canary(&self) -> &Canary

Per-probe correlation token. Splice into a custom header (X-Probe-Id, etc.) so server-side responses can be attributed to the specific variant that triggered them.

fn technique(&self) -> String

Stable technique identifier in family.variant form. Used in telemetry, JSON output, and reproducer logs. Example: "cookie.duplicate-name-last-wins".

fn description(&self) -> &str

Human-readable one-line description for operator logs.

fn artifact(&self) -> SmuggleArtifact

The wire artifact this probe produces.