httpx-probe

Probe hosts with httpx to capture HTTP status, title, server, and TLS fingerprint.

Updated May 7, 2026
One-click install
npx skills add https://github.com/gongzeq/VAPT3 --skill httpx-probe-gongzeq
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: httpx-probe
Source: https://github.com/gongzeq/VAPT3/tree/main/secbot/skills/httpx-probe
Command: npx skills add https://github.com/gongzeq/VAPT3 --skill httpx-probe-gongzeq

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Probe a batch of hosts / URLs with projectdiscovery/httpx to capture HTTP status, title, tech stack and TLS fingerprint. Safe, read-only — use it to build the web-service inventory before running vuln scans.

Core Features & Use Cases

  • Batch-compatibility: probes multiple targets in one run and aggregates results into a structured services list.
  • Metadata-rich discovery: captures status_code, title, server, TLS fingerprint, content_length and detected technologies.
  • Use Case: before vulnerability scans, build an inventory of web services and their basic characteristics to prioritize testing.

Quick Start

Provide a list of targets and run the skill to generate a services inventory.

Frequently Asked Questions about httpx-probe

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I inventory web services before running a vulnerability scan?

Batch asset discovery probes multiple target hosts simultaneously to identify open HTTP and HTTPS services. It aggregates captured status codes, titles, servers, and TLS fingerprints into a structured inventory list for prioritizing subsequent vulnerability scans.

How do I batch probe URLs for HTTP status and TLS fingerprints?

Batch probing URLs captures HTTP status, titles, servers, and TLS fingerprints by passing a list of targets to the scanner. You specify targets, ports, threads, and follow_redirects parameters to generate a metadata-rich services inventory.

Do I need the httpx binary installed to scan hosts for open web services?

Yes, you need the httpx binary available on your system PATH or via a configured override to scan hosts for open web services. The skill relies on this ProjectDiscovery tool to detect open HTTP/S ports and extract metadata.

What is the best way to detect web technologies across multiple endpoints?

The best way to detect web technologies across multiple endpoints is using a batch-compatible service detection probe. It captures status codes, titles, servers, content length, and detected technologies into a structured list for asset discovery.

Does web service detection modify the target hosts during asset discovery?

No, web service detection is a safe, read-only operation during asset discovery. It only probes target hosts to capture basic metadata like HTTP status, titles, and TLS fingerprints without modifying the scanned web applications.

Can I specify custom ports and threads when probing web applications?

Yes, you can specify custom ports and threads when probing web applications. The service detection accepts targets, ports, threads, and follow_redirects parameters to control the batch asset discovery process and output a structured services list.