Use when shared-IP HTTPS hosts serve the wrong application only on reused HTTP/2 connections—map DNS, SAN, SNI, :authority, listener, and backend ownership before applying 421.
中文简介正在准备中。当前显示原文说明。
1459 个 · 按相关度排序
Use when shared-IP HTTPS hosts serve the wrong application only on reused HTTP/2 connections—map DNS, SAN, SNI, :authority, listener, and backend ownership before applying 421.
中文简介正在准备中。当前显示原文说明。
在授权渗透测试中系统性挖掘 HTTP 请求走私(HTTP Request Smuggling / desync)。当目标前面有反向代理/CDN/负载均衡(前端)转发给后端应用,且怀疑前后端对 Content-Length 与 Transfer-Encoding、畸形头、chunked trailer 的解析不一致时使用——典型场景:想毒化后端 socket 劫持他人请求、批量窃取会话 Cookie/令牌、缓存投毒、绕过前端访问控制。适用目标类型 Web / REST API(有分层代理)。触发场景包括用户说"测下有没有 HTTP 走私/desync""这个 CDN 后端解析一致吗""能不能毒 socket 偷别人 cookie""CL.TE / TE.CL 打一下"。输出:带 desync 时序证据与原始报文的 finding 报告(含 killed 记录)。
中文简介正在准备中。当前显示原文说明。
Use when you need to design, review, or improve REST APIs with Quarkus REST (Jakarta REST) — including resource classes, HTTP methods, status codes, request/response DTOs, Bean Validation, exception mappers, optional runtime OpenAPI exposure (SmallRye), contract-first generation from OpenAPI, content negotiation, pagination, sorting and filtering, API versioning, idempotency (Idempotency-Key), optimistic concurrency (ETag / If-Match), HTTP caching (Cache-Control), API deprecation (Sunset / Deprecation headers), RFC 7807 Problem Details, ISO-8601 for time in contracts, and security-aware boundaries. This should trigger for requests such as Review or improve JAX-RS resources in a Quarkus project; Design HTTP APIs with validation and error handling on Quarkus; Add API versioning, idempotency, ETag concurrency, or deprecation headers; Implement pagination, sorting, or RFC 7807 Problem Details error responses. Part of cursor-rules-java project
中文简介正在准备中。当前显示原文说明。
Rust 製バックエンド HTTP サーバーフレームワーク fandhe-backend のリファレンス。 fandhe-backend-core / -http / -routes。Server, BoundServer, Router(merge), Handler。 拡張点 Middleware(on_response_with_status)/ UpgradeHandler / RequestGate / Interceptor。 Diagnostics, StreamingResponse, SetCookie session(__Host-), sans-IO HTTP/1.1, graceful shutdown。 プラグイン cors, websocket(WsSender), graphql, openapi, webrtc, jwt(JwtGate, JwtPolicy), csrf(CsrfGate)。
中文简介正在准备中。当前显示原文说明。
Specialized skill for ASP.NET Core integration testing. Use when testing Web API endpoints, HTTP request/response, middleware, and dependency injection. Covers WebApplicationFactory, TestServer, HttpClient testing, in-memory database configuration. Keywords: integration testing, web api testing, WebApplicationFactory, TestServer, HttpClient testing, controller testing, endpoint testing, RESTful API testing, Microsoft.AspNetCore.Mvc.Testing, CreateClient, ConfigureWebHost, AwesomeAssertions.Web, Be200Ok, Be404NotFound, middleware testing, dependency injection testing
中文简介正在准备中。当前显示原文说明。
Consumes HTTP APIs. IHttpClientFactory, typed/named clients, resilience, DelegatingHandlers.
中文简介正在准备中。当前显示原文说明。
Detecting and exploiting HTTP request smuggling vulnerabilities caused by Content-Length and Transfer-Encoding parsing discrepancies between front-end and back-end servers.
中文简介正在准备中。当前显示原文说明。
Generates .http files for the VS Code REST Client extension from Express, Next.js, Fastify, or other API routes. Creates organized request files with variables, environments, and authentication. Use when users request "generate http files", "rest client requests", "create .http file", or "vscode api testing".
中文简介正在准备中。当前显示原文说明。
Hunt gRPC vulnerabilities — server reflection enabled (enumerate all services/methods), missing authentication / metadata-stripping on internal endpoints, plaintext gRPC over HTTP/2, internal endpoint disclosure, proto file leakage, gRPC-Web/grpc-gateway transcoding injection, and HTTP/2 Rapid Reset DoS (CVE-2023-44487). Use when target exposes port 50051 / 443 / 8443 / 9090 with HTTP/2, when grpcurl/grpcui detects reflection, when an Envoy or grpc-gateway proxy is fronting a microservice, or when recon reveals a microservice architecture.
中文简介正在准备中。当前显示原文说明。
通过x402为AI智能体接入付费API和服务支付,设置任务与会话预算、收款方限制,以及由自己管理私钥的钱包。
从静态网页或由JavaScript显示的页面提取文字、链接和字段,选择适合的获取方式,包括Cloudflare相关应对,并支持多页抓取及数据保存。
搜索和更新Notion页面与数据库,以Markdown读写内容并上传文件。还可创建在Notion上运行的Workers,用于定期同步外部数据、提供智能体工具和接收外部事件。
指导通过MCP为Claude Code插件连接外部服务,涵盖连接方式选择、服务器配置、身份验证、工具权限设置,以及连接和工具调用的运行检查。
使用Scrapling提取网页正文或指定部分,保存为Markdown等格式。支持获取由JavaScript呈现的页面,以及编写可中断并恢复的Python爬虫。
帮助AI智能体连接OmniRoute的MCP服务器,在指定权限范围内使用请求路由、记忆、缓存和审计等工具,并支持三种连接方式。
以人物名称、文件、代码标识符、URL或概念为起点,跨网络、代码和已保存信息调查关联对象,将关系整理为附带来源的Markdown调查资料与JSON。
连接不同机器上的ruflo智能体,通过签名消息共享状态、任务和成果。利用已登记的公钥验证发送方,并在节点间同步任务认领、释放与交接信息,协调工作归属。
Audit a page’s social sharing URL against its canonical URL, the preferred page address. Identify differences in domains, paths, or tracking parameters, and align the tags to address split share counts.
中文简介正在准备中。当前显示英语简介。
Audit internal links after URL migrations, domain changes, or site rebuilds. Trace redirects, record source pages and final destinations, and guide link updates so visitors and search crawlers reach the destination without extra redirect requests.
中文简介正在准备中。当前显示英语简介。
Audit website redirects after URL migrations, domain changes, or CMS upgrades. Record each redirect path and HTTP status code, identify unnecessary steps or loops, and update redirects to point directly to the final destination.
中文简介正在准备中。当前显示英语简介。
Check images used in social link previews through Open Graph metadata. Verify dimensions, aspect ratio, file size, and HTTPS URLs, then resize assets and update tags to reduce missing images and unwanted cropping.
中文简介正在准备中。当前显示英语简介。
Review article bylines to check that author names, roles, and biography links are clearly visible. Inspect rendered pages and related metadata to identify specific pages or templates that need clearer author information.
中文简介正在准备中。当前显示英语简介。
Review website link text and replace vague phrases with wording that explains the destination. Check the rendered page to help search engines and people using screen readers understand where each link leads.
中文简介正在准备中。当前显示英语简介。
Audit or create a dedicated About page that explains a website’s purpose and identifies its people or organization. Review the rendered output and supporting information, including expertise and contact details, to find gaps.
中文简介正在准备中。当前显示英语简介。