loading
Loading content
loading
Network
Service fingerprinting for open host:port pairs.
overview
fingerprintx takes -t or -l host:port input and names the service that answers by speaking each protocol, not by guessing from the port number.
Emit --json or --csv for structured records. Turn on -U for UDP plugins. Use -f when a large list needs a quicker pass with less plugin coverage. Raise -w if slow services time out.
Trickest provides fingerprintx as a managed Network node after a port scanner. Feed naabu or nmap open ports in, then route labeled listeners to httpx or protocol-specific checks.
use cases
Pass open ports from a scan to fingerprintx so each one is labeled with the real protocol and service, not guessed from the port number.
Find SSH on 2222 or a database on an odd port by speaking each protocol and reading the reply, so nothing hides behind an unexpected assignment.
Enable -U to fingerprint DNS, SNMP, and other datagram services that a TCP-only scan leaves invisible.
Use --json or --csv so every fingerprinted service becomes a record downstream nodes can filter and route to protocol-specific testing.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| target | STRING | -t | Target or comma separated target list. |
| list | FILE | -l | Input file containing targets. |
| json | BOOLEAN | --json | Output format in JSON. |
| csv | BOOLEAN | --csv | Output format in CSV. |
| udp | BOOLEAN | -U | Run UDP plugins. |
| fast | BOOLEAN | -f | Fast mode. |
| timeout | STRING | -w | Timeout in milliseconds (default 500). |
| verbose | BOOLEAN | -v | Verbose mode. |
Showing key inputs. fingerprintx exposes 8 inputs in total.
example
# fingerprint services on open ports from a naabu list; JSON outfingerprintx -l open-ports.txt --json -w 1000example.com:22/tcp (ssh)example.com:80/tcp (http)example.com:443/tcp (https)api.example.com:8443/tcp (https)staging.example.com:2222/tcp (ssh)198.51.100.24:3306/tcp (mysql)198.51.100.24:6379/tcp (redis)203.0.113.88:53/udp (dns)guidance
Use fingerprintx when open ports are already known and you need the listening service named. It is not a port scanner. Run it after naabu or nmap, before httpx or other protocol-specific stages.
Fast port scanner. Finds the open ports fingerprintx then identifies, so the two run in sequence.
Full scanner with its own service and version detection. Heavier, but does discovery and fingerprinting in one tool.
Probes HTTP services. Use it after fingerprintx flags the web ports among many protocols.
faq
related
Map an organization's network ranges from ASN data.
Validate public DNS resolvers against trusted baselines.
Parallel ICMP echo sweeps for CIDR ranges and host files.
Probe a domain list for working HTTP and HTTPS servers.
A fast and multi-purpose HTTP toolkit that runs multiple probers with reliable, high-throughput results.
Expand, aggregate, and slice CIDR ranges into host lists.
A target feeds naabu, which finds the open ports and passes them to fingerprintx, which names the service on each port and writes them as a queryable output.
Facts on this page come from the live Trickest tool library.