CRLF Injection Generator
Generate CRLF (Carriage Return Line Feed) injection payloads for response splitting, log injection, cache poisoning, and cookie injection.
CRLF Injection
CRLF injection occurs when an attacker injects CR (%0d) and LF (%0a) characters into HTTP headers or log entries. Response splitting lets attackers inject arbitrary HTTP responses, log injection forges log entries to mislead investigators, cache poisoning corrupts cached content, and cookie injection sets arbitrary cookies. Mitigate by stripping CR/LF from all user-controlled header values. Authorized testing only.