Dotfiles

Author	SHA1	Message	Date
Jonathan Hodgson	984298b29b	BIN: analyse-headers: fix most shellcheck warnings The only checks I haven't fixed are the unused variables for colours. I may use them in the future so haven't removed them	4 years ago
Jonathan Hodgson	6ac052cd39	BIN: analyse-headers: note on x-frame-options if frame-ancestors present If the frame-ancestors content security policy is present, the x-frame-options warning mentions that the content security helps mitigate against clickjacking although for greater browser support, x-frame-options should also be used Thanks <Dom Ingram> for the suggestion	4 years ago
Jonathan Hodgson	1b42f81f47	BIN: analyse-headers: Adds generic version disclosure function if the header contains the word "version" (case insensitively) it will flag it as potential information disclosure Thanks <Dom Ingram> for the suggestion	4 years ago
Jonathan Hodgson	e247c85bc9	BIN: analyse-headers: read from stdin if first arg is - This makes testing much easier	4 years ago
Jonathan Hodgson	cad2f2d2d5	BIN: analyse-headers: Add more notes to expect-ct description As pointed out by <Dom Ingram>, the expect-ct is likely to become obsolete in June 2012 https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT	4 years ago
Jonathan Hodgson	7ea1e9a964	BIN: analyse-headers: Fix incorrect reporting of SSL issues It turns out the SSL flags secure and httponly are not case sensitive. https://tools.ietf.org/html/rfc6265#section-5.2.5 I cannot find any documentation about the SameSite=Strict so I will leave it case sensitive for now. The spec for that section is here: https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-05#section-5.2 Thanks <Dom Ingram> for flagging this	4 years ago
Jonathan Hodgson	7a7ffc608d	BIN: analyse-headers: add expect-ct and start referrer-policy	4 years ago
Jonathan Hodgson	3ce547a0b2	BIN: Analyse-headers: Adds to description for cookie flag	4 years ago
Jonathan Hodgson	fb5774a584	BIN: analyse-headers: fix error "wrap command not found"	4 years ago
Jonathan Hodgson	9ef36af8f7	BIN: analyse-headers: adds feature-policy and permissions-policy checks	4 years ago
Jonathan Hodgson	61097006a4	BIN: analyse-headers: Wrap text in descriptions The text in descriptions is now wrapped to 80 chars. This does not affect the headers printed at the top which are not wrapped	4 years ago
Jonathan Hodgson	af81ccd62e	BIN: Adds SameSite check in analyse-headers script The script will now warn you if the SameSite option is not set to Strict on cookies.	4 years ago
Jonathan Hodgson	1f29c17ab5	BIN: Fix webtest script when : in cookies If there was a colon in a cookie, the script would misidentify insecure cookie configurations	4 years ago
Jonathan Hodgson	a3f75d9b32	BIN: Adds analyse-headers script The script is in early stages of development but should work for some of the most common mis-configurtaions.	4 years ago
Jonathan Hodgson	ad03136de5	Adds scripts to help with ssl testing	4 years ago
Jonathan Hodgson	af04f665cd	Renames jwtcat to catjwt to avoid clash with 3rd party tool	4 years ago
Jonathan Hodgson	c5fd08bb76	Creates script for printing jwt web tokens	4 years ago
Jonathan Hodgson	3ba3ca03b5	A start to webtest script	4 years ago
Jonathan Hodgson	74578ef182	Adds getpaths script	4 years ago
Jonathan Hodgson	b8fad36f8d	changed profile name to headless	5 years ago
Jonathan Hodgson	34ea59f0f6	Will create firefox profile	5 years ago
Jonathan Hodgson	c21d54d9a4	Adds help and checks url is given	5 years ago
Jonathan Hodgson	518d11f4ce	Makes clickjacking script look for ff dev edition	5 years ago
Jonathan Hodgson	45ac26d2d7	Adds script to make clickjacking screenshot	5 years ago
Jonathan Hodgson	121798e075	Lots of bin changes	5 years ago
Jonathan Hodgson	a01077a8e9	Adds a script for turning an html form into a curl requst	5 years ago

26 Commits (984298b29bf2fb29a1efec3ad4f3c4f5fd20a825)