security enabled verified low v1.0.0

httpx

Fast and multi-purpose HTTP toolkit from ProjectDiscovery for probing, analyzing, and fingerprinting web servers and services.

📋 Live Preview

httpx {flags} {target}

📎 flags 📎 target

httpx {flags} {target}

Sandbox: execFile · Timeout: 120s

Capabilities

web.discovery.endpoint

web.fingerprint.technology

web.probe.http

web.enumeration.asset

security.fingerprint.service

Parameters

Name	Type	Required	Default	Description	Aliases
`list`	string	No	-	File containing list of URLs or hosts	`-l`, `--list`
`target`	string	No	-	Single target URL or host	`-t`, `--target`
`flag-sc`	boolean	No	-	Include status code in output	`-sc`, `--status-code`
`flag-ct`	boolean	No	-	Include content type in output	`-ct`, `--content-type`
`flag-location`	boolean	No	-	Include redirect location in output	`-location`
`flag-favicon`	boolean	No	-	Extract favicon hash for identifying services	`-favicon`
`flag-title`	boolean	No	-	Extract page title	-
`flag-tech-detect`	boolean	No	-	Enable technology detection using wappalyzer	`-tech-detect`
`flag-json`	boolean	No	-	Output as JSON lines	`-json`
`flag-threads`	integer	No	-	Number of concurrent threads	`-t`, `--threads`
`flag-probe`	boolean	No	-	Probe hosts for HTTP/HTTPS	`-probe`
`flag-o`	string	No	-	Output file path	`-o`, `--output`
`flag-follow-redirects`	boolean	No	-	Follow redirects	`-follow-redirects`

Artifacts

Type	Description	MIME	Schema	Trust
`network.http.response`	HTTP probe response data	text/plain	-	verified
`web.fingerprint.results`	Technology fingerprint results	application/json	-	verified

Contract

Inputs

network.target.url

Target URL to probe

network.target.domain.list

File containing list of hosts/domains

network.target.ip

Target IP address

Outputs

web.fingerprint.results

Live hosts with status codes and technologies

network.http.response

Raw HTTP response data

Side effects: network_trafficnetwork_traffic

Workflow Edges

Produces

web.fingerprint.resultsnetwork.http.response

Consumes

network.target.urlnetwork.target.domain.listnetwork.target.ip

Resource Profile

Resource	Value
CPU	low
Memory	64 MB
Network	medium
Disk I/O	low

Examples

Probe a single URL

echo "https://example.com" | httpx -status-code -title

Probe multiple hosts from a file

httpx -l hosts.txt -status-code -tech-detect -json

Probe with favicon hash extraction

cat live-hosts.txt | httpx -favicon -status-code -title

Probe and follow redirects

cat urls.txt | httpx -status-code -location -follow-redirects

Probe with technology detection

httpx -l urls.txt -tech-detect -json -o results.json

Documentation

httpx — HTTP Probing Toolkit

httpx is a fast and versatile HTTP probing tool from ProjectDiscovery used to analyze web servers, detect technologies, capture response metadata, and filter live hosts from large target sets. It is commonly pipelined with other tools like subfinder and nuclei.

Pipeline Usage

# Subfinder -> httpx -> nuclei
subfinder -d example.com | httpx -status-code -title | nuclei -t cves/

# MassDNS -> httpx -> screenshot
massdns -r resolvers.txt -t A domains.txt | httpx -silent | aquatone

Common Probes

# Basic probing
cat hosts.txt | httpx -status-code -content-type -title

# Full technology detection
subfinder -d example.com | httpx -tech-detect -json

# Extract all alive hosts
cat urls.txt | httpx -silent -status-code

# Favicon hash for service identification
httpx -l urls.txt -favicon

Related Tools

nucleikatanasubfinderffuf