https://github.com/ancat/cspinator

Generate CSP headers while surfing your websitez
https://github.com/ancat/cspinator

Last synced: about 1 month ago
JSON representation

Generate CSP headers while surfing your websitez

• Host: GitHub
• URL: https://github.com/ancat/cspinator
• Owner: ancat
• Created: 2012-11-16T21:59:43.000Z (about 12 years ago)
• Default Branch: master
• Last Pushed: 2012-11-16T22:37:57.000Z (about 12 years ago)
• Last Synced: 2023-03-24T10:57:03.106Z (almost 2 years ago)
• Size: 121 KB
• Stars: 2
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
CSPinator

=========

Generate CSP headers while surfing your websitez through burp! How cool is that?

    Steps:

    

    1. Check everything off in the Burp's Proxy Filter

    2. Enable proxy request logging (options > misc > logging)

    3. python generate.py proxylog.log www.host.com

    4. ???

    5. Profit? Kinda...

Example

=======

    omar[~/CSPinator]$ python generate.py whatismyip.log www.whatismyip.com

    X-WebKit-CSP: default-src self *.tynt.com; script-src *.addthis.com *.tynt.com www.google-analytics.com; img-src m.addthisedge.com www.google-analytics.com; style-src ct5.addthis.com; 

    X-Content-Security-Policy: default-src self *.tynt.com; script-src *.addthis.com *.tynt.com www.google-analytics.com; img-src m.addthisedge.com www.google-analytics.com; style-src ct5.addthis.com;

It's not done so don't judge me!!