BugBounty

httpx – multi-purpose HTTP toolkit

httpx is a fast and multi-purpose HTTP toolkit allows to run of multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads. Features Simple and modular codebase making it easy to contribute. Fast And fully configurable flags to probe multip


httpx is a fast and multi-purpose HTTP toolkit allows to run of multiple probers using 
retryablehttp library, it is designed to maintain the result reliability with increased threads.

Features

  • Simple and modular codebase making it easy to contribute.
  • Fast And fully configurable flags to probe multiple elements.
  • Supports multiple HTTP-based probings.
  • Smart auto fallback from https to http as default.
  • Supports hosts, URLs, and CIDR as input.
  • Handles edge cases doing retries, backoffs, etc for handling WAFs.
Installation
httpx requires go1.17 to install successfully. Run the following command to get the repo –

go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest

Notes

  • As default, httpx checks for HTTPS probe and fall-back to HTTP only if HTTPS is not reachable.
  • For printing both HTTP/HTTPS results, a no-fallback flag can be used.
  • Custom scheme for ports can be defined, for example -ports http:443,http:80,https:8443
  • vhost, http2, pipeline, ports, csp-probe, tls-probe and path are unique flag with different probes.
  • Unique flags should be used for specific use cases instead of running them as default with other flags.
  • When using json flag, all the information (default probes) is included in the JSON output.

Download HTTPX

Was this article helpful?

If something here is wrong or out of date, tell us and we will check the source.

Related reading

See all
Android

AndroHunter – Android Security Research Toolkit

AndroHunter is a native Android application that provides a full suite of mobile security testing tools — all running directly on the device without requiring a rooted phone for most features. It is designed for security researchers participating in bug bounty programs (HackerOne, Yes We Hack, Intig

March 20, 2026
BugBounty

HExHTTP – HTTP Header Exploitation Tool

HExHTTP is a tool designed to perform tests on HTTP headers and analyze the results to identify vulnerabilities and interesting behaviors. Features Server Error response checking Localhost header response analysis Vhosts checking Methods response analysis HTTP Version analysis [Experimental] Cache P

January 28, 2025
Automation

WebCopilot – An automation tool for XSS, SQLi, LFI, SSRF and RCE

──────▄▀▄─────▄▀▄ ─────▄█░░▀▀▀▀▀░░█▄ ─▄▄──█░░░░░░░░░░░█──▄▄ █▄▄█─█░░▀░░┬░░▀░░█─█▄▄█ ██╗░░░░░░░██╗███████╗██████╗░░█████╗░░█████╗░██████╗░██╗██╗░░░░░░█████╗░████████╗░██║░░██╗░░██║██╔════╝██╔══██╗██╔══██╗██╔══██╗██╔══██╗██║██║░░░░░██╔══██╗╚══██╔══╝░╚██╗████╗██╔╝█████╗░░██████╦╝██║░░╚═╝██║░░██║██████╔

January 14, 2024
BugBounty

APTRS – An Automated Penetration Testing Reporting System

APTRS (Automated Penetration Testing Reporting System) is an automated reporting tool in Python and Django. The tool allows Penetration testers to create a report directly without using the Traditional Docx file. It also provides an approach to keeping track of the projects and vulnerabilities. Prer

November 24, 2022