httpx

Probe live HTTP and HTTPS hosts and collect response metadata.

81|14|Updated Jul 8, 2026
One-click install
npx skills add https://github.com/guaidao2/XuanMu-RedTeam-Agent --skill httpx-guaidao2
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: httpx
Source: https://github.com/guaidao2/XuanMu-RedTeam-Agent/tree/main/sandbox/.agents/skills/httpx
Command: npx skills add https://github.com/guaidao2/XuanMu-RedTeam-Agent --skill httpx-guaidao2

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill streamlines authorized HTTP and HTTPS probing so you can quickly determine which hosts are live and gather useful response details without manually checking each target.

Core Features & Use Cases

  • Live Host Validation: Check domains, hosts, URLs, and reconnaissance results for reachable HTTP or HTTPS services.
  • Response Triage: Collect status codes, page titles, redirects, headers, TLS observations, and technology signals.
  • Normalized Reconnaissance: Process bounded target lists through files or standard input and produce quiet, parseable output for follow-up analysis.
  • Use Case: Validate a list of in-scope hosts after DNS enumeration, then identify redirects, technologies, and response metadata for deeper security review.

Quick Start

Use the httpx skill to validate the authorized hosts in the supplied target list and return concise JSON results with status, title, redirect, TLS, and technology observations.

Frequently Asked Questions about httpx

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate live HTTP and HTTPS hosts from a reconnaissance list?

HTTP probing validates live hosts by checking domains and URLs from DNS enumeration or nmap results to identify reachable web services. It processes bounded target lists through files or standard input to determine which hosts are actually live.

What response metadata can I collect during web reconnaissance?

During web reconnaissance, you can collect response metadata including status codes, page titles, redirects, headers, TLS observations, and technology signals. This response triage normalizes data into parseable output for deeper security review.

Do I need the ProjectDiscovery httpx CLI to probe targets?

Yes, the ProjectDiscovery httpx CLI is required to probe targets and validate live hosts. The skill depends on this command-line tool to process reconnaissance inputs and return concise JSON results with status and technology observations.

Does httpx work with DNS enumeration and nmap scan results?

Yes, httpx works with DNS enumeration and nmap scan results by accepting host lists and URLs produced from these reconnaissance workflows. It processes bounded inputs from these tools to validate reachable HTTP and HTTPS services.

What authorization is required before probing targets for technology detection?

Explicit authorization is required before probing targets for technology detection and host validation. You must ensure all domains and URLs are in-scope and properly authorized before submitting them to the HTTP probing workflow.