> For the complete documentation index, see [llms.txt](https://gowsundar.gitbook.io/book-of-bugbounty-tips/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gowsundar.gitbook.io/book-of-bugbounty-tips/crlf.md).

# CRLF

[A webapp redirect you from http to https? Check for CRLF injection in it. For example : http://example.com/%0d%0aTest:%20Test Make sure to open network tab open on browser. With 301/2 check the header ;) #bugbountytips #CRLFInjection](https://twitter.com/imhaxormad/status/1040136194846154753)

![https://twitter.com/m4ll0k/status/1310439013581549568?s=20](/files/-MTebR5F-3jvZ0JrHxUY)

![https://twitter.com/jae\_hak99/status/1316359743452049410?s=20](/files/-MTeecOClPpBM5eCzobF)

{% embed url="<https://twitter.com/dwisiswant0/status/1307330215211794433>" %}