httpx

Informational

httpx by ProjectDiscovery

Definition

httpx is a multi-purpose HTTP tool developed by ProjectDiscovery. It lets you probe hosts en masse to obtain information such as status codes, page titles, technologies, SSL certificates, response size and more. It is essential in the recon phase to filter live hosts from massive subdomain lists and extract information to prioritize targets.

Impact

Fast filtering of live hosts from massive subdomain listsWeb technology detection (servers, frameworks, CMS)Extracting titles, status codes and SSL certificatesPrioritizing targets based on detected technologyIntegration with the recon pipeline (subfinder → httpx → nuclei)

Examples

Recon pipeline with httpx

httpx is the key intermediate step between subdomain enumeration and vulnerability scanning. It filters live hosts and collects metadata that helps prioritize which applications to investigate first.

# Probe a list of subdomains
cat subdomains.txt | httpx -status-code -title -tech-detect

# Full recon pipeline
subfinder -d example.com | httpx -status-code -title -follow-redirects | tee live-hosts.txt

# Extract detailed information
httpx -l hosts.txt -status-code -content-length -title -tech-detect -web-server -json -o results.json

# Filter only hosts with status 200
cat subdomains.txt | httpx -mc 200

# Detect specific technologies
cat hosts.txt | httpx -tech-detect | grep -i "wordpress\|laravel\|django"

External references

Practice httpx with real labs

Apply what you've learned in safe environments based on real bug bounty reports.

See practice labs
2,482

hunters training

62

labs from real hacks

1,630

completions

$14,790

paid out for these bugs

11 flags captured this week·Real hacks from HackerOne · YesWeHack · Bugcrowd·No commitment·Free Academy
Free · no account

The checklist I run on every new target

47 checks ordered by cost: first what can get you in trouble, then the cheap stuff, and finally the expensive stuff — which is where the big bounties are. I'll send it to your inbox right now.

Unsubscribe in one click, from any email.

BBLabs · bug bounty training

Stop reading about bugs and start hunting them

Create your free account and practice on labs based on real hacks that paid out thousands of euros. The Academy is free forever.

No card · free Academy · cancel anytime