Repolode
Submit
projectdiscovery

projectdiscovery/httpx

A fast, multi-purpose HTTP toolkit CLI that probes lists of hosts, URLs and CIDRs for status codes, titles, tech stack, TLS certificates and more.

View on GitHubWebsite
Stars
10,591
Forks
1,120
Open issues
12
Last commit
2 days ago

What is it?

httpx is a command-line HTTP toolkit from projectdiscovery that runs many probes against a list of hosts, URLs or CIDR ranges and reports what each responding server returns. Typical outputs include status code, page title, content length, web server, response time, TLS certificate details, CDN or WAF in use, favicon and body hashes, and detected technologies.

It is built for reconnaissance and attack-surface mapping, where you need to find which hosts are alive and what they run across large target lists. Results can be filtered and matched by status code, regex, string, word count, DSL expressions and more, and written as JSON, JSONL or CSV, or sent to a database. Concurrency, rate limits, retries and proxy support are configurable.

httpx can also be used as a Go library by passing the same options a CLI user would set to its runner. Optional headless-browser screenshots and a local page-classification model are available for deeper inspection.

Key features

  • 01Probes hosts, URLs and CIDR ranges with dozens of selectable output fields.
  • 02Falls back from HTTPS to HTTP automatically unless disabled.
  • 03Filters and matches responses by status code, regex, string, favicon hash and DSL expressions.
  • 04Detects technologies, CDN/WAF providers, TLS certificate details and page types.
  • 05Supports rate limiting, threads, retries, custom headers and proxies.
  • 06Exports results as JSON, JSONL, CSV or into MongoDB, PostgreSQL or MySQL.

Use cases

  • Finding live web servers across a large list of subdomains during bug bounty recon.
  • Mapping an organization's external attack surface by checking titles, status codes and TLS certificates.
  • Checking for well-known files such as security.txt or robots.txt across many domains.
  • Feeding probed live URLs into other scanners in a shell pipeline.

Quick start

  1. 1

    Install httpx with Go (requires Go 1.26.10 or newer)

    go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
  2. 2

    Show the help and list of available flags

    httpx -h

Things to know

  • Requires Go 1.26.10 or newer to install from source.
  • The README states the project is in active development and may have breaking changes between releases.
  • The README advises caution when running it as a service because of security risks.

In collections

CLI & terminal tools

Topics

#http#reconnaissance#cli#pentest#bug-bounty#web-scanning#tls#golang#bugbounty#cybersecurity

FAQ

What is httpx?
A fast, multi-purpose HTTP toolkit CLI that probes lists of hosts, URLs and CIDRs for status codes, titles, tech stack, TLS certificates and more. httpx is a command-line HTTP toolkit from projectdiscovery that runs many probes against a list of hosts, URLs or CIDR ranges and reports what each responding server returns. Typical outputs include status code, page title, content length, web server, response time, TLS certificate details, CDN or WAF in use, favicon and body hashes, and detected technologies.
Is httpx free to use? What license does it have?
httpx is open source under the MIT license. Check the license terms before using it in commercial products.
Is httpx still maintained?
Actively maintained. The last commit to httpx was on Nov 5, 2026.
What can I use httpx for?
Finding live web servers across a large list of subdomains during bug bounty recon. Mapping an organization's external attack surface by checking titles, status codes and TLS certificates. Checking for well-known files such as security.txt or robots.txt across many domains. Feeding probed live URLs into other scanners in a shell pipeline.
How do I install httpx?
Install httpx with Go (requires Go 1.26.10 or newer): go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest Show the help and list of available flags: httpx -h
Where can I get httpx?
The source code and installation instructions are on GitHub: https://github.com/projectdiscovery/httpx

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects