Metadata-Version: 2.4
Name: argus-header
Version: 0.5.0
Summary: A Python CLI tool for analyzing HTTP response headers and identifying security issues.
Author-email: Sriram <sriram060106@gmail.com>
License: MIT License
        
        Copyright (c) 2025 sriram
        
        Permission is hereby granted, free of charge, to any person obtaining a copy
        of this software and associated documentation files (the "Software"), to deal
        in the Software without restriction, including without limitation the rights
        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
        copies of the Software, and to permit persons to whom the Software is
        furnished to do so, subject to the following conditions:
        
        The above copyright notice and this permission notice shall be included in all
        copies or substantial portions of the Software.
        
        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
        SOFTWARE.
        
Project-URL: Homepage, https://github.com/heyshreee/argus-header
Project-URL: Repository, https://github.com/heyshreee/argus-header
Project-URL: Issues, https://github.com/heyshreee/argus-header/issues
Keywords: http,https,headers,security,cybersecurity,cli,pentesting,web-security,header-analysis
Classifier: Development Status :: 4 - Beta
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: OSI Approved :: MIT License
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.9
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Internet :: WWW/HTTP
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Libraries
Requires-Python: >=3.9
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: requests>=2.32.0
Requires-Dist: rich>=13.7.0
Dynamic: license-file

# 🛡️ Argus Header

> Fast, lightweight HTTP security header analyzer built for developers, security engineers, and penetration testers.

![Python](https://img.shields.io/badge/Python-3.9+-blue.svg)
![Version](https://img.shields.io/badge/version-v0.5.0-orange.svg)
![License](https://img.shields.io/badge/license-MIT-green.svg)

Argus Header is a command-line tool that analyzes HTTP response headers and identifies common security misconfigurations, information leakage, and header-related best practice issues.

---

## ✨ Features

### HTTP Request Engine

- GET and HEAD request support
- Configurable request timeout
- Redirect support
- Retry mechanism for temporary failures
- Multiple URL scanning
- Parallel scanning

### Security Analysis

Detects missing security headers including:

- Content-Security-Policy (CSP)
- Strict-Transport-Security (HSTS)
- X-Frame-Options
- X-Content-Type-Options

### Information Disclosure Detection

Checks for exposed:

- Server
- X-Powered-By

### CORS Analysis

Detects:

- Access-Control-Allow-Origin: *

### Performance Checks

Checks:

- Cache-Control

### Reports

- Beautiful Rich CLI output
- JSON report export
- Severity levels
- Recommendations

---

# Installation

## From Source

```bash
git clone https://github.com/heyshreee/argus-header.git

cd argus-header

python -m venv .venv

source .venv/bin/activate
```

Windows

```powershell
.venv\Scripts\activate
```

Install

```bash
pip install -e .
```

---

## Verify Installation

```bash
argus-header --version
```

Expected output

```text
argus-header 0.5.0
```

---

# Usage

Basic scan

```bash
argus-header https://example.com
```

HEAD request

```bash
argus-header https://example.com --method HEAD
```

Custom timeout

```bash
argus-header https://example.com --timeout 5
```

Multiple URLs

```bash
argus-header https://google.com https://github.com --parallel
```

Disable redirects

```bash
argus-header https://example.com --no-redirect
```

Export JSON

```bash
argus-header https://example.com --json report.json
```

Help

```bash
argus-header --help
```

---

# Command Line Options

| Option | Description |
|---------|-------------|
| --method | HTTP Method (GET / HEAD) |
| --timeout | Request timeout |
| --parallel | Scan multiple URLs concurrently |
| --json FILE | Save report as JSON |
| --no-redirect | Disable redirect following |
| --verbose | Verbose output |
| --version | Display version |
| --help | Show help |

---

# Example Output

```text
Target
https://example.com

Status
200

Headers Found
18

HIGH
Missing Content-Security-Policy

HIGH
Missing Strict-Transport-Security

MEDIUM
X-Powered-By Header Exposed

LOW
Missing Cache-Control
```

---

# Project Structure

```
argus-header/

src/
└── argus_header/
    ├── __init__.py
    ├── cli.py
    ├── requester.py
    ├── analyzer.py
    ├── reporter.py
    └── utils.py

tests/

README.md
LICENSE
pyproject.toml
```

---

# Current Checks

## Security Headers

- Content-Security-Policy
- Strict-Transport-Security
- X-Frame-Options
- X-Content-Type-Options

## Information Leakage

- Server
- X-Powered-By

## CORS

- Wildcard Access-Control-Allow-Origin

## Performance

- Cache-Control

---

# Roadmap

## v0.6.0

- Security score
- Grade (A–F)
- Cookie analysis
- CSP validation
- HSTS validation

## v0.7.0

- HTML reports
- Markdown reports
- Response time
- Redirect chain
- HTTP version display

## v0.8.0

- Unit tests
- GitHub Actions
- Documentation improvements
- Better architecture

## v0.9.0

- TLS inspection
- Certificate analysis
- HTTP/2 detection
- Advanced CORS analysis

## v1.0.0

- Stable public release
- Complete security analysis
- Production-ready documentation
- Comprehensive testing

---

# Development

Clone

```bash
git clone https://github.com/heyshreee/argus-header.git
```

Install development version

```bash
pip install -e .
```

Run

```bash
argus-header https://example.com
```

---

# Contributing

Contributions are welcome.

1. Fork the repository
2. Create a feature branch

```bash
git checkout -b feature/my-feature
```

3. Commit

```bash
git commit -m "feat: add awesome feature"
```

4. Push

```bash
git push origin feature/my-feature
```

5. Open a Pull Request

---

# License

Released under the MIT License.

See LICENSE for details.

---

# Author

**Sriram**

GitHub

https://github.com/heyshreee

---

## Disclaimer

Argus Header is intended for defensive security, security auditing, learning, and authorized penetration testing only.

Only scan systems that you own or have explicit permission to assess.
