Cybersecurity HTTP Headers Analysis Tool
Budget: €8 – €30 EUR
I’m looking for a developer with basic cybersecurity knowledge to build a small tool that analyzes the security HTTP headers used by a website.
The goal of this project is to create a lightweight and easy-to-use tool that checks whether a website follows common web security best practices regarding HTTP security headers.
The tool should allow a user to enter a website URL, send a request to the site, retrieve the HTTP response headers, and analyze whether important security headers are present and properly configured.
This project is intended as a learning tool for web security, helping developers understand how security headers protect websites against common attacks such as:
Cross-Site Scripting (XSS)
Clickjacking
MIME sniffing
Data injection attacks
Main Features
The tool should perform the following checks:
1. Retrieve HTTP Headers
The program should:
Accept a website URL
Send an HTTP request to the server
Collect all response headers
2. Analyze Important Security Headers
The tool should check for the presence and configuration of the following headers:
Content-Security-Policy (CSP)
Protects against Cross-Site Scripting attacks.
Strict-Transport-Security (HSTS)
Forces browsers to use HTTPS.
X-Frame-Options
Protects against clickjacking.
X-Content-Type-Options
Prevents MIME sniffing.
Referrer-Policy
Controls how much referrer information is shared.
Permissions-Policy
Restricts browser features like camera, microphone, etc.
3. Identify Security Issues
The tool should highlight potential security problems such as:
Missing security headers
Weak header configurations
Headers that are misconfigured
Example Output
Website Security Report for example.com
Content-Security-Policy: Missing
Strict-Transport-Security: Present
X-Frame-Options: Present (DENY)
X-Content-Type-Options: Missing
Referrer-Policy: Weak (no-referrer-when-downgrade)
Security Issues Detected
• Missing Content-Security-Policy header
• Missing X-Content-Type-Options header
• Weak Referrer-Policy configuration
Security Recommendations
• Add a Content-Security-Policy header to prevent XSS attacks
• Enable X-Content-Type-Options: nosniff
• Configure a stronger Referrer-Policy
Technical Requirements
The tool can be built using:
Python (preferred)
or another similar language.
Possible libraries include:
requests
httpx
urllib
The program should be:
lightweight
easy to run locally
simple to use from the command line
Deliverables
The final deliverables should include:
Complete source code
A script that allows a user to input a website URL and perform the scan
A simple security report showing the results
Instructions explaining how to install and run the tool
Skills Required
Basic Cybersecurity
Web Security
Python development
HTTP protocol knowledge
Important Note
This tool must only be used to analyze websites where the user has permission to perform security testing.
The goal of this project is to create a lightweight and easy-to-use tool that checks whether a website follows common web security best practices regarding HTTP security headers.
The tool should allow a user to enter a website URL, send a request to the site, retrieve the HTTP response headers, and analyze whether important security headers are present and properly configured.
This project is intended as a learning tool for web security, helping developers understand how security headers protect websites against common attacks such as:
Cross-Site Scripting (XSS)
Clickjacking
MIME sniffing
Data injection attacks
Main Features
The tool should perform the following checks:
1. Retrieve HTTP Headers
The program should:
Accept a website URL
Send an HTTP request to the server
Collect all response headers
2. Analyze Important Security Headers
The tool should check for the presence and configuration of the following headers:
Content-Security-Policy (CSP)
Protects against Cross-Site Scripting attacks.
Strict-Transport-Security (HSTS)
Forces browsers to use HTTPS.
X-Frame-Options
Protects against clickjacking.
X-Content-Type-Options
Prevents MIME sniffing.
Referrer-Policy
Controls how much referrer information is shared.
Permissions-Policy
Restricts browser features like camera, microphone, etc.
3. Identify Security Issues
The tool should highlight potential security problems such as:
Missing security headers
Weak header configurations
Headers that are misconfigured
Example Output
Website Security Report for example.com
Content-Security-Policy: Missing
Strict-Transport-Security: Present
X-Frame-Options: Present (DENY)
X-Content-Type-Options: Missing
Referrer-Policy: Weak (no-referrer-when-downgrade)
Security Issues Detected
• Missing Content-Security-Policy header
• Missing X-Content-Type-Options header
• Weak Referrer-Policy configuration
Security Recommendations
• Add a Content-Security-Policy header to prevent XSS attacks
• Enable X-Content-Type-Options: nosniff
• Configure a stronger Referrer-Policy
Technical Requirements
The tool can be built using:
Python (preferred)
or another similar language.
Possible libraries include:
requests
httpx
urllib
The program should be:
lightweight
easy to run locally
simple to use from the command line
Deliverables
The final deliverables should include:
Complete source code
A script that allows a user to input a website URL and perform the scan
A simple security report showing the results
Instructions explaining how to install and run the tool
Skills Required
Basic Cybersecurity
Web Security
Python development
HTTP protocol knowledge
Important Note
This tool must only be used to analyze websites where the user has permission to perform security testing.
Related categories:
PHP
JavaScript
Python
Web Security
Computer Security
Software Development
HTTP
Network Security