HTTPLeaks
A comprehensive HTML file enumerating all possible ways a website can leak HTTP requests for security testing.
What is HTTPLeaks?
HTTPLeaks is a security research project that enumerates all possible ways a website can leak HTTP requests through HTML elements and attributes. It provides a single HTML file containing every known method for unintended request exfiltration, helping developers and security professionals test for vulnerabilities. The project addresses scenarios where web applications, email clients, or proxies inadvertently send requests to external resources, compromising privacy and security.
Security researchers, web developers, and privacy advocates who need to test browsers, web applications, email clients, or anonymization tools for HTTP leak vulnerabilities.
HTTPLeaks offers the most comprehensive and up-to-date collection of HTTP leak vectors in one easily accessible file, making it an essential tool for proactive security testing and privacy auditing where other tools may miss obscure or newly discovered leaks.
Overview
HTTPLeaks - All possible ways, a website can leak HTTP requests
Use Cases
Best For
- Testing Content Security Policy (CSP) implementations for bypasses
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
