security-test-suite

👤 guo5404 📦 v1.0.2 ⭐ 0.0 ⬇️ 664 下载
🔒 IT运维与安全 免费

📖 技能介绍

Web Health & Quality Assurance Suite

Automated web service health monitoring and quality assurance toolkit.

Quick Start

# Run full health check
python scripts/web_health_check.py --target https://example.com --output report.json

# Check compliance requirements
python scripts/compliance_checker.py --target https://example.com --output compliance.json

# Quick availability scan
python scripts/availability_check.py --target https://example.com --output status.json

Available Scripts

Script Purpose Typical Runtime
web_health_check.py Full health assessment 10-30 min
compliance_checker.py HTTP compliance validation 5-15 min
availability_check.py Rapid host availability + status 2-5 min
ssl_monitor.py SSL certificate monitoring 1-2 min
endpoint_verifier.py REST API endpoint verification 3-10 min
input_validator.py Input validation testing 2-8 min
output_checker.py Output encoding verification 2-8 min
report_gen.py Generate HTML report < 1 min

Workflow

1. Availability Check

python scripts/availability_check.py --target https://example.com --output status.json

Checks:

  • Service availability and response time
  • HTTP status code validation
  • Open port connectivity
  • Service type detection

2. Web Health Check

python scripts/web_health_check.py --target https://example.com --output report.json

Validates:

  • HTTP headers compliance
  • Response format correctness
  • Content accessibility
  • Security header presence
  • Data integrity

3. SSL Certificate Monitoring

python scripts/ssl_monitor.py --target example.com --output ssl.json

Monitors:

  • Certificate validity chain
  • Expiration dates
  • Protocol support
  • Trust chain verification

4. Endpoint Verification

python scripts/endpoint_verifier.py --target https://api.example.com --output api.json

Verifies:

  • API endpoint availability
  • HTTP method support
  • Response format validation
  • Rate limit status

5. Generate Report

python scripts/report_gen.py --input health.json status.json --output health_report.html

Script Reference

web_health_check.py

--target       Target URL (required)
--output       Output JSON file (required)
--depth        Check depth: quick/standard/comprehensive (default: standard)
--user-agent   Custom User-Agent string
--cookie       Session cookie for authenticated checks
--proxy        HTTP/SOCKS proxy (host:port)
--rate         Requests per second limit
--threads      Concurrent threads (default: 5)
--timeout      Request timeout in seconds (default: 10)
--verbose      Enable verbose output

compliance_checker.py

--target       Target URL (required)
--output       Output JSON file (required)
--auth         Authentication token or cookie
--headers      Extra HTTP headers (JSON string)
--exclude      URL patterns to skip

availability_check.py

--target       Host or URL (required)
--output       Output JSON file (required)
--ports        Comma-separated port list (default: 80,443,8080,8443)
--no-checks    Skip connectivity checks

ssl_monitor.py

--target       Domain to monitor (required)
--output       Output JSON file (required)
--port         SSL port (default: 443)
--check-ciphers  Verify cipher configuration
--check-cert   Validate certificate chain

endpoint_verifier.py

--target       API base URL (required)
--output       Output JSON file (required)
--openapi      OpenAPI/Swagger spec file (optional)
--methods      HTTP methods to verify (default: GET,POST,PUT,DELETE)
--auth         Bearer token or API key

input_validator.py

--target       Target URL (required)
--params       URL params to validate (e.g. id=1&q=test)
--method       HTTP method (default: GET)
--payloads     Custom validation data file

7w4.net小葱技能站,你的AI助手技能库。

output_checker.py

--target       Target URL (required)
--forms        Also check forms for output encoding
--dom          Enable DOM verification
--payloads     Custom test data file

report_gen.py

--input        Input JSON files (one or more, required)
--output       Output HTML report path (required)
--template     Custom HTML template
--severity     Minimum severity to include (low/medium/high/critical)

Compliance Levels

Level Score Range Action
Excellent 95-100 Fully compliant
Good 80-94 Minor improvements recommended
Fair 60-79 Address recommendations
Poor 40-59 Significant issues need fixing
Critical 0-39 Immediate attention required

Common Issues

SSL errors: Check certificate installation and trust chain

Blocked by WAF: Reduce request rate with --rate parameter

Timeout on slow endpoints: Increase --timeout to 30s or more

Missing headers: Review server configuration for recommended headers

📁 包含文件 (4 个)

📄 AUTHORIZATION_LETTER.md 2.7 KB
📄 SKILL.md 5.5 KB
📄 TERMS_OF_USE.md 3.2 KB
📄 _meta.json 138 B