Plugins
1 pluginResults for “http”
10 skillsPerforming Web Application Firewall Bypass
Bypass Web Application Firewall protections using encoding techniques, HTTP method manipulation, parameter pollution, and payload obfuscation to deliver SQL injection, XSS, and other attack payloads past WAF detection rules.
24.6k · bundle
Jmt X402 Agent Tools
Provides 25 paid HTTP endpoints on Base mainnet that bill agents per call in USDC for web search, AI analysis, crypto and stock data, SEC filings, company intelligence, news, sentiment scoring, and a macro dashboard, returning structured JSON.
28
Earth2studio Create Datasource
Create and validate Earth2Studio data source wrappers (DataSource, ForecastSource, DataFrameSource, ForecastFrameSource) from remote stores like S3, GCS, Azure, HTTP, or HuggingFace.
2.2k · bundle
Cookie Privacy Scan
Audit a site's cookies and trackers — inventory every cookie, flag missing Secure/HttpOnly/SameSite, list third-party trackers, and detect tracking that fires before consent. Playwright MCP only, no signup.
More results
Azure Storage File Share TS
Manage Azure File Shares using the official TypeScript/JavaScript SDK. Create and delete shares, directories, and files; upload, download, and copy files; set metadata and HTTP headers.
2.7k
Browser To API
Generate an OpenAPI 3.1 specification from a browser-trace capture by analyzing observed HTTP traffic, templating URLs, and inferring JSON schemas from request/response samples.
3.6k · bundle
API Security Scan
Review a REST/HTTP API — from its OpenAPI spec or route code — for security gaps like missing auth, broken object-level authorization, no rate limiting, and verbose errors. Reports file:line. Pure Claude Code, no signup.
Hunting For Cobalt Strike Beacons
Detect Cobalt Strike beacon network activity using TLS certificate signatures, JA3/JA3S/JARM fingerprints, HTTP C2 profile matching, beacon jitter analysis, and named pipe detection via Zeek, Suricata, and Python PCAP analysis.
24.6k · bundle
Auth Bypass
Bypass authentication via forced browsing to protected URLs, parameter tampering (authenticated=yes, debug=true, fromtrustIP=true), session ID prediction from linear/incremental cookies, SQL injection on login forms, PHP unserialize() boolean type juggling (b:1 payload), and credential transport over HTTP. Detectable with Burp Suite, OWASP ZAP, WebGoat.
21
Surf
Access 83 unified crypto data endpoints covering CEX/DEX markets, on-chain SQL across 80+ blockchain tables, wallet labels, prediction markets, social intelligence, news, and DeFi metrics via a local HTTP API with per-call billing.
17