forked from trimstray/htrace.sh
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathconfig
87 lines (68 loc) · 2 KB
/
config
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
# Set output colors.
# shellcheck disable=SC2034
# - on, off
HTRACE_COLORS="on"
# Maximum output line width.
# shellcheck disable=SC2034
# - <num>, auto
MAX_WIDTH="auto"
# Set path to the OpenSSL.
# shellcheck disable=SC2034
# - /path/to/openssl
HTRACE_SSL_BIN_PATH="$(command -v openssl)"
# Set path to certificates (see: https://serverfault.com/a/722646)
# shellcheck disable=SC2034
# - /path/to/certs
# Ubuntu/Debian: /etc/ssl/certs/ca-certificates.crt
# RHEL/CentOS: /etc/pki/tls/certs/ca-bundle.crt
HTRACE_SSL_CERT_PATH=""
# Check RootCA certificate in local CA store
# shellcheck disable=SC2034
# - on, off
HTRACE_SSL_CERT_CA_CHECK="off"
# Hide source ip addresses from output.
# shellcheck disable=SC2034
# - on, off
HIDE_SRC_IP="off"
# Set CURL timers.
# shellcheck disable=SC2034
# - on, off
CURL_TIMERS="off"
# Set random http user-agent.
# shellcheck disable=SC2034
# - on, off
HTTP_USER_AGENT="on"
# Set random http referer.
# shellcheck disable=SC2034
# - on, off
HTTP_REFERER="off"
# Set absolute path to cookie file.
# shellcheck disable=SC2034
# - /path/to/cookie
HTRACE_COOKIE_PATH="/tmp/htrace.sh.cookie"
# DNS server for remote dns requests.
# shellcheck disable=SC2034
# - <ip-addr>
DNS_SERVER="1.1.1.1"
# Type of zone transfer attack.
# shellcheck disable=SC2034
# - passive, active, off
ZONE_TRANSFER_TYPE="passive"
# Testssl options.
TESTSSL_OPT="--color 0 --quiet --protocols --cipher-per-proto --server-preference --server-defaults"
# Mozilla Observatory options.
OBSERVATORY_OPT="--format=report --rescan --zero --quiet"
# SSLLabs options.
SSLLABS_OPT="-quiet -grade"
# Mixed-content options.
MIXEDCONTENT_OPT="--format no-ansi --no-check-certificate | grep \"MCS.[E|W]\""
# Nmap options.
# Note: without '-sV' some NSE scripts not working properly.
NMAP_OPT="-sV"
NMAP_SCRIPT_ARGS=""
# Wafw00f options.
WAFW00F_OPT="-v"
# Subfinder options.
SUBFINDER_OPT="--silent -t 10 | grep -v \"canceled\|error\|warning\|fail\|timeout\|NOTE\""
# Nghttp2 options.
NGHTTP2_OPT="-nu -v"