httpx-probe

To detect live HTTP services and extract web fingerprints, probe large URL lists concurrently to collect status codes, page titles, server headers, and technology stacks. This high-throughput process filters alive endpoints and outputs JSON for downstream scanning pipelines.

Yes, you can pipe outputs from subdomain and port scanners directly for HTTP discovery. The tool acts as a bridge in vulnerability scanning pipelines, reading bulk URLs to rapidly identify live endpoints and extract actionable metadata without manual validation.

During web technology fingerprinting, you can collect status codes, page titles, server headers, technology stacks, IP, CNAME, ASN, CDN, WAF indicators, and TLS information. You can also apply advanced filtering by regex matches, response length, or custom extractors.

Yes, bulk HTTP probing supports capturing screenshots for endpoint triage. Alongside detecting live HTTP/HTTPS services and gathering TLS metadata, you can optionally enable screenshot capture to visually prioritize high-value web targets during analysis.

The best way to filter alive endpoints by CDN and status codes is using advanced extraction options during high-throughput probing. You can filter results based on specific status codes, CDN presence, WAF indicators, regex matches, or response length to identify high-value targets.

TLS grabbing works during concurrent HTTP discovery by extracting TLS certificate information alongside standard HTTP responses. When probing URLs for live HTTP/HTTPS services, the tool concurrently collects TLS metadata and server headers to identify the underlying technology stack.