argus-header 0.5.0

A Python CLI tool for analyzing HTTP response headers and identifying security issues.

🛡️ Argus Header

Fast, lightweight HTTP security header analyzer built for developers, security engineers, and penetration testers.

Argus Header is a command-line tool that analyzes HTTP response headers and identifies common security misconfigurations, information leakage, and header-related best practice issues.

---

✨ Features

HTTP Request Engine

• GET and HEAD request support
• Configurable request timeout
• Redirect support
• Retry mechanism for temporary failures
• Multiple URL scanning
• Parallel scanning

Security Analysis

Detects missing security headers including:

• Content-Security-Policy (CSP)
• Strict-Transport-Security (HSTS)
• X-Frame-Options
• X-Content-Type-Options

Information Disclosure Detection

Checks for exposed:

• Server
• X-Powered-By

CORS Analysis

Detects:

• Access-Control-Allow-Origin: *

Performance Checks

Checks:

• Cache-Control

Reports

• Beautiful Rich CLI output
• JSON report export
• Severity levels
• Recommendations

---

Installation

From Source

git clone https://github.com/heyshreee/argus-header.git

cd argus-header

python -m venv .venv

source .venv/bin/activate

Windows

.venv\Scripts\activate

Install

pip install -e .

---

Verify Installation

argus-header --version

Expected output

argus-header 0.5.0

---

Usage

Basic scan

argus-header https://example.com

HEAD request

argus-header https://example.com --method HEAD

Custom timeout

argus-header https://example.com --timeout 5

Multiple URLs

argus-header https://google.com https://github.com --parallel

Disable redirects

argus-header https://example.com --no-redirect

Export JSON

argus-header https://example.com --json report.json

Help

argus-header --help

---

Command Line Options

Option	Description
--method	HTTP Method (GET / HEAD)
--timeout	Request timeout
--parallel	Scan multiple URLs concurrently
--json FILE	Save report as JSON
--no-redirect	Disable redirect following
--verbose	Verbose output
--version	Display version
--help	Show help

---

Example Output

Target
https://example.com

Status
200

Headers Found
18

HIGH
Missing Content-Security-Policy

HIGH
Missing Strict-Transport-Security

MEDIUM
X-Powered-By Header Exposed

LOW
Missing Cache-Control

---

Project Structure

argus-header/

src/
└── argus_header/
    ├── __init__.py
    ├── cli.py
    ├── requester.py
    ├── analyzer.py
    ├── reporter.py
    └── utils.py

tests/

README.md
LICENSE
pyproject.toml

---

Current Checks

Security Headers

• Content-Security-Policy
• Strict-Transport-Security
• X-Frame-Options
• X-Content-Type-Options

Information Leakage

• Server
• X-Powered-By

CORS

• Wildcard Access-Control-Allow-Origin

Performance

• Cache-Control

---

Roadmap

v0.6.0

• Security score
• Grade (A–F)
• Cookie analysis
• CSP validation
• HSTS validation

v0.7.0

• HTML reports
• Markdown reports
• Response time
• Redirect chain
• HTTP version display

v0.8.0

• Unit tests
• GitHub Actions
• Documentation improvements
• Better architecture

v0.9.0

• TLS inspection
• Certificate analysis
• HTTP/2 detection
• Advanced CORS analysis

v1.0.0

• Stable public release
• Complete security analysis
• Production-ready documentation
• Comprehensive testing

---

Development

Clone

git clone https://github.com/heyshreee/argus-header.git

Install development version

pip install -e .

Run

argus-header https://example.com

---

Contributing

Contributions are welcome.

1. Fork the repository
2. Create a feature branch

git checkout -b feature/my-feature

3. Commit

git commit -m "feat: add awesome feature"

4. Push

git push origin feature/my-feature

5. Open a Pull Request

---

License

Released under the MIT License.

See LICENSE for details.

---

Author

Sriram

GitHub

https://github.com/heyshreee

---

Disclaimer

Argus Header is intended for defensive security, security auditing, learning, and authorized penetration testing only.

Only scan systems that you own or have explicit permission to assess.