Free HTTP2SHELL checker CVE-2026-111497

Check your
HTTP2SHELL
exposure.

A response header can show that Node.js is present, never which version it runs or whether it decodes Brotli. We read a few headers for a hint, then you paste read-only host output and your browser compares the versions with the fixes. Nothing you paste is uploaded.

Read the HTTP2SHELL research

Prove you control this host.

Checking a path other than / needs proof of ownership. Publish this token as a plain-text file, then run the check.

Create the file

Run the check

We fetch that file once without following redirects, compare the token, then send one GET to your path.

Check yourHTTP2SHELLexposure.

Checking your host.

Prove you control this host.

Check your
HTTP2SHELL
exposure.