One liners

Welcome to the htrace.sh wiki!

You can file an issue about it and ask that it be added.

---

Table of Contents

• Check redirects
• Show basic SSL configuration and response headers
• Show basic SSL configuration and enable SSL debug mode
• Show response body
• Set POST request method
• Pin a single request to a specified IP address
• Scan SSL domain configuration
• Show and analyse HTTP response headers
• Send request headers
• Enumerate subdomains and perform zone transfer
• Set credentials to access a URL
• Set specific HTTP version
• Set specific TLS version and Ciphersuite
• Set path to the OpenSSL binary

Check redirects

htrace.sh -u https://example.com

Show basic SSL configuration and response headers

htrace.sh -u https://example.com -s -h

Show basic SSL configuration and enable SSL debug mode

htrace.sh -u https://example.com -s --ssl-debug

Show response body

htrace.sh -u https://example.com -b

Set POST request method

htrace.sh -u https://example.com -h -M "POST:'{"username":"xyz","password":"xyz"}'"
                                        ^^^^ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
                                         /                    \
                                        /                      \
                                   POST method          POST method value

Pin a single request to a specified IP address

htrace.sh -u https://example.com -h --resolve "xxx.xxx.xxx.xxx"
htrace.sh -u https://example.com -h --resolve "xxx.xxx.xxx.xxx:443"

Scan SSL domain configuration

htrace.sh -u https://example.com --ssllabs --testssl

Show and analyse HTTP response headers

htrace.sh -u https://example.com -h --observatory

Send request headers

# One request header
htrace.sh -u https://example.com -h -H 'Host: example.com'
# Multiple request headers
htrace.sh -u https://example.com -h -H 'Host: example.com ; x-debug-mode: true'

Enumerate subdomains and perform zone transfer

htrace.sh -u https://example.com --dns

Set credentials to access a URL

# Standard authentication
htrace.sh -u https://example.com -h --auth "basic:foo:bar"

# Proxy authentication
htrace.sh -u https://example.com -h --auth "proxy:foo:bar"

# Cookie authentication
htrace.sh -u https://example.com -h --auth "cookie:/tmp/example.com.cookie"

Set specific HTTP version

htrace.sh -u https://example.com --httpv 1.1

Set specific TLS version and Ciphersuite

htrace.sh -u https://example.com -s --tlsv 1.1 --ciph "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"

Set path to the OpenSSL binary

htrace.sh -u https://example.com -s --openssl /usr/bin/openssl-v1.1.1b