🔍 Nmap HTTP Security Scripts

A collection of advanced Nmap NSE scripts for deep web security analysis.

Included Scripts

1. http-security-header-analyzer.nse

Performs deep analysis of HTTP security headers (CSP, HSTS, CORP, COOP, etc.) and detects subtle misconfigurations.

2. http-request-smuggling-detector.nse

Detects CL.TE, TE.CL, header obfuscation, CRLF injection, and desync vulnerabilities using advanced techniques.

3. http-intelligent-fuzzer.nse

An endpoint-aware HTTP vulnerability fuzzer that tests for SSTI, NoSQL injection, prototype pollution, XXE, and more.

Usage

nmap -p 80,443 <target> --script=./scripts/http-security-header-analyzer.nse

Disclaimer

These scripts are intended for authorized testing only.