Alternatives
Products that do what Netjail – Go package to safely send requests to user-provided URLs does
Hello HN! I open-sourced this package designed to protect against security risks implied by sending HTTP requests to URLs constructed from user input. I kept running into this kind of problem in my career but couldn't find a package that addressed it already, so here it is! Security is hard, the more people's eyes we get on a piece of code the safer we can make it. Check it out, and let me know if you think things could be improved!
- 1AS
2018 · gist.github.com
- 2AT
Hi everyone, I recently published a small open-source project. It’s a minimal network packet analyzer written in Go — designed more like a learning toy than a replacement for Wireshark. It currently supports parsing basic protocols like TLS, DNS, and HTTP, and includes a tiny fuzzing engine to test payload responses. You can inspect raw packet content directly from the terminal. The output is colored for readability, and the code structure is kept simple and clear. The entire program is very small — just about 400 lines of Go code. I know it’s not anywhere near Wireshark’s level, and I still…
2025 · github.com
- 3AH
I've been trying to write my "go on rails" framework for years. I never quite got it like I wanted. There is gin and echo and all sorts of other frameworks and patterns but I finally found something I really like: /foo/ /foo/bar/ /foo/bar/more/ That's it. Just three levels and all my controllers get passed in what's between the / with var names first, second, third. In order to really make sure this framework could build something real I made a Hacker News clone. RemoteRenters.com is a HN just for articles about the remote work revolution…
2023 · remoterenters.com
- 4
- 5SS
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev
- 6LD
Hi HN! I'm Jarek, and I've built this tool that allows publishing .local domains on the local network using mDNS. It also has a reverse proxy that handles HTTPS termination and port forwarding. I'm working on adding more features, like an index page with all available domains or allowing proxy redirects, so you could redirect from HTTP to HTTPS. Let me know if you have any questions or feedback!
2023 · localcan.com
- 7
- 8AU
This userscript adds archive URLs to the metadata section of HN submissions without breaking the immersion. Here are 2 screenshots: https://imgur.com/a/PdUu6oG GreasyFork: https://greasyfork.org/en/scripts/452024-hacker-news-anti-pa... Source code: https://github.com/MostlyEmre/hn-anti-paywall Now let me overexplain. -Why?- I never liked paywalled articles. I understand where they come from, but I don't like where we cross our paths. This is why I don't use major news aggregators anymore. Instead, I spend my…
2022 · github.com
- 9HB
Hey all, I just wanted to share a project I've been working on for the past month. After years of heavy frameworks, I really like the idea of using htmx, but it’s a little too low level for me and needs a thin layer above it to facilitate things like components, better syntax with complex JS inside of an attribute, etc To try and solve this problem with a very minimal stack (golang + htmx) that I've been really enjoying, I'm building this project to cater to my needs and was thinking it would be useful for other developers.
2024 · htmgo.dev
- 10GS
2016 · github.com
- 11GN
Hey HN! I just released go-nbd, a lightweight Go library for effortlessly creating NBD servers and clients. Its a neat tool for creating custom Linux block devices with arbitrary backends, such as a file, byte slice or what I'm planning to use it for, a tape drive. While there are a few partially abandoned projects like this out there already, this library tries to be as maintainable as possible by only implementing the most recent handshake revision and baseline functionality for both the client and the server, while still having enough support to be useful. I'd love to get your feedback :)
2023 · github.com
- 12SA
Hi HN, For the past few months, I've been exploring tools that integrate with the Linux networking stack. This led me to build SafeHaven, a lightweight and configurable VPN implementation written in Go. The goal was to better understand how virtual private networks work at a fundamental level. Would love feedback from the community! Repo link: https://github.com/kwakubiney/safehaven
2025 · github.com
- 13SD
2016 · github.com
- 14TH
I wrote this tool during an internship at Narf Industries in 2023. It's a REPL that allows for quickly developing, testing, and fuzzing for HTTP request smuggling attack payloads. I started the internship having never worked with web servers, and have now found over 100 HTTP implementation bugs. I attribute this mostly to the ease of experimentation in the Garden. REPL-oriented fuzzing is just a really good interface for finding parsing bugs. It's pretty neat to able to run a differential fuzzer, categorize and display all the discovered discrepancies, then let a human pick through them and…
2024 · github.com
- 15GH
Hello everyone! I was poking around GoLang's HTTP/networking capabilities to see what things I could do. Turns out it is pretty easy to insert your own networking stack into HTTP clients and servers.
