// the find
trimstray/htrace.sh
My simple Swiss Army knife for http/https troubleshooting and profiling.
htrace.sh is a Bash script that wraps curl, openssl, and a handful of external security tools (testssl.sh, nmap, ssllabs, wafw00f, subfinder) into a single CLI for HTTP/HTTPS troubleshooting. It's aimed at sysadmins and security folks who want redirect chains, header dumps, SSL details, and WAF detection without juggling five separate tools. The Docker path is the least painful way to get it running.
The redirect-chain tracing is genuinely useful — it follows each hop, shows status codes, and flags mixed-content issues along the way. Wrapping ssllabs and testssl.sh behind a single flag saves real time during audits. The Docker image means you don't have to deal with the dependency sprawl on your local machine. The modular lib/ structure (one file per capability) makes it easy to read what each scan actually does.
Last commit was late 2024 and the Travis CI badge is dead — unclear how well this tracks recent changes in its upstream tools (testssl.sh, subfinder, wafw00f all move fast). The dependency install script targets Debian 8/9 and Ubuntu 18.x, which are both EOL; running dependencies.sh on a modern system will likely fail or silently skip packages. It's pure Bash with no structured output — everything is terminal-formatted colorized text, so scripting against it or integrating it into a pipeline is painful. The external scan flags (ssllabs, observatory) fire against third-party APIs, which means scan results for internal or pre-production hosts simply don't work.