httpx: HTTP toolkit for multiple probes
Fast HTTP probing with response metadata extraction.
Learn more about httpx
httpx is a Go-based HTTP toolkit designed to perform reconnaissance and probing tasks against web targets at scale. It uses the retryablehttp library to handle network reliability, implementing retry logic and backoff strategies to work around rate limiting and WAF protections. The tool supports diverse input formats including individual hosts, URL lists, and CIDR ranges, and can extract over 30 different HTTP-based data points from responses. It is commonly used in security research, bug bounty workflows, and network reconnaissance pipelines.
Configurable probe selection
httpx offers a wide range of optional probes including TLS certificates, CSP headers, favicon hashing, JARM fingerprinting, and redirect chain analysis. Users can enable or disable specific probes based on their reconnaissance needs.
Retry and fallback handling
The tool implements automatic fallback from HTTPS to HTTP, retry logic with backoff strategies, and WAF evasion techniques to maintain reliability when probing multiple targets concurrently.
Flexible input and output
httpx accepts hosts, URLs, CIDR ranges, and raw HTTP requests as input, making it suitable for integration into larger security scanning pipelines and reconnaissance workflows.
import httpx
response = httpx.get('https://api.example.com/data')
print(response.json())Patch release fixing output formatting bugs in location display, CSV/JSON timestamps, and HTML title parsing for non-Latin character sets.
- –Update if you rely on CSV/JSON timestamp consistency or parse HTML titles, especially from Traditional Chinese pages.
- –No breaking changes or new requirements; location field now prints only when explicitly requested via CLI option.
Adds screenshot control flag and fixes minor bugs; no breaking changes or new requirements.
- –Use `-no-screenshot-full-page` to capture viewport-only screenshots instead of full-page renders.
- –Fixes internal fake data generator crash when encountering empty interfaces during fuzzing operations.
Bug-fix release restoring -probe JSON/CSV output, screenshot capture, and filter-condition CSV extraction; fastdialer v0.3.0 resolves CPU bottleneck.
- –Upgrade fastdialer to v0.3.0 to eliminate CPU bottleneck during high-throughput scans.
- –Verify ScreenshotIdle config now applies correctly; previously defaulted to 0 and blocked all screenshots.
Top in Security
Related Repositories
Discover similar tools and frameworks used by developers
spiderfoot
Python reconnaissance framework with 200+ OSINT modules.
DVWA
PHP/MariaDB training platform for web security exploitation practice.
OSINT-Framework
Structured web catalog of free OSINT tools.
grype
Detect vulnerabilities in container images and filesystems.
CyberChef
Browser-based data transformation tool with chainable operations.