check-my-headers Logo

check-my-headers

0
Free
Visit Website

Fast and simple way to check any HTTP Headers. Thanks Liran Tal and the amazing Snyk team for your support 😊. Usage: Command line - Using Node.js's npx to run a one-off scan of a website: npx check-my-headers https://example.com. The CLI will gracefully handle cases where the URL to scan is missing or wrong. Module - Using check-my-headers in your project: const checkMyHeaders = require('check-my-headers'); checkMyHeaders('http://example.com').then(({ messages, headers, status }) => { console.log(`Status code: ${status}`); console.log('Messages:'); console.log(messages); console.log('Current headers:'); console.log(headers); }); Output: Status code: 200, Messages: [{ msg: 'Remove field: server', type: 'error' }, { msg: 'Missing field: content-security-policy', type: 'error' }, { msg: 'Missing field: referrer-policy', type: 'error' }, { msg: 'Missing field: strict-transport-security', type: 'error' }, { msg: 'Missing field: x-xss-protection', type: 'error' }]

FEATURES

ALTERNATIVES

Web application for visualizing live GPS locations on an SVG world map using honeypot captures.

Platform for hosting Jeopardy and 'King of the Hill' style Capture the Flag competitions.

A repository of CTF source files and write-ups for CTFs from 2014, allowing contributions and corrections.

Top 15 recommendations to protect your business from email-borne threats with Security Gateway.

Free tools for the CrowdStrike customer community to support their use of the Falcon platform.

A security dataset and CTF platform with full and attack-only versions pre-indexed for Splunk.

A project with Terraform and Ansible scripts to create an orchestrated BlueTeam Lab for testing attacks and forensic artifacts on Windows environment.

PINNED