GitHub - sharat87/prestige: A text-based HTTP client in the browser. An interface-less Postman.You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
GitHub - ducaale/xh: Friendly and fast tool for sending HTTP requests
Usage: xh [OPTIONS] <[METHOD] URL> [REQUEST_ITEM]... Arguments: <[METHOD] URL> The request URL, preceded by an optional HTTP method [REQUEST_ITEM]... Optional key-value pairs to be included in the request. Options: -j, --json (default) Serialize data items from the command line as a JSON object -f, --form Serialize data items from the command line as form fields --multipart Like --form, but force
Blog｜改行コードã«è¦æ³¨æ„ï¼ HTTP ヘッダインジェクションã®æ¦‚è¦ã¨å¯¾ç–
攻撃者ã®è¦–点ã§ã¯ã€ãƒ˜ãƒƒãƒ€ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è‡ªä½“㯠1 ã¤ã®ãã£ã‹ã‘ã§ã‚ã‚Šã€åˆ¥ã®è„†å¼±æ€§ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ãŸã‚ã®æ‰‹æ®µã§ã‚ã£ãŸã‚Šã€Web アプリケーションをã•ã‚‰ã«æ”»æ’ƒã™ã‚‹ãŸã‚ã® 1 ã¤ã®æ–¹æ³•ã«ã—ã‹ã™ãŽã¾ã›ã‚“。 HTTP ヘッダインジェクションを通ã—ã¦ãƒ‡ãƒ¼ã‚¿ã‚’挿入ã§ããŸå ´åˆã€æ”»æ’ƒè€…ã¯æ¬¡ã®æ‰“ã¡æ‰‹ã¨ã—ã¦ã€Referer ヘッダや Cookie ã®å€¤ã‚’用ã„ã¦ã€æ©Ÿå¾®æƒ…å ±ã®ç›—難やクãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ティング攻撃ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒ•ã‚£ã‚¯ã‚»ã‚¤ã‚·ãƒ§ãƒ³æ”»æ’ƒï¼ˆã‚»ãƒƒã‚·ãƒ§ãƒ³å›ºå®šåŒ–攻撃）を仕掛ã‘ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ HTTP ヘッダインジェクションãŒèµ·ãã‚‹åŽŸå› HTTP ヘッダインジェクションãŒèµ·ãã‚‹åŽŸå› ã¨ã—ã¦ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒå…¥åŠ›ã—ãŸãƒ‡ãƒ¼ã‚¿ã®ä¸ã«ã€Œæ”¹è¡Œã‚³ãƒ¼ãƒ‰ï¼ˆCR 文嗠\r ã€LF 文嗠\n ）ã€ãŒå«ã¾ã‚Œã¦ã„ã‚‹ã“ã¨ãŒæŒ™ã’られã¾ã™ã€‚ HTTP ã®ä»•æ§˜ã§ã¯ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ 1 è¡Œã«ã¤ã 1 ã¤ã®æ„味をæŒã¤ãŸã‚ã€Web アプリケーションå´ã§
The HTTP headers you don't expect - Francesco Carlucci
A few days ago, I was poking around Creditkarma's blog and I noticed this HTTP header: X-hacker: If you're reading this, you should visit wpvip.com/careers and apply to join the fun, mention this header. My first thought was: "Wow, back in the day we had the Millennium Bug to save a few bits on a date, and now companies have an entire job offers in an HTTP header!" This made me very curious, so I
Big list of http static server one-liners
web-servers.md Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely. Discussion on reddit. Python 2.x $ python -m SimpleHTTPServer 8000 Python 3.x $ python -m http.server 8000 Twisted (Python) $ twistd -n web -p 8000 --path . Or: $ python -c 'from twisted.web.server import Site; from twisted
GitHub - fcsonline/drill: Drill is an HTTP load testing application written in Rust
--- concurrency: 4 base: 'http://localhost:9000' iterations: 5 rampup: 2 plan: - name: Include comments include: comments.yml - name: Fetch users request: url: /api/users.json - name: Fetch organizations request: url: /api/organizations - name: Fetch account request: url: /api/account assign: foo - name: Fetch manager user request: url: /api/users/{{ foo.body.manager_id }} - name: Assert request r
Intercept, debug & build with HTTP
On mobile? Send a link to your computer to download HTTP Toolkit there:
HTTP Security Headers - A Complete Guide
SECURITY IS AWESOME SECURITY IS AWESOME I write about security and privacy. I regularly post original security research, custom tools, and detailed technical guides. Companies selling "security scorecards" are on the rise, and have started to become a factor in enterprise sales. I have heard from customers who were concerned about purchasing from suppliers who had been given poor ratings, and in a
責任ã‚る開発者ã®ãŸã‚ã®HTTPヘッダー | Yakst
安全ã§ã€èª°ã«ã‚‚æ‰‹é ƒã§ã‚¢ã‚¯ã‚»ã‚¹ã—ã‚„ã™ãã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’å°Šé‡ã—ãŸWebを作るãŸã‚ã®HTTPヘッダーã®ãƒ—ラクティス [UI/UX]原文 HTTP headers for the responsible developer - Twilio (English) 原文著者 Stefan Judis 原文公開日 2019-04-23 翻訳ä¾é ¼è€… 翻訳者 meiq 翻訳レビュアー doublemarket msh5 原著者ã¸ã®ç¿»è¨³å ±å‘Š 2312æ—¥å‰ ãƒ¡ãƒ¼ãƒ«ã§å ±å‘Šæ¸ˆã¿ 編集 This article was originally published on twilio.com, and translated with the permission of Twilio and the author. 当記事ã®åŽŸæ–‡ã¯twilio.comã«ã¦å…¬é–‹ã•ã‚ŒãŸã‚‚ã®ã§ã‚ã‚Šã€Twilio社ãŠã‚ˆã³åŽŸè‘—者ã®è¨±å¯ã‚’å¾—ã¦ç¿»è¨³ã—ã¦ã„ã¾ã™
Cache-Control for Civilians – CSS Wizardry
4 March, 2019 Cache-Control for Civilians Written by Harry Roberts on CSS Wizardry. Table of Contents Cache-Control public and private max-age s-maxage no-store no-cache must-revalidate proxy-revalidate immutable stale-while-revalidate stale-if-error no-transform Cache Busting No Cache Busting – style.css Query String – style.css?v=1.2.14 Fingerprint – style.ae3f66.css Implementation Detail Clear-
ランã‚ング
ランã‚ング
メンテナンス
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - mozillazg/go-httpheader: A Go library for encoding structs into Header fields.
GitHub - smocker-dev/smocker: Smocker is a simple and efficient HTTP mock server and proxy
GitHub - encode/httpx: A next generation HTTP client for Python. 🦋
GitHub - httpie/cli: 🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.
Analyse your HTTP response headers
GitHub - vasanthv/jsonbox: HTTP-based JSON storage.
GitHub - ChuckerTeam/chucker: 🔎 An HTTP inspector for Android & OkHTTP (like Charles but on device)
GitHub - brotandgames/ciao: HTTP checks & tests (private & public) monitoring - check the status of your URL
GitHub - IntrinsicLabs/osgood: Osgood is a secure, fast, and simple platform for running JavaScript HTTP servers.
Blog for Direct Mail Best Practices - Lob
{{#tags}}- {{label}}
{{/tags}}