httpx-screenshot
Take screenshots with httpx. Httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads
Name:httpx-screenshot
Category:Discovery
Publisher:trickest-mhmdiaa
Created:11/9/2023
Container:
quay.io/trickest/httpx-screenshot:v1.6.8
Output Type:
License:Unknown
Source:View Source
Parameters
-x
request methods to probe, use 'all' to probe all HTTP methods-ip
display host ip-asn
display host asn information-cdn
display cdn in use-csv
store output in csv format-body
post body to include in http request-deny
denied list of IP/CIDR's to process-hash
display response body hash (supported: md5,mmh3,simhash,sha1,sha256,sha512)-jarm
display jarm fingerprint hash-json
store output in JSONL(ines) format-list
input file containing list of hosts to process-path
list of paths to probe-allow
allowed list of IP/CIDR's to process-cname
display host cname-debug
display request/response content in cli-http2
probe and display server supporting HTTP2-ports
ports to probe (nmap syntax: eg http:1,2-10,11,https:80)-probe
display probe status-stats
display scan statistic-title
display page title-vhost
probe and display server supporting VHOST-config
path to the httpx configuration file-header
custom http headers to send with request-method
display http request method-silent
silent mode-target
input target host(s) to probe-unsafe
send raw requests skipping golang normalization-exclude
exclude host matching specified filter ('cdn', 'private-ips', cidr, ip, regex)-favicon
display mmh3 hash for '/favicon.ico' file-request
file containing raw request-retries
number of retries-threads
number of threads to use (default 50)-timeout
timeout in seconds (default 5)-verbose
verbose mode-location
display response redirect location-pipeline
probe and display server supporting HTTP1.1 pipeline-protocol
protocol to use (unknown, http11)-sni-name
custom TLS SNI name-tls-grab
perform TLS(SSL) data grabbing-csp-probe
send http probes on the extracted CSP domains-debug-req
display request content in cli-match-cdn
match host with specified cdn provider (azure, cloudflare, cloudfront, fastly, incapsula, oracle, google, sucuri, leaseweb, akamai)-omit-body
omit response body in output-resolvers
list of custom resolvers (comma separated)-tls-probe
send http probes on the extracted TLS domains (dns_name)-websocket
display server using websocket-debug-resp
display response content in cli-filter-cdn
filter host with specified cdn provider (azure, cloudflare, cloudfront, fastly, incapsula, oracle, google, sucuri, leaseweb, akamai)-http-proxy
http proxy to use (eg http://127.0.0.1:8080)-line-count
display response body line count-match-code
match response with specified status code (-mc 200,302)-rate-limit
maximum requests to send per second (default 150)-web-server
display server name-word-count
display response body word count-filter-code
filter response with specified status code (-fc 403,401)-match-regex
match response with specified regex (-mr admin)-no-fallback
display both probed protocol (HTTPS and HTTP)-status-code
display response status-code-store-chain
include http redirect chain in responses (-sr only)-tech-detect
display technology in use based on wappalyzer dataset-vhost-input
get a list of vhosts as input-body-preview
display first N characters of response body (default 100)-content-type
display response content-type-extract-fqdn
get domain and subdomains from response body and header in jsonl/csv output-filter-regex
filter response with specified regex (-fe admin)-health-check
run diagnostic check up-match-length
match response with specified content length (-ml 100,102)-match-string
match response with specified string (-ms admin)-random-agent
enable Random User-Agent to use (default true)-respect-hsts
respect HSTS response headers for redirect requests-extract-regex
display response content with matched regex-filter-length
filter response with specified content length (-fl 23,33)-filter-string
filter response with specified string (-fs admin)-include-chain
include redirect http chain in JSON output (-json only)-match-favicon
match response with specified favicon hash (-mfc 1494302000)-max-redirects
max number of redirects to follow per host (default 10)-probe-all-ips
probe all the ips associated with same host-response-time
display response time-content-length
display response content-length-extract-preset
display response content matched by a pre-defined regex (url,ipv4,mail)-filter-favicon
filter response with specified favicon hash (-mfc 1494302000)-max-host-error
max error count per host before skipping remaining path/s (default 30)-resolvers
list of custom resolvers-stats-interval
number of seconds to wait between showing a statistics update (default: 5)-store-response
store http response to output directory-match-condition
match response with dsl expression condition-filter-condition
filter response with dsl expression condition-follow-redirects
follow http redirects-headless-options
start headless chrome with additional options-include-response
include http request/response in JSON output (-json only)-match-line-count
match response body with specified line count (-mlc 423,532)-match-word-count
match response body with specified word count (-mwc 43,55)-filter-line-count
filter response body with specified line count (-flc 423,532)-filter-word-count
filter response body with specified word count (-fwc 423,532)-rate-limit-minute
maximum number of requests to send per minute-list-dsl-variables
list json output field keys name that support dsl matcher/filter-no-fallback-scheme
probe with protocol scheme specified in input-screenshot-timeout
set timeout for screenshot in seconds (default 10)-csv-output-encoding
define output encoding-leave-default-ports
leave default http/https ports in host header (eg. http://host:80 - https//host:443-match-response-time
match response with specified response time in seconds (-mrt '< 1')-filter-response-time
filter response with specified response time in seconds (-frt '> 1')-exclude-headless-body
enable excluding headless header from json output-follow-host-redirects
follow redirects on the same host-response-size-to-read
max response size to read in bytes (default 2147483647)-response-size-to-save
max response size to save in bytes (default 2147483647)-include-response-base64
include base64 encoded http request/response in JSON output (-json only)-include-response-header
include http response (headers) in JSON output (-json only)-exclude-screenshot-bytes
enable excluding screenshot bytes from json output