trailofbits/twa

Issues

• More .well-known checks

  #72 opened 5 years ago by woodruffw
  5

• Feature-Policy is now Permissions-Policy

  #91 opened a year ago by woodruffw
  4

• Fix docs build + deployment

  #90 opened 2 years ago by woodruffw
  0

• Github Page Release Web Page UI Revamp

  #86 opened 3 years ago by abhishek-rabidas
  5

• WAF detection

  #69 opened 5 years ago by woodruffw
  7

• Add more ports to stage 7

  #80 opened 4 years ago by woodruffw
  7

• Support more Cross-Origin headers

  #76 opened 4 years ago by woodruffw
  2

• Add a flag to only show certain audit conditions.

  #83 opened 4 years ago by GatewayBit
  2

• Access-Control-* headers

  #55 opened 4 years ago by woodruffw
  6

• Wiki pages for each TWA-XXYY code

  #40 opened 4 years ago by woodruffw
  11

• Add an option to disable port scans

  #75 opened 4 years ago by woodruffw
  2

• Switch to GitHub Actions

  #70 opened 5 years ago by woodruffw
  0

• Add a test for CSV output sanity

  #65 opened 5 years ago by woodruffw
  0

• Manpage for 1.9.0 still shows version 1.8.0

  #67 opened 5 years ago by Avaq
  1

• Inconsistent output between 'twa' and 'twa --help'

  #66 opened 5 years ago by Avaq
  1

• Integration with testssl.sh

  #52 opened 5 years ago by woodruffw
  2

• Expect-CT checks

  #58 opened 5 years ago by woodruffw
  2

• Cookie prefix checks

  #57 opened 5 years ago by woodruffw
  2

• SameSite checks for cookies

  #56 opened 5 years ago by woodruffw
  3

• Curious about google example

  #8 opened 6 years ago by luxe
  4

• security.txt checks

  #53 opened 6 years ago by woodruffw
  0

• Should CAA check recurse?

  #50 opened 6 years ago by AndyA
  2

• Don't count 301s as serving forbidden content

  #48 opened 6 years ago by petdance
  4

• Custom user agent

  #49 opened 6 years ago by AyrA
  2

• Stage 4 improvements

  #46 opened 6 years ago by woodruffw
  0

• Disable "www" checks for subdomains

  #45 opened 6 years ago by sobolevn
  3

• CAA test reports "Malformed CAA record?" for some domains that lack CAA records

  #39 opened 6 years ago by vanaltj
  3

• Redirection test should recognize 308s

  #42 opened 6 years ago by woodruffw
  1

• Manpage for 1.6.0 still shows version 1.5.1

  #41 opened 6 years ago by xeji
  1

• Formal codes for FATALs, FAILs, and MEHs

  #33 opened 6 years ago by woodruffw
  0

• Cookie checks

  #37 opened 6 years ago by woodruffw
  4

• Port some lovetz checks over

  #25 opened 6 years ago by woodruffw
  1

• Be a little bit clever about robots.txt

  #28 opened 6 years ago by woodruffw
  0

• Add a CSV output format

  #32 opened 6 years ago by woodruffw
  0

• Check for open ports

  #18 opened 6 years ago by mbkv
  9

• Add a check for an `.env` file in the webroot

  #30 opened 6 years ago by woodruffw
  1

• http/2 false positives?

  #20 opened 6 years ago by bortels
  8

• Use --max-connect and --max-time

  #16 opened 6 years ago by dolevf
  2

• OSX Bash error twa:212

  #1 opened 6 years ago by rwhitworth
  2

• Incorrect MEH rating on the Strict-Transport-Security test

  #4 opened 6 years ago by Ippo343
  1

• I am receiving './twa: line 212: ${xfo,,}: bad substitution' on OS X.

  #3 opened 6 years ago by windbender
  1

• Bad substitution error

  #6 opened 6 years ago by ghoffart
  1

• add docs.md, contribuitng.md, etc.

  #13 opened 6 years ago by quenbyako
  2

• No ,, operator in Bash ver. <4 causes minor issues when using twa on macOS

  #7 opened 6 years ago by bl4de
  3

• Add a versioning scheme

  #9 opened 6 years ago by suve
  1

• error on Line 212

  #11 opened 6 years ago by ElwoodBlues99
  1