message
Share this page:
rghost.net

Observations based on HAR File

Non-Intrusive Cybersecurity and Privacy Observations based on HAR File

General Security Checks

Scan Malwares, Unwanted Software, Social media phishing using Google Web Risk

Get the list of open ports and verify if the corresponding application in the default credential list maps to the port

Get the list of open ports and verify if the corresponding application in the default credential list maps to the port

Get the site URL from the HAR file and validate the website for TLS protocol, keyxchange, cipher strength and if it has trusted certificates

Privacy Checks

Get the cookies from the HAR file of a given URL and analyse and generate a report

Application Security Checks

Get the JWT from the given response/request, and validate it for various vulnerabilities

Strict-Transport-Security response header (HSTS) lets a web site tell browsers that it should only be accessed using HTTPS and not HTTP

CSP provides advanced protection for Cross Site Scripting and Injection Vulnerabilities

HPKP is a Trust of First Use approach.Modern web applications should not tie themselves to specific Public Keys

Expect-CT headers prevents the usage of wrongly issued certificates for a site and makes sure that they do not go unnoticed

Sites can use X-Frame-Option to avoid click-jacking attacks, by ensuring that their content is not embedded into other sites.

The Access-Control-Allow-Origin response header indicates whether the response can be shared with requesting code from the given origin

The Referrer-Policy HTTP header controls how much referrer information (sent via the Referer header) should be included with requests.

Etags are similar to fingerprints and might be used for tracking purposes

Find Vulnerable data in JavaScripts and Find Vulnerable URL's using XSSStrike

Warnings

Warnings PrivacyBison publishes warnings when it learns a service has announced a data breach or is found misusing user data. If you believe a warning should be published for PrivacyBison.com