proxy_header_trust

package
v0.4.9 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Sep 20, 2026 License: MIT Imports: 9 Imported by: 0

Documentation

Index

Constants

View Source
const (
	ModuleID    = "proxy-header-trust"
	ModuleName  = "Proxy Header Trust"
	ModuleShort = "Cross-framework detection of proxy header trust issues via X-Forwarded-* header manipulation"
)

Variables

View Source
var (
	ModuleDesc = `` /* 589-byte string literal not displayed */

	ModuleConfirmation = "" /* 154-byte string literal not displayed */
	ModuleSeverity     = severity.High
	ModuleConfidence   = severity.Firm
	ModuleTags         = []string{"misconfiguration", "header-security", "moderate"}
)

Functions

This section is empty.

Types

type Module

type Module struct {
	modkit.BaseActiveModule
	// contains filtered or unexported fields
}

Module implements the Proxy Header Trust active scanner.

func New

func New() *Module

New creates a new Proxy Header Trust module.

func (*Module) CanProcess

func (m *Module) CanProcess(ctx *httpmsg.HttpRequestResponse) bool

func (*Module) IncludesBaseCanProcess

func (m *Module) IncludesBaseCanProcess() bool

func (*Module) ScanPerRequest

func (m *Module) ScanPerRequest(
	ctx *httpmsg.HttpRequestResponse,
	httpClient *http.Requester,
	scanCtx *modkit.ScanContext,
) ([]*output.ResultEvent, error)

ScanPerRequest tests the host for proxy header trust issues.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL