Search Results for "http header injection"
Sort By:
Showing 206 open source projects for "http header injection"
View related business solutions-
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
$300 Free Credits for Your Google Cloud ProjectsLaunch your next project with $300 in free Google Cloud credits—no strings attached. Test, build, and deploy without risk. Use your credits across the entire Google Cloud platform to find what works best for your needs. After your credits are used, continue with always-free tier services. Only pay when you're ready to scale. Sign up in minutes and start exploring.
-
1
HTTP
Rust HTTP types
This crate is a general purpose library for common types found when working with the HTTP protocol. You’ll find Request and Response types for working as either a client or a server as well as all of their components. Notably you’ll find Uri for what a Request is requesting, a Method for how it’s being requested, a StatusCode for what sort of response came back, a Version for how this was communicated, and HeaderName/HeaderValue definitions to get grouped in a HeaderMap to work with... -
2
HTTP.jl
HTTP for Julia
HTTP.jl is a pure Julia implementation of the HTTP protocol, providing tools for building HTTP clients and servers. It enables users to send requests, handle responses, and construct REST APIs or web services entirely in Julia. HTTP.jl supports TLS, cookies, headers, streaming, and middleware, making it suitable for both simple scripting and full-scale web service development. -
3
clj-http
An idiomatic clojure http client wrapping the apache client
clj-http is a popular Clojure library for making HTTP requests, built as a wrapper around Apache’s HttpClient. It uses Ring-style request/response maps and middleware, fitting seamlessly into idiomatic Clojure applications. clj-http allows coercing the body of the request either before it is sent (input coercion), or after it’s received (output coercion) from the server. -
4
http-proxy-middleware
Http-proxy middleware for connect, express and browser-sync
Node.js proxying made simple. Configure proxy middleware with ease for connect, express, browser-sync and many more. All http-proxy options can be used, along with some extra http-proxy-middleware options. Determine which requests should be proxied to the target host. Target host to proxy to. (protocol + host). Providing an alternative way to decide which requests should be proxied; In case you are not able to use the server's path parameter to mount the proxy or when you need more... -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
cookie
HTTP server cookie parsing and serialization
Basic HTTP cookie parser and serializer for HTTP servers. This is a Node.js module available through the npm registry. Installation is done using the npm install command. Parse an HTTP Cookie header string and return an object of all cookie name-value pairs. The str argument is the string representing a Cookie header value and options is an optional object containing additional parsing options. -
6
SafeLine
Serve as a reverse proxy to protect your web services from attacks
SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor, brute force, HTTP-flood, bot abuse, among others. By deploying a WAF in front of a web application, a shield is placed between the web application and the Internet. ... -
7
nghttp2
HTTP/2 C Library and tools
nghttp2 is an implementation of HTTP/2 and its header compression algorithm HPACK in C. The framing layer of HTTP/2 is implemented as a form of reusable C library. On top of that, we have implemented HTTP/2 client, server and proxy. We have also developed a load test and benchmarking tool for HTTP/2. We have participated in httpbis working group since HTTP/2 draft-04, which is the first implementation draft. -
8
WireMock
A tool for mocking HTTP services
HTTP response stubbing, matchable on URL, header and body content patterns. Request verification, runs in unit tests, as a standalone process or as a WAR app. Configurable via a fluent Java API, JSON files and JSON over HTTP. Record/playback of stubs, fault injection, per-request conditional proxying, browser proxying for request inspection and replacement. -
9
Antigravity-Proxy
Transparent proxy injector for Antigravity
Antigravity Proxy is a Windows proxy injection tool made specifically for the Antigravity editor. It is designed to route Antigravity-related traffic through a SOCKS5 or HTTP proxy without requiring Clash TUN mode. The project focuses on selective proxying instead of taking over all system traffic. This makes it useful for users who need Antigravity to work through a proxy while keeping the rest of their Windows network behavior unchanged. -
Atera - an All-in-one platform for IT managementYour IT essentials, integrated & elevated. Take your IT management from automated to autonomous, download Atera's agent to start your free trial!
-
10
Secure
HTTP middleware for Go that facilitates some quick security wins
...When IsDevelopment is true, the AllowedHosts, SSLRedirect, STS header, and HPKP header will not be in effect. This allows you to work in development/test mode and not have any annoying redirects to HTTPS (ie. development can happen on HTTP), or block localhost has a bad host. Secure comes with a variety of configuration options. Secure allows you to set a custom function for the AllowRequestFunc option. -
11
Crow Framework
A Fast and Easy to use microframework for the web
...Easy Routing (similar to flask). Type-safe Handlers. Blazingly fast (see this benchmark and this benchmark). Built-in JSON support. Mustache-based templating library (crow::mustache). Header-only library (single header file available). Middleware support for extensions. HTTP/1.1 and Websocket support. Multi-part request and response support. Uses modern C++ (11/14). -
12
Slim
PHP micro framework that helps you quickly write web applications
...The easiest way to start working with Slim is to create a project using Slim-Skeleton as a base by running a bash command. Slim provides a fast and powerful router that maps route callbacks to specific HTTP request methods and URIs. It supports parameters and pattern matching. Build your application with concentric middleware to tweak the HTTP request and response objects around your Slim app. Slim supports any PSR-7 HTTP message implementation so you may inspect and manipulate HTTP message method, status, URI, headers, cookies, and body. ... -
13
Beast
HTTP and WebSocket built on Boost.Asio in C++11
Beast is a header-only C++ library that provides low-level HTTP, WebSocket, and networking protocol building blocks on top of Boost.Asio. It is designed for developers who need to build interoperable clients, servers, proxies, gateways, or custom protocol components rather than using a high-level web framework. Beast follows Boost.Asio’s asynchronous model, so it fits naturally into event-driven C++ networking applications. -
14
Symfony FrameworkBundle
Provides a tight integration between Symfony components
Symfony Framework Bundle is the core bundle of the Symfony PHP framework, providing the essential components and configuration needed to build robust web applications. It integrates various Symfony components, such as routing, templating, and dependency injection, into a cohesive structure. This bundle serves as the foundation for Symfony applications and enables developers to efficiently manage routes, templates, services, and more. -
15
Retrofit For Dart
Retrofit.dart is an dio client generator using source_gen
retrofit.dart is a type conversion dio client generator using source_gen and inspired by Chopper and Retrofit. If you want to parse models on a separate thread, you can take advantage of the compute function, just like Dio does when converting String data responses into json objects. Avoid using Map values, otherwise, multiple background isolates will be spawned to perform the computation, which is extremely intensive for Dart. -
16
Sliver
Adversary Emulation Framework
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver's implants support C2 over Mutual TLS (mTLS), WireGuard, HTTP(S), and DNS and are dynamically compiled with per-binary asymmetric encryption keys. The server and client support MacOS, Windows, and Linux. Implants are supported on MacOS, Windows, and Linux (and possibly every Golang compiler target but we've not tested them all). -
17
Cookie Parser
Parse HTTP request cookies
Parse Cookie header and populate req.cookies with an object keyed by the cookie names. Optionally you may enable signed cookie support by passing a secret string, which assigns req.secret so it may be used by other middleware. A middleware for Express.js that parses cookies from HTTP requests and makes them accessible in req.cookies. -
18
Maltrail
Malicious traffic detection system
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user-defined lists, where trail can be anything from domain name, URL, IP address (e.g. 185.130.5.231 for the known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in the discovery of unknown threats (e.g. new malware). Sensor(s) is a standalone component running on the monitoring node (e.g. Linux platform connected passively to the SPAN/mirroring port or transparently inline on a Linux bridge) or at the standalone machine (e.g. ... -
19
frp
A Fast Reverse Proxy
frp stands for exactly what it is: a fast reverse proxy. It helps you expose a local server behind a NAT or firewall to the Internet. It is currently under development, but already supports TCP and UDP, as well as HTTP and HTTPS protocols where requests can be forwarded to internal services by domain name. It also has a P2P connect mode and many other nifty features. These include configuration files, environment variables, a dashboard that shows you frp's status and proxies' statistics... -
20
Deepkit Framework
A new full-featured and high-performance TypeScript framework
...Deepkit's type compiler makes it possible to use the whole TypeScript type system in any JavaScript runtime for the first time enabling completely new ways of writing data-driven applications. A framework that brings aligned libraries together to make web application development faster, more productive, and easier than ever. Powerful dependency injection container with type expressions to make HTTP routes, CLI commands, and RPC controllers safe, fast, and easy to write. No json configuration files, unnecessary boilerplate, schema files, or code generation: TypeScript is utilized to its fullest capabilities. -
21
Atlantis iOS
A lightweight and powerful iOS framework for intercepting HTTP/HTTPS
...Narrow down your search with Proxyman's Multiple Filters. You can combine complex filtered criteria like Protocol, Content-Type, URL, Request Header, Response Header, Body, etc that find exact what you're looking for. -
22
Vulcain
Fast and idiomatic client-driven REST APIs
Vulcain is a brand new protocol using HTTP/2 Server Push to create fast and idiomatic client-driven REST APIs. An open-source gateway server that you can put on top of any existing web API to instantly turn it into a Vulcain-compatible one is also provided! It supports hypermedia APIs but also any "legacy" API by documenting its relations using OpenAPI. The protocol has been published as an Internet-Draft that is maintained in this repository. A reference, production-grade, implementation... -
23
RESTinio
HTTP/WebSocket server C++14 library
RESTinio is a header-only C++14 library that gives you an embedded HTTP/WebSocket server. It is based on the standalone version of ASIO and is targeted primarily for the asynchronous processing of HTTP requests. Since v.0.4.1 Boost::ASIO (1.66 or higher) is also supported. Consider the task of writing a C++ application that must support some REST API, RESTinio represents our solution for that task. -
24
Gatling
Modern Load Testing as Code
...Its asynchronous, non-blocking engine (backed by Netty) can drive very high concurrency from a single injector, reducing the need for large injector farms. Gatling supports HTTP out of the box as well as WebSocket, Server-Sent Events, and JMS, so you can exercise modern, real-time systems end to end. Rich HTML reports visualize percentiles, response time distributions, errors, and throughput, making bottlenecks and regressions easy to spot. With injection profiles (ramp, constant, spikes) and pass/fail gates, you can automate performance thresholds in CI and promote builds with confidence. -
25
EaseProbe
A simple, standalone, and lightweight tool
EaseProbe is a simple, standalone, and lightweight tool that can do health/status checking, written in Go. Checking the HTTP status code, Support mTLS, HTTP Basic Auth, and can set the Request Header/Body. Check whether a TCP connection can be established or not. Run a Shell command and check the result. Run a remote command via SSH and check the result. Support the bastion/jump server. Connect to a given port using TLS and (optionally) validate for revoked or expired certificates. ...
