Navigate:
~$HTTPX0.8%

httpx: HTTP client for Python with HTTP/2 support

Fast HTTP probing with response metadata extraction.

LIVE RANKINGS • 10:20 AM • STEADY
OVERALL
#108
242
DEVELOPER TOOLS
#17
57
30 DAY RANKING TREND
ovr#108
·Devel#17
STARS
15.1K
FORKS
1.0K
7D STARS
+113
7D FORKS
+12
See Repo:
Share:

Learn more about HTTPX

httpx is a Go-based HTTP toolkit designed to perform reconnaissance and probing tasks against web targets at scale. It uses the retryablehttp library to handle network reliability, implementing retry logic and backoff strategies to work around rate limiting and WAF protections. The tool supports diverse input formats including individual hosts, URL lists, and CIDR ranges, and can extract over 30 different HTTP-based data points from responses. It is commonly used in security research, bug bounty workflows, and network reconnaissance pipelines.

HTTPX

1

Configurable probe selection

httpx offers a wide range of optional probes including TLS certificates, CSP headers, favicon hashing, JARM fingerprinting, and redirect chain analysis. Users can enable or disable specific probes based on their reconnaissance needs.

2

Retry and fallback handling

The tool implements automatic fallback from HTTPS to HTTP, retry logic with backoff strategies, and WAF evasion techniques to maintain reliability when probing multiple targets concurrently.

3

Flexible input and output

httpx accepts hosts, URLs, CIDR ranges, and raw HTTP requests as input, making it suitable for integration into larger security scanning pipelines and reconnaissance workflows.


v0.28.1

This release fixes an SSL issue when using client-side certificates with verification disabled.

  • Fix SSL case where verify=False together with client side certificates
v0.28.0

This release introduces SSL configuration API deprecations and removes previously deprecated arguments while improving JSON handling.

  • The verify argument as a string argument is now deprecated and will raise warnings
  • The cert argument is now deprecated and will raise warnings
  • The deprecated proxies argument has now been removed
  • The deprecated app argument has now been removed
  • JSON request bodies use a compact representation
v0.27.2

This release fixes a regression by reintroducing the URLTypes shortcut that was previously removed.

  • Reintroduced supposedly-private URLTypes shortcut

See how people are using HTTPX

Loading tweets...


[ EXPLORE MORE ]

Related Repositories

Discover similar tools and frameworks used by developers