httprobe

takes a list of domains from stdin and probes for working HTTP and HTTPS servers

TLDR

Probe domains from stdin
$ cat [subdomains.txt] | httprobe
Probe with concurrency
$ cat [subdomains.txt] | httprobe -c [50]
Probe specific ports
$ cat [subdomains.txt] | httprobe -p [http:8080] -p [https:8443]
Skip default ports
$ cat [subdomains.txt] | httprobe -s
Set timeout
$ cat [subdomains.txt] | httprobe -t [5000]
Prefer HTTPS
$ cat [subdomains.txt] | httprobe --prefer-https

SYNOPSIS

httprobe [options]

DESCRIPTION

httprobe takes a list of domains from stdin and probes for working HTTP and HTTPS servers. It outputs URLs of domains that respond to requests. Commonly used in bug bounty workflows after subdomain enumeration to filter down to live web servers before further testing.

PARAMETERS

-c n

Concurrency level (default 20).
-p proto:port
Add port to probe (e.g., http:8080).
-s
Skip default ports (80, 443).
-t ms
Timeout in milliseconds (default 10000).
--prefer-https
Only output HTTPS when both work.

INSTALL

sudo dnf install httprobe
nix profile install nixpkgs#httprobe

CAVEATS

Written in Go with minimal ongoing maintenance; httpx from ProjectDiscovery is a more actively developed alternative with additional probing and fingerprinting features.

HISTORY

httprobe was written by Tom Hudson ("tomnomnom"), a security researcher known for a suite of small, composable Go tools (including anew, waybackurls, and gf) widely used in bug bounty and recon pipelines.

SEE ALSO

httpx(1), curl(1), subfinder(1)

RESOURCES

Source code