-
Notifications
You must be signed in to change notification settings - Fork 237
Functions
@trimstray edited this page Mar 7, 2019
·
22 revisions
This tool is useful for:
- checking properly domain configuration (web servers/reverse proxies)
- displaying basic HTTP information including URLs, GeoIP, status codes and protocol info
- checking HTTP request latency (
time_connect
andtime_total
) - redirects analysis (and follows it), e.g. to eliminate redirect loops
- viewing and analyzing response headers for each request
- try bypassing cache
- viewing and analyzing response body for each request
- setting HTTP request method and header(s)
- checking basic ssl configuration
-
validation of the certificates (e.g.
date
,cn
,san
), checking sni and verification ssl connection
-
validation of the certificates (e.g.
- checking extended ssl configuration with testssl.sh
- scanning domain for Mixed Content
- scanning domain using Nmap NSE Library (34 scripts)
- scanning domain with external security tools: Mozilla Observatory and SSL Labs API
htrace.sh v1.1.7