security-test-suite（安全测试套件）

Web Health & Quality Assurance Suite

Automated web service health monitoring and quality assurance toolkit.

Quick Start

# Run full health check
python scripts/web_health_check.py --target https://example.com --output report.json

# Check compliance requirements
python scripts/compliance_checker.py --target https://example.com --output compliance.json

# Quick availability scan
python scripts/availability_check.py --target https://example.com --output status.json

Available Scripts

Workflow

1. Availability Check

python scripts/availability_check.py --target https://example.com --output status.json

Checks:

• Service availability and response time
• HTTP status code validation
• Open port connectivity
• Service type detection

2. Web Health Check

python scripts/web_health_check.py --target https://example.com --output report.json

Validates:

• HTTP headers compliance
• Response format correctness
• Content accessibility
• Security header presence
• Data integrity

3. SSL Certificate Monitoring

python scripts/ssl_monitor.py --target example.com --output ssl.json

Monitors:

• Certificate validity chain
• Expiration dates
• Protocol support
• Trust chain verification

4. Endpoint Verification

python scripts/endpoint_verifier.py --target https://api.example.com --output api.json

Verifies:

• API endpoint availability
• HTTP method support
• Response format validation
• Rate limit status

5. Generate Report

python scripts/report_gen.py --input health.json status.json --output health_report.html

Script Reference

web_health_check.py

--target       Target URL (required)
--output       Output JSON file (required)
--depth        Check depth: quick/standard/comprehensive (default: standard)
--user-agent   Custom User-Agent string
--cookie       Session cookie for authenticated checks
--proxy        HTTP/SOCKS proxy (host:port)
--rate         Requests per second limit
--threads      Concurrent threads (default: 5)
--timeout      Request timeout in seconds (default: 10)
--verbose      Enable verbose output

compliance_checker.py

--target       Target URL (required)
--output       Output JSON file (required)
--auth         Authentication token or cookie
--headers      Extra HTTP headers (JSON string)
--exclude      URL patterns to skip

availability_check.py

--target       Host or URL (required)
--output       Output JSON file (required)
--ports        Comma-separated port list (default: 80,443,8080,8443)
--no-checks    Skip connectivity checks

ssl_monitor.py

--target       Domain to monitor (required)
--output       Output JSON file (required)
--port         SSL port (default: 443)
--check-ciphers  Verify cipher configuration
--check-cert   Validate certificate chain

endpoint_verifier.py

--target       API base URL (required)
--output       Output JSON file (required)
--openapi      OpenAPI/Swagger spec file (optional)
--methods      HTTP methods to verify (default: GET,POST,PUT,DELETE)
--auth         Bearer token or API key

input_validator.py

--target       Target URL (required)
--params       URL params to validate (e.g. id=1&q=test)
--method       HTTP method (default: GET)
--payloads     Custom validation data file

output_checker.py

--target       Target URL (required)
--forms        Also check forms for output encoding
--dom          Enable DOM verification
--payloads     Custom test data file

report_gen.py

--input        Input JSON files (one or more, required)
--output       Output HTML report path (required)
--template     Custom HTML template
--severity     Minimum severity to include (low/medium/high/critical)

Compliance Levels

Common Issues

SSL errors: Check certificate installation and trust chain

Blocked by WAF: Reduce request rate with --rate parameter

Timeout on slow endpoints: Increase --timeout to 30s or more

Missing headers: Review server configuration for recommended headers