httpx

Informational

httpx by ProjectDiscovery

Definition

httpx is a multi-purpose HTTP tool developed by ProjectDiscovery. It lets you probe hosts en masse to obtain information such as status codes, page titles, technologies, SSL certificates, response size and more. It is essential in the recon phase to filter live hosts from massive subdomain lists and extract information to prioritize targets.

Impact

Fast filtering of live hosts from massive subdomain listsWeb technology detection (servers, frameworks, CMS)Extracting titles, status codes and SSL certificatesPrioritizing targets based on detected technologyIntegration with the recon pipeline (subfinder → httpx → nuclei)

Examples

Recon pipeline with httpx

httpx is the key intermediate step between subdomain enumeration and vulnerability scanning. It filters live hosts and collects metadata that helps prioritize which applications to investigate first.

# Probe a list of subdomains
cat subdomains.txt | httpx -status-code -title -tech-detect

# Full recon pipeline
subfinder -d example.com | httpx -status-code -title -follow-redirects | tee live-hosts.txt

# Extract detailed information
httpx -l hosts.txt -status-code -content-length -title -tech-detect -web-server -json -o results.json

# Filter only hosts with status 200
cat subdomains.txt | httpx -mc 200

# Detect specific technologies
cat hosts.txt | httpx -tech-detect | grep -i "wordpress\|laravel\|django"

External references

Practice httpx with real labs

Apply what you've learned in safe environments based on real bug bounty reports.

See practice labs
4,185

hunters training

68

labs from real hacks

2,125

completions

$14,790

paid out for these bugs

6 flags captured this week·Real hacks from HackerOne · YesWeHack · Bugcrowd·No commitment·Free Academy
Free · no account

The checklist I run on every new target

47 checks ordered by cost: first what can get you in trouble, then the cheap stuff, and finally the expensive stuff — which is where the big bounties are. I'll send it to your inbox right now.

Unsubscribe in one click, from any email.

BBLabs · bug bounty training

Stop reading about bugs and start hunting them

Create your free account and practice on labs based on real hacks that paid out thousands of euros. The Academy is free forever.

No card · free Academy · cancel anytime

The community

This isn't a platform with users.It's people breaking the same things you are.

Inside people ask, share what they found and solve together what would block anyone on their own. It's free to join: no account, no plan, no email required.

Join the BBLABS community on Discord
Join the Discord

Free and open. You don't need a BBLABS account to join.