Skip to content

Functions

@trimstray edited this page Mar 7, 2019 · 22 revisions

Welcome to the htrace.sh wiki!

You can file an issue about it and ask that it be added.


This tool is useful for:

  • checking properly domain configuration (web servers/reverse proxies)
  • displaying basic HTTP information including URLs, GeoIP, status codes and protocol info
  • checking HTTP request latency (time_connect and time_total)
  • redirects analysis (and follows it), e.g. to eliminate redirect loops
  • viewing and analyzing response headers for each request
    • try bypassing cache
  • viewing and analyzing response body for each request
  • setting HTTP request method and header(s)
  • checking basic ssl configuration
    • validation of the certificates (e.g. date, cn, san), checking sni and verification ssl connection
  • checking extended ssl configuration with testssl.sh
  • scanning domain for Mixed Content
  • scanning domain using Nmap NSE Library (34 scripts)
  • scanning domain with external security tools: Mozilla Observatory and SSL Labs API
Clone this wiki locally