mozilla / http-observatory

Mozilla HTTP Observatory
https://observatory.mozilla.org/
Mozilla Public License 2.0
1.85k stars 168 forks source link

Not Working for localhost website #459

Open Engineerumair opened 2 years ago

Engineerumair commented 2 years ago

Hello, I get the error "Cannot scan non-standard ports" as I need to scan the localhost, I have also tried to install it on my windows machine using pip command but there also I am not able to scan on localhost website.

httpobs-cli $httpobs-local-scan --http-port 8080 --https-port 8443 --path '/foo/bar' \ --cookies '{"foo": "bar"}' --headers '{"X-Foo": "bar"}' --no-verify mozilla.org

usage: httpobs-cli [options] host httpobs-cli: error: unrecognized arguments: --http-port 8080 --https-port 8443 --path '/foo/bar' \ --cookies '{foo: bar}' --headers '{X-Foo: bar}' --no-verify mozilla.org

can someone please suggest how could I scan the following localhost app:

https://localhost:44315/

floatingatoll commented 2 years ago

httpobs-cli is querying the scanner website, which restricts this function to publicly-accessible hosts on 80/443 only.

In the README, there are instructions on using the local scanner commands (instead of httpobs-cli) to do this. That local scanner will originating the scans from your personal machine and allow you to select other ports and private hostnames.

On Thu, Dec 16, 2021 at 04:25 Engineerumair @.***> wrote:

Hello, I get the error "Cannot scan non-standard ports" as I need to scan the localhost, I have also tried to install it on my windows machine using pip command but there also I am not able to scan on localhost website.

httpobs-cli $httpobs-local-scan --http-port 8080 --https-port 8443 --path '/foo/bar' \ --cookies '{"foo": "bar"}' --headers '{"X-Foo": "bar"}' --no-verify mozilla.org

usage: httpobs-cli [options] host httpobs-cli: error: unrecognized arguments: --http-port 8080 --https-port 8443 --path '/foo/bar' \ --cookies '{foo: bar}' --headers '{X-Foo: bar}' --no-verify mozilla.org

can someone please suggest how could I scan the following localhost app:

https://localhost:44315/

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/mozilla/http-observatory/issues/459, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAAWUDFK62R52XE7WNH4MSTURHLERANCNFSM5KGFS4SA .

dalf commented 2 years ago

Note: the local scanner returns a different score, see https://github.com/mozilla/http-observatory/issues/428#issuecomment-676575192