fhttp
The f stands for flex. fhttp is a fork of net/http that provides an array of features pertaining to the fingerprint of the golang http client. Through these changes, the http client becomes much more flexible, and when combined with transports such as uTLS can mitigate servers from fingerprinting requests and see that it is made by golang, making them look like they originate from a regular chrome browser.
Documentation can be contributed, otherwise, look at tests and examples. The main one should be example_client_test.go.
Features
Ordered Headers
Allows for pseudo header order and normal header order. Most of the code is taken from this pr.
Connection settings (TODO)
Has Chrome-like connection settings:
SETTINGS_HEADER_TABLE_SIZE = 65536
SETTINGS_ENABLE_PUSH = 1
SETTINGS_MAX_CONCURRENT_STREAMS = 1000
SETTINGS_INITIAL_WINDOW_SIZE = 6291456
SETTINGS_MAX_FRAME_SIZE = 16384
SETTINGS_MAX_HEADER_LIST_SIZE = 262144
gzip, deflate, br encoding (TODO)
Actually supports and implements encoding gzip, deflate, br
Pseudo header order
Supports pseudo header order for http2 to mitigate fingerprinting. Read more about it here
Backward compatible with net/http
Although this library is an extension of net/http, it is also meant to be backward compatible. Replacing
import (
"net/http"
)
with
import (
http "github.com/zMrKrabz/fhttp"
)
SHOULD not break anything.
(json send to the function)
(map used for http.HeaderOrderKey)
(Result in burp)
