GitXplorerGitXplorer
m

header_looker

public
0 stars
0 forks
3 issues

Commits

List of commits on branch master.
Unverified
e67767baa20f462491ac72f1a82a332cb17f779b

schema text file for database creation

mmcgyver5 committed 5 years ago
Unverified
267fed9d9877a67f7779ce398657d2c751bfb49e

relational tables and handling 504

mmcgyver5 committed 5 years ago
Unverified
8f9e0bbc3ef4960574b4bd467709e05059f26402

remove commented lines

mmcgyver5 committed 5 years ago
Unverified
a04bcd1347c198050d51eacc30e854b8d8c01ddc

requests functionality and database functionality

committed 5 years ago
Verified
aa19bd686c1bec9d31fb2e351850a8a7e4c88484

Update README.md

mmcgyver5 committed 5 years ago
Verified
9140640298bcc3991253f78095c05eca96ee0800

Update README.md

mmcgyver5 committed 5 years ago

README

The README file for this repository.

header_looker

Scanner: to scan a network full of web applications and collect statistics on usage of security headers / all headers, especially those relating to caching

Accepts a list of urls looks at each one and saves the header names and values to a database. needs to follow redirects. Needs ability to crawl a page of links and visit those.

Reporter: creates reports for security header statistics:

  • CSP
  • HSTS preload
  • http_only
  • x-frame-options
  • cross domain policies
  • referrer-policy
  • xss-protection

Later Feature: Uses Google searches to find other urls in the same domains What if it tracked all states, counties, cities, k12, community colleges, = all state and local governments? What if I published the data What is an application? Scanner will follow links and spider entire .gov domains. an application is not a subdomain.

Storage:

  • phase one: A really simple SQL-Lite DB ** Application ** Header: *** Record_ID *** Scan ID

** Scan - Scan has scan date,

  • phase two: a beefier one of the above