Consider forking net/http
- Dominant language
- Go
- Stars
- 16.7k
- Forks
- 1.6k
- Avg merge
- 9m
- Merged PRs (30d)
- 4
Description
Hello,
Many users have encountered limitations with ffuf due to its reliance on the net/http library, which performs various checks that can be undesirable for certain use cases.
To address these issues, I created a [custom fork of ffuf](https://github.com/sw33tLie/uff) with several modifications that have proven useful to the community. These changes include:
- Fuzzing with invalid HTTP methods
- Disabling header canonization (allowing lowercase headers)
- Supporting invalid URL encoding characters (e.g. %9f)
- Sending invalid HTTP headers, such as those starting with spaces
I haven't submitted a pull request for these changes because my implementation is quite hacky and involves numerous modifications. However, the positive feedback and interest from users demonstrate that these features are feasible and beneficial.
Therefore, I suggest considering a fork of the net/http library to incorporate these changes.
Have a good day
Contributor guide
Assessment
This issue has not been assessed yet.