> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/fuzzing/headers-fuzzing-headerpwn.md).

# Headers Fuzzing (headerpwn)

A fuzzer for analyzing how servers respond to different HTTP headers.

```
go install github.com/devanshbatham/headerpwn@v0.0.1
headerpwn -h
#grab headers list to test against  
wget https://raw.githubusercontent.com/devanshbatham/headerpwn/main/headers.txt

#Usage

headerpwn --url https://target.com -headers headers.txt
```