Settings

Welcome to the htrace.sh wiki!

You can file an issue about it and ask that it be added.

---

htrace.sh uses simple file (config) to configure the parameters and initial settings:

# Set output colors.
# shellcheck disable=SC2034
#   - on, off
HTRACE_COLORS="on"

# Maximum output line width.
# shellcheck disable=SC2034
#   - <num>, auto
MAX_WIDTH="auto"

# Set path to the OpenSSL.
# shellcheck disable=SC2034
#   - /path/to/openssl
HTRACE_SSL_BIN_PATH="$(command -v openssl)"

# Set path to certificates (see: https://serverfault.com/a/722646)
# shellcheck disable=SC2034
#   - /path/to/certs
# Ubuntu/Debian: /etc/ssl/certs/ca-certificates.crt
# RHEL/CentOS: /etc/pki/tls/certs/ca-bundle.crt
HTRACE_SSL_CERT_PATH=""

# Check RootCA certificate in local CA store
# shellcheck disable=SC2034
#   - on, off
HTRACE_SSL_CERT_CA_CHECK="off"

# Hide source ip addresses from output.
# shellcheck disable=SC2034
#   - on, off
HIDE_SRC_IP="off"

# Set CURL timers.
# shellcheck disable=SC2034
#   - on, off
CURL_TIMERS="off"

# Set random http user-agent.
# shellcheck disable=SC2034
#   - on, off
HTTP_USER_AGENT="on"

# Set random http referer.
# shellcheck disable=SC2034
#   - on, off
HTTP_REFERER="off"

# Set absolute path to cookie file.
# shellcheck disable=SC2034
#   - /path/to/cookie
HTRACE_COOKIE_PATH="/tmp/htrace.sh.cookie"

# DNS server for remote dns requests.
# shellcheck disable=SC2034
#   - <ip-addr>
DNS_SERVER="1.1.1.1"

# Type of zone transfer attack.
# shellcheck disable=SC2034
#   - passive, active, off
ZONE_TRANSFER_TYPE="passive"

# Testssl options.
TESTSSL_OPT="--color 0 --quiet --protocols --cipher-per-proto --server-preference --server-defaults"

# Mozilla Observatory options.
OBSERVATORY_OPT="--format=report --rescan --zero --quiet"

# SSLLabs options.
SSLLABS_OPT="-quiet -grade"

# Mixed-content options.
MIXEDCONTENT_OPT="--format no-ansi --no-check-certificate | grep \"MCS.[E|W]\""

# Nmap options.
#   Note: without '-sV' some NSE scripts not working properly.
NMAP_OPT="-sV"
NMAP_SCRIPT_ARGS=""

# Wafw00f options.
WAFW00F_OPT="-v"

# Subfinder options.
SUBFINDER_OPT="--silent -t 10 | grep -v \"canceled\|error\|warning\|fail\|timeout\|NOTE\""

# Nghttp2 options.
NGHTTP2_OPT="-nu -v"