Consider forking net/http

[sw33tLie]

Hello,

Many users have encountered limitations with ffuf due to its reliance on the net/http library, which performs various checks that can be undesirable for certain use cases.

To address these issues, I created a custom fork of ffuf with several modifications that have proven useful to the community. These changes include:

• Fuzzing with invalid HTTP methods
• Disabling header canonization (allowing lowercase headers)
• Supporting invalid URL encoding characters (e.g. %9f)
• Sending invalid HTTP headers, such as those starting with spaces

I haven't submitted a pull request for these changes because my implementation is quite hacky and involves numerous modifications. However, the positive feedback and interest from users demonstrate that these features are feasible and beneficial.

Therefore, I suggest considering a fork of the net/http library to incorporate these changes.

Have a good day

[denandz]

+1. This would be supremely useful especially if the project would like to see ffuf used for vulnerability discovery through web fuzzing.