httprobe

takes a list of domains from stdin and probes for working HTTP and HTTPS servers

TLDR

Probe domains from stdin

$ cat [subdomains.txt] | httprobe

Probe with concurrency

$ cat [subdomains.txt] | httprobe -c [50]

Probe specific ports

$ cat [subdomains.txt] | httprobe -p [http:8080] -p [https:8443]

Skip default ports

$ cat [subdomains.txt] | httprobe -s

Set timeout

$ cat [subdomains.txt] | httprobe -t [5000]

Prefer HTTPS

$ cat [subdomains.txt] | httprobe --prefer-https

httprobe takes a list of domains from stdin and probes for working HTTP and HTTPS servers. It outputs URLs of domains that respond to requests. Commonly used in bug bounty workflows after subdomain enumeration to filter down to live web servers before further testing.

PARAMETERS

-c n

Concurrency level (default 20).

-p proto:port

Add port to probe (e.g., http:8080).

-s

Skip default ports (80, 443).

-t ms

Timeout in milliseconds (default 10000).

--prefer-https

Only output HTTPS when both work.

INSTALL

sudo dnf install httprobe

nix profile install nixpkgs#httprobe

CAVEATS

Written in Go with minimal ongoing maintenance; httpx from ProjectDiscovery is a more actively developed alternative with additional probing and fingerprinting features.

HISTORY

httprobe was written by Tom Hudson ("tomnomnom"), a security researcher known for a suite of small, composable Go tools (including anew, waybackurls, and gf) widely used in bug bounty and recon pipelines.

RESOURCES

Source code