https://github.com/nicoswd/headsec

Check a site's security headers
https://github.com/nicoswd/headsec

header-parser http security security-audit security-tools securityheaders

Last synced: 11 months ago
JSON representation

Check a site's security headers

• Host: GitHub
• URL: https://github.com/nicoswd/headsec
• Owner: nicoSWD
• License: mit
• Created: 2018-11-27T22:47:35.000Z (about 7 years ago)
• Default Branch: master
• Last Pushed: 2019-04-22T20:09:13.000Z (almost 7 years ago)
• Last Synced: 2025-01-17T12:48:25.850Z (about 1 year ago)
• Topics: header-parser, http, security, security-audit, security-tools, securityheaders
• Language: PHP
• Homepage:
• Size: 1.09 MB
• Stars: 4
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.md

Awesome Lists containing this project

README

          
# headsec (β)

[![Build Status](https://travis-ci.org/nicoSWD/headsec.svg?branch=master)](https://travis-ci.org/nicoSWD/headsec)

[![Scrutinizer Code Quality](https://scrutinizer-ci.com/g/nicoSWD/headsec/badges/quality-score.png?b=master)](https://scrutinizer-ci.com/g/nicoSWD/headsec/?branch=master)

Test a site's HTTP headers for possible security issues. This is a little like Scott Helme's [SecurityHeaders.com](https://securityheaders.com/),

but it can be run locally on your machine or CI

![screenshot](screenshots/screenshot.gif)

**Basic usage**

This will analise the headers returned by the supplied URL and print the results. By default, non-security headers

are omitted in the output, but can be printed as well by passing the `--show-all-headers` flag (or `-a`)

```shell

$ headsec google.com

```

By default it'll follow redirects and only print the results of the last URL. To stop following redirects, pass

the `--ignore-redirects` flag (or `-r`)

```shell

$ headsec google.com --ignore-redirects

```

**Advanced usage**

If you're trying to test an URL that requires authentication, a POST request, or anything

of the like, you can use `curl` and pipe the result to `headsec`

```shell

$ curl https://yahoo.com/ --head -sS | headsec

```

**Installation**

```shell

$ curl https://raw.githubusercontent.com/nicoSWD/headsec/master/install.sh -sS | sh

```

**Build from source**

**Build**

```shell

$ make

```

**Test**

```shell

$ make test

```

**Install**

```shell

$ make install

```