Objective

• Verify the HTTP Response headers of your Web Site/Apps.

How to

• Use your intercepting proxy to browse through the entire site and analyse the response headers.
• Use an online scanning tool like https://securityheaders.io/
• Scan the website with nikto while capturing the traffic with tcpdump or wireshark.
  (you can import the captured network traffic in BurpSuite)

Common Findings

• Excessive headers (server type and version leakage through headers)
• Content-Type header missing
• X-Frame-Options header is not set
• Strict-Transport-Security
• Content-Security-Policy
• Public-Key-Pins
• X-XSS-Protection
• X-Content-Type-options

References

• OWASP Secure Headers Project
• Test HTTP Strict Transport Security (OTG-CONFIG-007)
• Fingerprint Web Application Framework (OTG-INFO-008) – HTTP Headers