fingerprintx-probe

Identify application-layer services and protocols on open ports using fingerprintx.

1.7k|238|Updated Dec 7, 2019
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill fingerprintx-probe
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fingerprintx-probe
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/fingerprintx-probe
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill fingerprintx-probe

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

After port scanning reveals open ports, you still need to know exactly which service and protocol is running on each one. This Skill uses fingerprintx to fingerprint application-layer services across 51 protocols (SSH, RDP, MySQL, Redis, HTTP, SMB, FTP, and more) and returns structured JSON metadata for each detected service.

Core Features & Use Cases

  • Multi-protocol service identification: Probe single targets, comma-separated host:port lists, or target files to identify services across 51 supported protocols.
  • Fast and UDP scanning modes: Use fast mode to check only default-port services, or UDP mode for protocols like SNMP, with configurable timeouts.
  • Pipeline integration: Chain fingerprintx with naabu or masscan so port scan results flow directly into service fingerprinting with JSON output.
  • Use Case: You run naabu against a /24 subnet and pipe the live hosts into fingerprintx to produce a JSON inventory of every identified service and its metadata for the recon phase of a pentest.

Quick Start

Use fingerprintx to identify the services running on the open ports of my target list and output the results as JSON.

Frequently Asked Questions about fingerprintx-probe

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify services running on open ports?

Run fingerprintx against host:port targets to fingerprint the application-layer service on each port. It supports single targets, comma-separated lists, target files, and stdin input, returning the detected protocol and service metadata.

How to combine naabu port scanning with service fingerprinting?

Pipe naabu output directly into fingerprintx, for example naabu -host 192.168.1.0/24 -silent | fingerprintx. The discovered host:port pairs are fingerprinted automatically, and you can add --json for structured output.

What protocols does fingerprintx support for service detection?

fingerprintx supports 51 protocols including SSH, RDP, MySQL, Redis, HTTP, SMB, and FTP. It identifies both the protocol and associated service metadata, outputting results in JSON format.

Does fingerprintx support UDP service scanning?

Yes, fingerprintx supports UDP service probing with the -U flag, for example fingerprintx -t 192.168.1.1:161 -U for SNMP. You can also adjust probe timeouts with the -w flag.

When should I use fingerprintx fast mode?

Use fast mode with --fast when you only want to check the default service for each port rather than probing all possible protocols. This speeds up large scans at the cost of potentially missing services on non-standard ports.