Packages and Binaries:

humble

This package contains an humble, and fast, security-oriented HTTP headers analyzer.

Installed size: 284 KB
How to install: sudo apt install humble

humble

root@kali:~# humble -h
usage: humble.py [-h] [-a] [-b] [-df] [-e [TESTSSL_PATH]]
                 [-f [FINGERPRINT_TERM]] [-g] [-grd] [-l {es}] [-lic]
                 [-o {csv,html,json,pdf,txt}] [-op OUTPUT_PATH] [-r]
                 [-s [SKIP_HEADERS ...]] [-u URL] [-ua USER_AGENT] [-v]

'humble' (HTTP Headers Analyzer) | https://github.com/rfc-st/humble | v.2024-10-18

options:
  -h, --help                  show this help message and exit
  -a                          Shows statistics of the performed analysis; will
                              be global if the '-u' parameter is omitted
  -b                          Shows overall findings; if this parameter is
                              omitted detailed ones will be shown
  -df                         Do not follow redirects; if this parameter is
                              omitted the last redirection will be the one
                              analyzed
  -e [TESTSSL_PATH]           Shows TLS/SSL checks; requires the PATH of
                              https://testssl.sh/
  -f [FINGERPRINT_TERM]       Shows fingerprint statistics; will be the Top 20
                              if 'FINGERPRINT_TERM', e.g. 'Google', is omitted
  -g                          Shows guidelines for enabling security HTTP
                              response headers on popular servers/services
  -grd                        Shows the checks to grade an analysis, along
                              with advice for improvement
  -l {es}                     Defines the language for displaying analysis,
                              errors and messages; will be English if this
                              parameter is omitted
  -lic                        Shows the license for 'humble', along with
                              permissions, limitations and conditions.
  -o {csv,html,json,pdf,txt}  Exports analysis to 'humble_scheme_URL_port_yyyy
                              mmdd_hhmmss_language.ext' file; csv/json will
                              have a brief analysis
  -op OUTPUT_PATH             Exports analysis to 'OUTPUT_PATH'; if this
                              parameter is omitted the PATH of 'humble.py'
                              will be used
  -r                          Shows HTTP response headers and a detailed
                              analysis; '-b' parameter will take priority
  -s [SKIP_HEADERS ...]       Skips 'deprecated/insecure' and 'missing' checks
                              for the indicated 'SKIP_HEADERS' (separated by
                              spaces)
  -u URL                      Scheme, host and port to analyze. E.g.
                              https://google.com
  -ua USER_AGENT              User-Agent ID from 'additional/user_agents.txt'
                              file to use. '0' will show all and '1' is the
                              default
  -v, --version               Checks for updates at https://github.com/rfc-
                              st/humble

examples:
  -u URL -b                   Analyzes the URL and reports overall findings
  -u URL -b -o csv            Analyzes the URL and exports overall findings to CSV format
  -u URL -l es                Analyzes the URL and reports (in Spanish) detailed findings
  -u URL -o pdf               Analyzes the URL and exports detailed findings to PDF format
  -u URL -r                   Analyzes the URL and reports detailed findings along with HTTP response headers
  -u URL -s ETag NEL          Analyzes the URL and skips 'deprecated/insecure' and 'missing' checks for 'ETag' and 'NEL' headers
  -u URL -ua 4                Analyzes the URL using the fourth User-Agent of 'additional/user_agents.txt' file
  -a -l es                    Shows statistics (in Spanish) of the analysis performed against all URLs
  -f Google                   Shows HTTP fingerprint headers related to the term 'Google'
  -u URL -a                   Shows statistics of the analysis performed against the URL