1TWA(1)                           User Commands                          TWA(1)
2
3
4

NAME

6       twa - tiny web auditor with strong opinions
7
8

SYNOPSIS

10       twa [-wvcsV] DOMAIN
11
12

DESCRIPTION

14       twa  takes  a  DOMAIN  hosting  a website and performs a short security
15       audit.  It can be used to detect HTTP(S) issues, missing security head‐
16       ers, information-leaking headers, and other potential security hazards.
17
18       twa  takes  only  one  DOMAIN  at a time. If you need to audit multiple
19       sites, run the program again.
20
21

OPTIONS

23       -v     Verbose mode.
24
25       -w     Perform the audit on the main DOMAIN and the www.  subdomain.
26
27       -c     Emit output in CSV.
28
29       -s     Run testssl-based checks (skipped by default)
30
31       -V     Print the version and exit.
32
33       -h     Print a help message and exit.
34
35

ENVIRONMENT

37       NO_COLOR
38              Don't colorize output, even when on a TTY.
39
40       TWA_TIMEOUT
41              The maximum length, in seconds, for internal curl calls.
42
43       TWA_USER_AGENT
44              The User-Agent to use for all curl calls.
45
46       TWA_CURLOPTS
47              Any additional options to pass to curl calls.
48
49

TEST RESULTS

51       Each line of output describes the result of a single test, and  follows
52       the  "RESULT(DOMAIN):  explanation"  format, where RESULT is one of the
53       following:
54
55       PASS   The test passed with flying colors.
56
57       MEH    The test passed, but with one  or  more  things  that  could  be
58              improved.
59
60       FAIL   The test failed, and should be fixed.
61
62       UNK    The server gave us something we didn't understand.
63
64       SKIP   The  server  gave  us something we understood, but that we don't
65              handle yet.
66
67       FATAL  A really important test failed, and should be fixed immediately.
68
69

BUGS

71       None known. File issues at: https://github.com/trailofbits/twa
72
73

AUTHOR

75       twa is maintained by William Woodruff (<william @ trailofbits.com>).
76
77
78
791.9.2                             2019-02-17                            TWA(1)
Impressum