HTTP

Guias

• OWASP Cheat Sheet :: HTTP Headers

• OWASP Cheat Sheet :: HTTP Strict Transport Security

Tools

Lets Encrypt

Let’s Encrypt is a free, automated, and open certificate authority (CA), run for the public’s benefit. It is a service provided by the Internet Security Research Group (ISRG).

Proxify

A portable CLI-based HTTP/Socks proxy written in Golang.

Links Úteis

Artigos

• How HTTPS Works - Guia Ilustrado

Vídeos

• Missing HTTP Security Headers - Bug Bounty Tips

• What is a Protocol? (Deepdive) - LiveOverflow