Most HTTP vulnerabilities don’t come from sophisticated attacks. They come from misunderstanding where your framework stops protecting you. This covers the edge cases that actually bite production APIs: Range headers, path traversal, encoding conflicts, and request smuggling

A free bulk domain (who is) checker tool for checking domain availability based on WHOIS lookups.

Quickly and easily assess the security of your HTTP response headers

http-server is a simple, zero-configuration command-line static HTTP server. Enough for production usage, simple and hackable enough to be used for testing, local development and learning.