Results for “url-defense”

Investigate phishing URLs, credential harvesting pages, and malicious redirects using URLScan.io's safe browsing environment and API.

Parse a URL and return its scheme, host, path, and query params

Analyze a website URL and generate a redesigned, improved UI with modern aesthetics, better hierarchy, and fresh brand direction.

Detect and exploit HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-Encoding parsing discrepancies between front-end and back-end servers.

Detect DLL side-loading attacks where adversaries place malicious DLLs alongside legitimate applications to hijack execution flow for defense evasion.

Deobfuscates malicious JavaScript code used in web-based attacks, phishing pages, and dropper scripts by reversing encoding layers, eval chains, string manipulation, and control flow obfuscation to reveal the original malicious logic.

Fetch and extract visible text from a web page URL

Systematically explores a web application, finds issues, and produces a report with reproduction evidence for each finding.

Hunt for web shell deployments on internet-facing servers by analyzing file creation in web directories, suspicious process spawning from web servers, and anomalous HTTP patterns.

Identify and test open redirect vulnerabilities in web applications by analyzing URL redirection parameters, bypass techniques, and exploitation chains for phishing and token theft.

Exploit path normalization discrepancies between CDN caching layers and origin servers to cache and retrieve authenticated content.

Perform an HTTP POST with JSON body and return the response

Open redirect playbook. Use when URL parameters, form actions, or JavaScript sinks control navigation targets and may redirect users to attacker-controlled destinations.