View Website Headers

🔍

About Website Header Viewer

This tool allows you to view server headers for any page on a website. Viewing server headers allows one to identify not only information that is being sent by the server to the client but also the ability to find vulneribilities in their infrastureure.

Headers Description

HTTP headers let the client and the server pass additional information with an HTTP request or response. An HTTP header consists of its case-insensitive name followed by a colon (:), then by its value. Whitespace before the value is ignored.

Following is a list of most common header organized by categories.

  • Authentication
  • WWW-Authenticate
  • Authorization
  • Proxy-Authenticate
  • Proxy-Authorization
  • Caching
  • Age
  • Cache-Control
  • Clear-Site-Data
  • Expires
  • Pragma
  • Conditionals
  • Last Modified
  • ETag
  • If-Modified-Since
  • If-Unmodified-Since
  • Vary
  • Connection Management
  • Connection
  • Keep-Alive
  • Content Negotiation
  • Accept
  • Accept-Encoding
  • Accept-Language
  • Expires
  • Pragma
  • Cookies
  • Cookie
  • Set-Cookie
  • Clear-Site-Data
  • Expires
  • Pragma
  • CORS
  • Access-Control-Allow-Origin
  • Access-Control-Allow-Headers
  • Access-Control-Expose-Headers
  • Access-Control-Request-Method
  • Origin
  • Message Body
  • Content-Length
  • Content-Type
  • Content-Encoding
  • Content-Language
  • Content-Location
  • Proxies
  • Forwarded
  • X-Forwarded-For
  • X-Forwarded-Host
  • X-Forwarded-Proto
  • Via
  • Response Context
  • Allow
  • Server
*Complete list of common headers and categories can be found at Mozilla Developer site