2022 · github.com
- 16HA
2015 · github.com
- 17IW
It's inspired by this comment I made: https://news.ycombinator.com/item?id=26599746. I actually saw several comments with HTTP URL posted, and that was the only one I bothered to comment on. So I thought that this is something better suited for bots than human. I hacked this together over yesterday and today: https://github.com/fishy/https-bot. Basically it uses the Firebase API (https://github.com/HackerNews/API) to find comments with HTTP URLs in them, try the HTTPS version, compare the contents, post back a comment if the contents are…
2021
- 18PA
Hi HN! After several months of work, I'm excited to share ProKZee, a free and open-source network security tool built with Go and React using Wails framework. ProKZee allows developers, security researchers, and penetration testers to intercept, inspect, and modify HTTP/S traffic — similar to tools like Burp Suite, OWASP ZAP, and Caido — but with a fast native UI, modern UX, and some unique features. https://github.com/al-sultani/prokzee
2025 · github.com
- 19WR
Hey HN! We’ve open-sourced Requestly (https://github.com/requestly/requestly) - A network debugging proxy for web & mobile apps. Requestly intercepts all HTTP(s) requests & responses and provides full control to developers to modify the request/response like rewriting request URL to hit different environment or returning different response for APIs/scripts. In addition to HTTP(s) interception & modification capabilities, Requestly also offers Mock Server [0] & recording the browser sessions [1] with video, console logs, & network logs stitched together. We use…
2023 · github.com
- 20HC
Hi HN -- I built HTTP:COLON, a small, open-source web tool for quickly checking a site’s HTTP response headers and learning what they mean as you go. Link: https://httpcolon.dev/ What it does - Enter a URL and fetch its response headers - Groups common headers into handy buckets (cache, content, security) - Includes short docs/tooltips for headers and directives so you can look things up while debugging. I find hovering on highlighted headers quite useful! Supports different HTTP methods (GET/POST/PUT/DELETE) Deep links - You can link directly to a host,…
Jan 2026 · httpcolon.dev
- 21IH
A simple Go-based HTTP proxy designed for detailed inspection of requests and responses. It logs traffic to the console with colorization, automatic decompression, and formatting for common content types, while remaining transparent to the client application. Ideal for debugging API interactions, understanding middleware behavior, or simply getting a clear view of HTTP traffic flow with jq-like pretty-printing & colorization of request/response. Automatically redacts parts of Authorization header to avoid token leakage.
2025 · github.com
- 22IB
BoringSSL and nghttp2. Matches JA3N, JA4, and JA4_R fingerprints. Supports HTTP/2, async/await, and works with Cloudflare-protected sites. Not trying to compete with curl_cffi - just a learning project that turned into something functional.
Nov 2025 · github.com
- 23IG
Hey HN, For years, my local development setup has been a fragile mess of tools that never quite played nicely together. On my mac, it was a constant battle with Homebrew services starting (or not starting) on boot, conflicting PHP and Node versions managed by `asdf` or `nvm`, and a collection of `docker-compose.yml` files that I'd copy-paste and tweak for every single project. The cognitive load was just too high. Setting up SSL was another chore involving `mkcert`. Sharing a quick demo with a colleague meant firing up ngrok. And if I wanted to run two projects that needed different versions…
Oct 2025 · servbay.com
- 24GA
Hey HN! I built Gojju, a programming language that cherry-picks my favorite features from 5 languages: - Python: List comprehensions, slicing - Ruby: #{interpolation}, postfix if, blocks - Haskell: |> pipe operator, lambdas \x -> x+1, Maybe/Either - Perl: unless/until, regex literals - JavaScript: Arrow functions =>, spread ... Example: [1, 2, 3, 4, 5] |> filter(\x -> x % 2 == 0) |> map(\x -> x * 2) |> sum Install: `pip install gojju` The name "Gojju" (ಗೊಜ್ಜು) means "essence" or "secret ingredient" in Kannada. Would love feedback on the syntax choices!
Jan 2026 · hemanth.github.io
Ranked by how close each launch is in meaning, then by votes. Refine with a description →