Headers plugin added
This commit is contained in:
37
README.md
37
README.md
@@ -233,6 +233,43 @@ A security plugin that searches Exploit-DB for vulnerabilities and exploits dire
|
||||
- Automatically falls back to search links if CSV database is unavailable
|
||||
|
||||
|
||||
### 🔒 HTTP Security Headers Analysis
|
||||
|
||||
**🛡️ !headers [url]**
|
||||
Comprehensive HTTP security header analysis with security scoring and recommendations.
|
||||
|
||||
**Features:**
|
||||
- **Security Scoring**: 0-100 rating based on headers configuration
|
||||
- **Header Validation**: Checks presence and proper configuration of critical security headers
|
||||
- **Redirect Analysis**: Follows HTTP to HTTPS redirect chain
|
||||
- **SSL Certificate**: Basic SSL/TLS certificate information
|
||||
- **Information Disclosure**: Identifies revealing server headers
|
||||
- **Actionable Recommendations**: Specific guidance for security improvements
|
||||
|
||||
**Security Headers Analyzed:**
|
||||
- `Strict-Transport-Security` (HSTS) - HTTP to HTTPS enforcement
|
||||
- `Content-Security-Policy` (CSP) - XSS and content injection protection
|
||||
- `X-Frame-Options` - Clickjacking protection
|
||||
- `X-Content-Type-Options` - MIME type sniffing prevention
|
||||
- `Referrer-Policy` - Referrer information control
|
||||
- `Feature-Policy` / `Permissions-Policy` - Browser feature restrictions
|
||||
- Information disclosure headers (`Server`, `X-Powered-By`)
|
||||
|
||||
**Security Ratings:**
|
||||
- **🟢 Excellent (80-100)**: Strong security headers configuration
|
||||
- **🟡 Good (60-79)**: Moderate security, room for improvement
|
||||
- **🟠 Fair (40-59)**: Basic security, significant improvements needed
|
||||
- **🔴 Poor (0-39)**: Weak security headers configuration
|
||||
|
||||
**Examples:**
|
||||
```bash
|
||||
!headers example.com
|
||||
!headers https://github.com
|
||||
!headers localhost:8080
|
||||
!headers subdomain.target.com
|
||||
```
|
||||
|
||||
|
||||
### AI & Generation Commands
|
||||
|
||||
**🤖 AI Commands (!tech, !music, !eth, etc.)**
|
||||
|
Reference in New Issue
Block a user