diff --git a/src/pentesting-web/http-request-smuggling/README.md b/src/pentesting-web/http-request-smuggling/README.md
index 38e48a78f..92604d651 100644
--- a/src/pentesting-web/http-request-smuggling/README.md
+++ b/src/pentesting-web/http-request-smuggling/README.md
@@ -310,7 +310,7 @@ X
 查看此头如何帮助利用 http desync，参见：
 
 {{#ref}}
-../special-http-headers.md
+../../network-services-pentesting/pentesting-web/special-http-headers.md
 {{#endref}}
 
 ### HTTP Request Smuggling 漏洞测试
@@ -411,7 +411,8 @@ X: Y
 >
 >{{#ref}}
 >../http-connection-request-smuggling.md
->{{#endref}}
+>
+{{#endref}}
 
 ### Client‑side desync constraints