All notable changes to this project will be documented in this file.
- Header udpated to include User-Agent set to Windows Chrome Default.
- Error in sites requiring user agent.
- Added warning for STS header
- Custom headers are now enabled in requests.
python guillotine.py -t https://www.domain.com --headers "<header>:<value>|<header2>:<value2>|..."
- Changelog File.
- Included status code on the base information of the assessment.
- Warning on some security headers.
python guillotine.py -t https://www.domain.com --warnings
- Added verification for "Permissions-Policy" header.
- Verbose mode now enables all of the optional information.
- Basic Authentication support
python guillotine.py -t https://www.domain.com --basic <username>:<password>
- NTLM Authentication support
python guillotine.py -t https://www.domain.com --ntlm [<domain>\\]<username>:<password>
- Header version comparison is now an option.
python guillotine.py -t https://www.domain.com --compare-versions
- The versions of the headers now are trunked to a 38 characters.
- Header Version comparison with response.