Name:httpx-screenshot
Category:Discovery
Publisher:trickest-mhmdiaa
Created:11/9/2023
Container:
quay.io/trickest/httpx-screenshot:v1.7.1Output Type:
License:Unknown
Source:View Source
Parameters
-xrequest methods to probe, use 'all' to probe all HTTP methods-ipdisplay host ip-asndisplay host asn information-cdndisplay cdn in use-csvstore output in csv format-bodypost body to include in http request-denydenied list of IP/CIDR's to process (comma separated)-hashdisplay response body hash (supported: md5,mmh3,simhash,sha1,sha256,sha512)-jarmdisplay jarm fingerprint hash-jsonstore output in JSONL(ines) format-listinput file containing list of hosts to process-pathpath or list of paths to probe (comma-separated)-ztlsuse ztls library with autofallback to standard one for tls13-allowallowed list of IP/CIDR's to process (comma separated)-cnamedisplay host cname-debugdisplay request/response content in cli-delayduration between each http request (eg: 200ms, 1s) (default -1ns)-http2probe and display server supporting HTTP2-portsports to probe (nmap syntax: eg http:1,2-10,11,https:80)-probedisplay probe status-statsdisplay scan statistic-titledisplay page title-tracetrace-vhostprobe and display server supporting VHOST-configpath to the httpx configuration file-headercustom http headers to send with request-methoddisplay http request method-silentsilent mode-targetinput target host(s) to probe-unsafesend raw requests skipping golang normalization-excludeexclude host matching specified filter ('cdn', 'private-ips', cidr, ip, regex)-favicondisplay mmh3 hash for '/favicon.ico' file-requestfile containing raw request-retriesnumber of retries-threadsnumber of threads to use (default 50)-timeouttimeout in seconds (default 5)-verboseverbose mode-locationdisplay response redirect location-pipelineprobe and display server supporting HTTP1.1 pipeline-protocolprotocol to use (unknown, http11)-sni-namecustom TLS SNI name-tls-grabperform TLS(SSL) data grabbing-csp-probesend http probes on the extracted CSP domains-debug-reqdisplay request content in cli-denydenied list of IP/CIDR's to process-match-cdnmatch host with specified cdn provider (azure, cloudflare, cloudfront, fastly, incapsula, oracle, google, sucuri, leaseweb, akamai)-no-decodeavoid decoding body-omit-bodyomit response body in output-pathlist of paths to probe-resolverslist of custom resolvers (comma separated)-tls-probesend http probes on the extracted TLS domains (dns_name)-websocketdisplay server using websocket-allowallowed list of IP/CIDR's to process-debug-respdisplay response content in cli-filter-cdnfilter host with specified cdn provider (azure, cloudflare, cloudfront, fastly, incapsula, oracle, google, sucuri, leaseweb, akamai)-http-proxyhttp proxy to use (eg http://127.0.0.1:8080)-line-countdisplay response body line count-match-codematch response with specified status code (-mc 200,302)-rate-limitmaximum requests to send per second (default 150)-web-serverdisplay server name-word-countdisplay response body word count-filter-codefilter response with specified status code (-fc 403,401)-header-filecustom http headers to send with request-match-regexmatch response with specified regex (-mr admin)-no-fallbackdisplay both probed protocol (HTTPS and HTTP)-status-codedisplay response status-code-store-chaininclude http redirect chain in responses (-sr only)-tech-detectdisplay technology in use based on wappalyzer dataset-vhost-inputget a list of vhosts as input-body-previewdisplay first N characters of response body (default 100)-content-typedisplay response content-type-extract-fqdnget domain and subdomains from response body and header in jsonl/csv output-filter-regexfilter response with specified regex (-fe admin)-health-checkrun diagnostic check up-match-lengthmatch response with specified content length (-ml 100,102)-match-stringmatch response with specified string (-ms admin)-random-agentenable Random User-Agent to use (default true)-respect-hstsrespect HSTS response headers for redirect requests-extract-regexdisplay response content with matched regex-filter-lengthfilter response with specified content length (-fl 23,33)-filter-stringfilter response with specified string (-fs admin)-include-chaininclude redirect http chain in JSON output (-json only)-match-faviconmatch response with specified favicon hash (-mfc 1494302000)-max-redirectsmax number of redirects to follow per host (default 10)-probe-all-ipsprobe all the ips associated with same host-response-timedisplay response time-content-lengthdisplay response content-length-extract-presetdisplay response content matched by a pre-defined regex (url,ipv4,mail)-filter-faviconfilter response with specified favicon hash (-mfc 1494302000)-max-host-errormax error count per host before skipping remaining path/s (default 30)-resolverslist of custom resolvers-stats-intervalnumber of seconds to wait between showing a statistics update (default: 5)-store-responsestore http response to output directory-match-conditionmatch response with dsl expression condition-screenshot-idleset idle time before taking screenshot in seconds (default 1s)-tls-impersonateenable random tls client (ja3) impersonation (experimental)-filter-conditionfilter response with dsl expression condition-follow-redirectsfollow http redirects-headless-optionsstart headless chrome with additional options-include-responseinclude http request/response in JSON output (-json only)-match-line-countmatch response body with specified line count (-mlc 423,532)-match-word-countmatch response body with specified word count (-mwc 43,55)-filter-duplicatesfilter out near-duplicate responses (only first response is retained)-filter-error-pagefilter response with ML based error page detection-filter-line-countfilter response body with specified line count (-flc 423,532)-filter-word-countfilter response body with specified word count (-fwc 423,532)-rate-limit-minutemaximum number of requests to send per minute-list-dsl-variableslist json output field keys name that support dsl matcher/filter-no-fallback-schemeprobe with protocol scheme specified in input-screenshot-timeoutset timeout for screenshot in seconds (default 10)-csv-output-encodingdefine output encoding-leave-default-portsleave default http/https ports in host header (eg. http://host:80 - https//host:443-match-response-timematch response with specified response time in seconds (-mrt '< 1')-filter-response-timefilter response with specified response time in seconds (-frt '> 1')-exclude-headless-bodyenable excluding headless header from json output-follow-host-redirectsfollow redirects on the same host-response-size-to-readmax response size to read in bytes (default 2147483647)-response-size-to-savemax response size to save in bytes (default 2147483647)-include-response-base64include base64 encoded http request/response in JSON output (-json only)-include-response-headerinclude http response (headers) in JSON output (-json only)-no-screenshot-full-pagedisable saving full page screenshot-exclude-screenshot-bytesenable excluding screenshot bytes from json output-store-vision-recon-clusterinclude visual recon clusters (-ss and -sr only)