#  Headerpwn | A Fuzzer For Finding Anomalies And Analyzing How Servers Respond To Different HTTP Headers

**URL:** <https://onehack.st/t/headerpwn-a-fuzzer-for-finding-anomalies-and-analyzing-how-servers-respond-to-different-http-headers/283845>\
**Category:** Tools & Scripts\
**Tags:** tools\
**Created:** [June 2, 2024, 9:06pm UTC](https://onehack.st/t/headerpwn-a-fuzzer-for-finding-anomalies-and-analyzing-how-servers-respond-to-different-http-headers/283845 "2024-06-02T21:06:18Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Post date:** [June 2, 2024, 9:06pm UTC](https://onehack.st/t/headerpwn-a-fuzzer-for-finding-anomalies-and-analyzing-how-servers-respond-to-different-http-headers/283845/1 "2024-06-02T21:06:18Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/1/1/11325a674b3070f366a6501b2142e952c6153c49.png)

#### A fuzzer for analyzing how servers respond to different HTTP headers.

[🏗 Install](https://github.com/devanshbatham/headerpwn#install) [⛏ Usage](https://github.com/devanshbatham/headerpwn#usage) [📡 Proxying HTTP Requests](https://github.com/devanshbatham/headerpwn#proxying-requests-through-burp-suite)

[![headerpwn](https://github.com/devanshbatham/headerpwn/raw/main/static/banner.png?raw=true)](https://github.com/devanshbatham/headerpwn/blob/main/static/banner.png?raw=true)

# Install

To install `headerpwn`, run the following command:

```auto
go install github.com/devanshbatham/headerpwn@v0.0.3

```

# Usage

headerpwn allows you to test various headers on a target URL and analyze the responses. Here’s how to use the tool:

1. Provide the target URL using the `-url` flag.
2. Create a file containing the headers you want to test, one header per line. Use the `-headers` flag to specify the path to this file.

Example usage:

headerpwn -url [https://example.com](https://example.com) -headers my\_headers.txt

- Format of `my_headers.txt` should be like below:

Proxy-Authenticate: foobar Proxy-Authentication-Required: foobar Proxy-Authorization: foobar Proxy-Connection: foobar Proxy-Host: foobar Proxy-Http: foobar

## Proxying requests through Burp Suite:

Follow following steps to proxy requests through Burp Suite:

- Export Burp’s Certificate:
  - In Burp Suite, go to the “Proxy” tab.
  - Under the “Proxy Listeners” section, select the listener that is configured for `127.0.0.1:8080`
  - Click on the “Import/ Export CA Certificate” button.
  - In the certificate window, click “Export Certificate” and save the certificate file (e.g., burp.der).

- Install Burp’s Certificate:
  - Install the exported certificate as a trusted certificate on your system. How you do this depends on your operating system.
  - On Windows, you can double-click the .cer file and follow the prompts to install it in the “Trusted Root Certification Authorities” store.
  - On macOS, you can double-click the .cer file and add it to the “Keychain Access” application in the “System” keychain.
  - On Linux, you might need to copy the certificate to a trusted certificate location and configure your system to trust it.

You should be all set:

headerpwn -url [https://example.com](https://example.com) -headers my\_headers.txt -proxy 127.0.0.1:8080

[![proxy](https://github.com/devanshbatham/headerpwn/raw/main/static/proxy-cli.png?raw=true)](https://github.com/devanshbatham/headerpwn/blob/main/static/proxy-cli.png?raw=true)

[![proxy-burp](https://github.com/devanshbatham/headerpwn/raw/main/static/proxy-burp.png?raw=true)](https://github.com/devanshbatham/headerpwn/blob/main/static/proxy-burp.png?raw=true)

## Credits

The `headers.txt` file is compiled from various sources, including the [Seclists project](https://github.com/danielmiessler/SecLists). These headers are used for testing purposes and provide a variety of scenarios for analyzing how servers respond to different headers.

## GitHub:

> **[GitHub - devanshbatham/headerpwn: A fuzzer for finding anomalies and analyzing how...](https://github.com/devanshbatham/headerpwn)**
>
> A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers