Toolkit » IHA089

┌──(root㉿IHA089)-[/Toolkit/Security Headers & Config Testing ] └─#

HTTP Header Analysis

HTTP Header Analysis HTTP Header Analysis is the header hitlist—spotting missing X-Frame-Options or weak CSP for clickjacking and XSS gold.

Cookie Flags Checkers

Cookie Flags Checkers Flag missing Secure, HttpOnly, or SameSite attributes. Enables session hijacking via XSS or MITM.

TLS/SSL Analysis

TLS/SSL Analysis Detect weak ciphers, outdated protocols, and expired certs. Opens door to downgrade attacks and decryption.

CORS Policy Checkers

CORS Policy Checkers Test overly permissive origins and credentials support. Leads to cross-domain data theft.

Content Security Policy Validators

Content Security Policy Validators Bypass weak or misconfigured CSP with inline scripts and unsafe directives. Direct route to DOM XSS.