dmosk / sitechecker

← जाँच पर वापस

sitechecker — पद्धति

Passive GET/HEAD only. Level 1 is public hygiene; level 2 probes sensitive paths after ownership proof. This is a baseline, not a penetration test.

Score starts at 100. Fail deductions: critical −30, high −12, medium −5, low −2, info 0. Warn subtracts half. Any critical finding caps the grade at D. Grades: A ≥90, B 80–89, C 65–79, D 50–64, F below 50.

ID जाँच समूह गंभीरता स्तर
H1 HSTS is missing or too weak हेडर उच्च L1
H2 Content-Security-Policy is missing or too loose हेडर उच्च L1
H3 Clickjacking protection is missing हेडर मध्यम L1
H4 MIME sniffing is not blocked हेडर मध्यम L1
H5 Referrer-Policy is not set हेडर निम्न L1
H6 Permissions-Policy is not set हेडर निम्न L1
H7 Server software versions are exposed हेडर निम्न L1
H8 Dangerous CORS combination हेडर उच्च L1
T1 HTTP does not redirect to HTTPS TLS उच्च L1
T2 HTTPS is unavailable or broken TLS गंभीर L1
T3 TLS version is outdated TLS उच्च L1
T4 Weak TLS ciphers detected TLS उच्च L1
T5 Mixed content on the page TLS मध्यम L1
T6 HTTP/2 is not offered TLS जानकारी L1
C1 Cookies without the Secure flag कुकीज़ उच्च L1
C2 Cookies without HttpOnly कुकीज़ उच्च L1
C3 Cookies without SameSite कुकीज़ मध्यम L1
C4 Cookie name prefixes are unused कुकीज़ जानकारी L1
F1 Git repository is publicly readable फ़ाइलें गंभीर L2
F2 Environment or config backups are reachable फ़ाइलें गंभीर L2
F3 Backup archives or SQL dumps are public फ़ाइलें गंभीर L2
F4 Diagnostic pages are exposed फ़ाइलें उच्च L2
F5 Directory listing is enabled फ़ाइलें मध्यम L2
F6 Database admin panels look public फ़ाइलें मध्यम L2
F7 security.txt is missing फ़ाइलें जानकारी L1
S1 Public technology fingerprint सॉफ़्टवेयर जानकारी L1
S2 Possibly outdated software सॉफ़्टवेयर उच्च L1
S3 Sensitive paths look exposed सॉफ़्टवेयर मध्यम L1
S4 Subresource Integrity is missing सॉफ़्टवेयर निम्न L1
D1 SPF record is missing or unsafe DNS और मेल मध्यम L1
D2 DKIM selectors not found DNS और मेल जानकारी L1
D3 DMARC is missing or too weak DNS और मेल मध्यम L1
D4 DNSSEC status DNS और मेल जानकारी L1
D5 CAA records DNS और मेल जानकारी L1
D6 Internal or risky DNS targets DNS और मेल उच्च L1