Website Search

Enter a URL to extract the HTTP headers from the website. We'll check the URL and provide a list of HTTP headers.

Input Enter a specific URL for investigation.

Operation We'll initiate an HTTP GET request to the target website and scrutinize the response headers returned by the server.

Result You'll receive a comprehensive list of HTTP headers retrieved from the specified website.

API Overview | 1,000 free daily requests

Make a HTTP POST request (content-type application/json) to https://srcport.com/api/free/[module]

POST

Add a Authorization: Bearer [token] header to the request including your personal API token viewable in your account profile.

Header

The HTTP POST request payload should contain a JSON formatted prompt and options field. The prompt field is typically the target of the scan, e.g., 'example.com'. The buttons below can be used to view the available options.

The prompt is the main searchterm provided to the tool. This needs to be in a format required by the tool otherwise an error may be returned. For example some tools may require URLs while others may require IP addresses.

Some options may be required while others are optional. If there are no options, an empty object should be provided.

The default API key is provided as an example only. This will not work in your own applications. Register for a free account to get an API key.

Example CURL Request

HTTP Headers

The HTTP Headers tool extracts HTTP headers from a target website or web server, providing users with a list of HTTP headers and their values. It also provides a header browser, which is a visual representation of the HTTP headers, enabling users to identify the headers and their values. The tool provides valuable insights into the HTTP headers used by the website, aiding in security assessments, vulnerability detection, and reconnaissance tasks.

Low Risk HTTP Headers

Request

A HTTP request header is sent by a client to a server and includes fields like User-Agent, Host, and Accept, which might be of use in cybersecurity to detect malicious requests, fraud, or unauthorized access.

Response

A HTTP response header is sent by the server to the client and includes fields such as Set-Cookie, Content-Security-Policy, and X-Frame-Options, which can help in implementing security measures like authentication, data integrity checks, and prevention against cross-site scripting or clickjacking attacks.

Server Field

The Server field in an HTTP response header provides information about the software used by the origin server, including the name and version of the server software. In the context of cybersecurity, this information might be used by attackers to identify potential vulnerabilities specific to the server software version, so it's often recommended to minimize or obfuscate this information to reduce the potential attack surface.