master/tools/sysadmin-devops/https-web-services/security-hardening.md

10 lines
933 B
Markdown

**Web Security, Hardening & Scanning Tools**
Utilities for hardening configs, scanning headers/SSL, and basic web recon (dir busting).
|Name|Vendor/Webpage|GitHub Repo|Brief Description|Tags|Latest Commit|
|---|---|---|---|---|---|
|h2t|—|[gildasio/h2t](https://github.com/gildasio/h2t)|Simple tool to help harden websites (HTTP/2 focus).|[http, hardening, security, cli]|~low activity|
|ssllabs-scan|—|[ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan)|CLI client for Qualys SSL Labs API to scan SSL/TLS configs.|[ssl, scan, security, api, go]|~2025|
|http-observatory|—|[mozilla/http-observatory](https://github.com/mozilla/http-observatory)|CLI version of Mozilla HTTP Observatory for security headers scan.|[security, headers, observatory, python]|~2025|
|gobuster|—|[OJ/gobuster](https://github.com/OJ/gobuster)|Directory/file & DNS busting tool written in Go.|[busting, directory, dns, recon, go]|~2026|