Live data from Hacker News

Show HN: Endpoints.dev – Pastebin for HTTP Requests

endpoints.dev

1–10 of 52 posts

Re: Show HN: Endpoints.dev – Pastebin for HTTP Requests

#2
I've just released endpoints.dev - Use it to get a unique, private url that will store & display all http requests made to it. Use your unique URL with 3rd party tools to see what requests they are making, without needing to spin up a webserver. Or, use it for experimenting with XXS, phone-home, and other http based pen-testing.

Re: Show HN: Endpoints.dev – Pastebin for HTTP Requests

#4
post #2

I've just released endpoints.dev - Use it to get a unique, private url that will store & display all http requests made to it. Use your unique URL with 3rd party tools to see what requests they are making, without needing to spin up a webserver. Or, use it for experimenting with XXS, phone-home, and other http based pen-testing.

Any advantages over http://requestbin.net/ ?

Re: Show HN: Endpoints.dev – Pastebin for HTTP Requests

#7

How do you generate that unique endpoint? Do you have some worker that generates https config? Whats your magic ?

Not the author, but there's no config that needs to be generated. Just run a HTTPS server with a wildcard cert that serves all traffic from a wildcard 'vhost' *.example.com to your application code. Then, your application can just look at the Host header to see which 'endpoint' it should serve.

Re: Show HN: Endpoints.dev – Pastebin for HTTP Requests

#8
post #2

I've just released endpoints.dev - Use it to get a unique, private url that will store & display all http requests made to it. Use your unique URL with 3rd party tools to see what requests they are making, without needing to spin up a webserver. Or, use it for experimenting with XXS, phone-home, and other http based pen-testing.

Any advantages over http://requestbin.net/ ?

Looks like requestbin will only keep 20 requests for 48 hours. Currently, endpoints.dev will store an unlimited number of requests for 30 days. The plan is to add user login, and lift the 30 day limit for authenticated users.

Re: Show HN: Endpoints.dev – Pastebin for HTTP Requests

#9
post #7

How do you generate that unique endpoint? Do you have some worker that generates https config? Whats your magic ?

Not the author, but there's no config that needs to be generated. Just run a HTTPS server with a wildcard cert that serves all traffic from a wildcard 'vhost' *.example.com to your application code. Then, your application can just look at the Host header to see which 'endpoint' it should serve.

yep, that's exactly it :) - I'm using an ALB on AWS to manage the incoming requests

Re: Show HN: Endpoints.dev – Pastebin for HTTP Requests

#10
Is the unique endpoint "secure/random" enough? I imagine you would end up with some amount of live session cookies, tokens, api keys, and so on, that would have some value for people guessing uris.

Edit: Ahh, missed the JWT pairing. I read "Pastebin for" too literally.

Post reply on HN