Thread by @ReconOne_bk

6 easy steps to master httpx. A thread 👇🧵

httpx (from @pdiscoveryio) is a fast and multi-purpose HTTP toolkit. Let's find out how it works

👇

#recon #httpx #bugbountytips #bugbounty #AttackSurfaceManagement #recontips

1/6 Standard use

httpx can be used with a target list or piped with other tools:

$ httpx -list subdomains.txt

$ subfinder -d ups. com | httpx -silent

$ httpx -l subs.txt -ports 8080 -threads 100

2/6 Specific Path or file:

It's possible to request a specific file or path useful for searching misconfiguration on multiple targets:

$ httpx -l subs.txt -silent -path “/.git/” -fr -mc 200

3/6 Match specified values

You can match responses based on various values:

$ httpx -l subs.txt -path "?redir=http://example. com" -match-string 'Example Domain'

$ httpx -l subs.txt -match-code 200

$ httpx -l subs.txt -mcdn azure

4/6 Complete Scan

Here's how you can get all the key information about the target:

$ httpx -l subs.txt -silent -ports 80,443,8008,8080,8443,8843,5000,9001 -title -status-code -server -ip -content-length -tech-detect -asn -cdn -threads 100

5/6 Output format

The best way to store the results is by saving the output in csv or json (in combination with jq):

$ httpx -l subs.txt -csv -o results.csv

$ httpx -l subs.txt -json -o results.json

6/6 Slow down the Scan

httpx is so powerfull but as many other tools it can overload small servers, so try this

$ httpx -l subs.txt -threads 10 -rate-limit 35

$ httpx -l subs.txt -rate-limit-minute 200

I hope you will find it helpful. If yes please RT so others can find it

Follow me @ReconOne_bk

for more content on Recon, Attack Surface Management and Bug Bounty

https://twitter.com/ReconOne_bk/status/1577251218967384064?t=HyTbdENmreXOe-Ukl3IqqQ&s=19