VulnJack is a command-line tool that scrapes a given website and checks for the presence of the Strict-Transport-Security
header in the URLs found on the site. It helps identify if the security header is missing or present, improving the security posture of websites.
- Scrapes URLs from a specified website.
- Checks if the
Strict-Transport-Security
header is present for each URL. - Outputs the result for each URL, indicating whether the header is missing or present.
- Clone the repository:
git clone https://github.com/HaxKit/vulnjack.git
- Install the required dependencies:
pip install -r requirements.txt
python3 install.py
To run VulnJack, use the following command:
vulnjack --url <website_url>
vulnjack.py --url https://example.com
This will scrape all the URLs from https://example.com
and check for the presence of the Strict-Transport-Security
header.
- Python 3.x
scraply
library (for scraping URLs)vulheader
library (for header checking)
This project is licensed under the MIT License - see the LICENSE file for details.