CmdID

CmdID / Commands

httpx

A fast and multi-purpose HTTP toolkit written in Go to run multiple probes at once. tldr-pages

On several platforms 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

A fast and multi-purpose HTTP toolkit written in Go to run multiple probes at once. Note: Not to be confused with the unrelated Python's HTTPX which has the same command name.

Run a probe against a uRL, host, IP Address, or subnet (CIDR notation) showing probe status

httpx -probe -target urlIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Run a probe against multiple hosts showing status code with input from subfinder

subfinder -domain example.com | httpx -status-codeIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Run a rate limited probe against a list of hosts from a file showing technology detected and response time

httpx -rate-limit 150 -list path/to/newline_separated_hosts_list -tech-detect -response-timeIdentify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Run a probe against a uRL showing its webpage title, CDN/WAF in use, and page content hash

httpx -target url -title -cdn -hash sha256Identify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Run a probe against a list of hosts with custom defined ports and timeout after certain seconds

httpx -probe -target host1,host2,... -ports http:80,8000-8080,https:443,8443 -timeout 10Identify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Run a probe against a list of hosts filtering out codes of certain responses

httpx -target host1,host2,... -filter-code 400,401,404Identify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Run a probe against a list of hosts matching codes of certain responses

httpx -target host1,host2,... -match-code 200,301,304Identify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

Run a probe against a URL saving screenshots of certain paths, with screenshot timeouts (assets are saved in output)

httpx -target https://www.github.com -path /tldr-pages/tldr,/projectdiscovery/httpx -screenshot -screenshot-timeout 10Identify

Trips 1 Sigma rule: highLinux HackTool Execution by Nasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])

What detects it

Sigma process creation rules that name httpx
highLinux HackTool ExecutionNasreddine Bencherchali (Nextron Systems), Georg Lauenstein (sure[secure])