http-headers-scanner

HTTP header security scanner. Finds Host header injection, web cache poisoning, request smuggling and unkeyed-input gadgets, assesses HSTS/CSP/cookie posture, confirms every finding with a second probe, maps it to OWASP ASVS 5.0 and PCI DSS 4.0.1 — and reports what it could not assess instead of counting it as a pass.

Didaktisches Web-Security & HTTP-Header Audit-Framework (227 Punkte) mit nativer Zero-Regex-Engine für maximale Performance & ReDoS-Schutz. Bietet tiefe Kontext-Risikomatrix (diverse Seitentypen), Soft-404-Entrapment, WAF/CDN-Fingerprinting, automatische .htaccess-Direktiven und vollständige DSGVO-Konformität (In-Memory/No-DB).

Burp Suite extension for discovering, analyzing, and auditing HTTP security headers including CSP, HSTS, CORS, and web security misconfigurations.