httpx - Man Page

• Run a probe against a [u]RL, host, IP Address or subnet (CIDR notation) showing probe status: httpx -probe [-u|-target] url|host|ipaddress|subnet_with_cidr
• Run a probe against multiple hosts showing status code with input from subfinder: subfinder [-d|-domain] example.com | httpx [-sc|-status-code]
• Run a rate limited probe against a list of hosts from a file showing technology detected and response time: httpx [-rl|-rate-limit] 150 [-l|-list] path/to/newline_separated_hosts_list [-td|-tech-detect] [-rt|-response-time]
• Run a probe against a [u]RL showing its webpage title, CDN/WAF in use, and page content hash: httpx [-u|-target] url -title -cdn -hash sha256
• Run a probe against a list of hosts with custom defined ports and timeout after certain seconds: httpx -probe [-u|-target] host1,host2,... [-p|-ports] http:80,8000-8080,https:443,8443 -timeout 10
• Run a probe against a list of hosts filtering out codes of certain responses: httpx [-u|-target] host1,host2,... [-fc|-filter-code] 400,401,404
• Run a probe against a list of hosts matching codes of certain responses: httpx [-u|-target] host1,host2,... [-mc|-match-code] 200,301,304
• Run a probe against a URL saving screenshots of certain paths, with screenshot timeouts (assets are saved in ./output): httpx [-u|-target] https://www.github.com -path /tldr-pages/tldr,/projectdiscovery/httpx [-ss|-screenshot] [-st|-screenshot-timeout] 10

tldr.sh

httpx <URL> [OPTIONS]

HTTPX 🦋

A next generation HTTP client.

-m,  --method METHOD

Request method, such as GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD. [Default: GET, or POST if a request body is included]

-p,  --params <NAME VALUE> ...

Query parameters to include in the request URL.

-c,  --content TEXT

Byte content to include in the request body.

-d,  --data <NAME VALUE> ...

Form data to include in the request body.

-f, --files <NAME FILENAME> ... Form files to include in the request body.

-j,  --json TEXT

JSON data to include in the request body.

-h,  --headers <NAME VALUE> ...

Include additional HTTP headers in the request.

--cookies <NAME VALUE> ...

Cookies to include in the request.

--auth <USER PASS>

Username and password to include in the request. Specify '-' for the password to use a password prompt. Note that using --verbose/-v will expose the Authorization header, including the password encoding in a trivially reversible format.

--proxy URL

Send the request via a proxy. Should be the URL giving the proxy address.

--timeout FLOAT

Timeout value to use for network operations, such as establishing the connection, reading some data, etc... [Default: 5.0]

--follow-redirects

Automatically follow redirects.

--no-verify

Disable SSL verification.

--http2

Send the request using HTTP/2, if the remote server supports it.

--download FILE

Save the response content as a file, rather than displaying it.

-v,  --verbose

Verbose output. Show request as well as response.

--help

Show this message and exit.