Skip to content

TechFinity toolkit

HTTP Request Tool

Send controlled server-side HTTP requests to public Internet targets with DNS pinning, response limits, and SSRF defenses.

SSRF protection: the target must resolve only to public addresses, DNS is resolved before the request, cURL is pinned to a validated address, redirects are not followed automatically, and responses are capped at 2 MB.

Security model

This tool intentionally does not follow redirects automatically. If a response returns 301/302/307/308, inspect the Location header and submit the destination as a new request so it receives the same public-address validation.

Authentication values are used for the current request only and are not rendered back into the response page. Use dedicated test credentials when possible.

This is an HTTP debugging utility, not an internal-network scanner.