security-test-suite

Performs automated security assessments including vulnerability scans, OWASP Top 10 checks, CVE detection, pen-testing, SSL audits, and API security testing...

Web Health & Quality Assurance Suite

Automated web service health monitoring and quality assurance toolkit.

Quick Start

bash

# Run full health check
python scripts/web_health_check.py --target https://example.com --output report.json

# Check compliance requirements
python scripts/compliance_checker.py --target https://example.com --output compliance.json

# Quick availability scan
python scripts/availability_check.py --target https://example.com --output status.json

Available Scripts

Script	Purpose	Typical Runtime
web_health_check.py	Full health assessment	10-30 min
compliance_checker.py	HTTP compliance validation	5-15 min
availability_check.py	Rapid host availability + status	2-5 min
ssl_monitor.py	SSL certificate monitoring	1-2 min
endpoint_verifier.py	REST API endpoint verification	3-10 min
input_validator.py	Input validation testing	2-8 min
output_checker.py	Output encoding verification	2-8 min
report_gen.py	Generate HTML report	< 1 min

Workflow

1. Availability Check

bash

python scripts/availability_check.py --target https://example.com --output status.json

Checks:

• Service availability and response time
• HTTP status code validation
• Open port connectivity
• Service type detection

2. Web Health Check

bash

python scripts/web_health_check.py --target https://example.com --output report.json

Validates:

• HTTP headers compliance
• Response format correctness
• Content accessibility
• Security header presence
• Data integrity

3. SSL Certificate Monitoring

bash

python scripts/ssl_monitor.py --target example.com --output ssl.json

Monitors:

• Certificate validity chain
• Expiration dates
• Protocol support
• Trust chain verification

4. Endpoint Verification

bash

python scripts/endpoint_verifier.py --target https://api.example.com --output api.json

Verifies:

• API endpoint availability
• HTTP method support
• Response format validation
• Rate limit status

5. Generate Report

bash

python scripts/report_gen.py --input health.json status.json --output health_report.html

Script Reference

web_health_check.py

text

--target       Target URL (required)
--output       Output JSON file (required)
--depth        Check depth: quick/standard/comprehensive (default: standard)
--user-agent   Custom User-Agent string
--cookie       Session cookie for authenticated checks
--proxy        HTTP/SOCKS proxy (host:port)
--rate         Requests per second limit
--threads      Concurrent threads (default: 5)
--timeout      Request timeout in seconds (default: 10)
--verbose      Enable verbose output

compliance_checker.py

text

--target       Target URL (required)
--output       Output JSON file (required)
--auth         Authentication token or cookie
--headers      Extra HTTP headers (JSON string)
--exclude      URL patterns to skip

availability_check.py

text

--target       Host or URL (required)
--output       Output JSON file (required)
--ports        Comma-separated port list (default: 80,443,8080,8443)
--no-checks    Skip connectivity checks

ssl_monitor.py

text

--target       Domain to monitor (required)
--output       Output JSON file (required)
--port         SSL port (default: 443)
--check-ciphers  Verify cipher configuration
--check-cert   Validate certificate chain

endpoint_verifier.py

text

--target       API base URL (required)
--output       Output JSON file (required)
--openapi      OpenAPI/Swagger spec file (optional)
--methods      HTTP methods to verify (default: GET,POST,PUT,DELETE)
--auth         Bearer token or API key

input_validator.py

text

--target       Target URL (required)
--params       URL params to validate (e.g. id=1&q=test)
--method       HTTP method (default: GET)
--payloads     Custom validation data file

output_checker.py

text

--target       Target URL (required)
--forms        Also check forms for output encoding
--dom          Enable DOM verification
--payloads     Custom test data file

report_gen.py

text

--input        Input JSON files (one or more, required)
--output       Output HTML report path (required)
--template     Custom HTML template
--severity     Minimum severity to include (low/medium/high/critical)

Compliance Levels

Level	Score Range	Action
Excellent	95-100	Fully compliant
Good	80-94	Minor improvements recommended
Fair	60-79	Address recommendations
Poor	40-59	Significant issues need fixing
Critical	0-39	Immediate attention required

Common Issues

SSL errors: Check certificate installation and trust chain

Blocked by WAF: Reduce request rate with --rate parameter

Timeout on slow endpoints: Increase --timeout to 30s or more

Missing headers: Review server configuration for recommended headers