httpgrep : Scans HTTP Servers To Find Given Strings In URIs

httpgrep is a python tool which scans for HTTP servers and finds given strings in HTTP body and HTTP response headers.

$ httpgrep -H
–== [ by nullsecurity.net ] ==–

Usage

httpgrep -h -s [opts] |

Options

h < hosts|file> – single host or host-range/cidr-range or file containing
hosts, e.g.: foobar.net, 192.168.0.1-192.168.0.254,
192.168.0.0/24, /tmp/hosts.txt
-p<port> – port to connect to (default: 80)
-t – use TLS/SSL to connect to service
-u<URI> – URI to search given strings in, e.g.: /foobar/, /foo.html
(default /)
-s <string|file>- a single string or multile strings in a file to find in
given URIs and HTTP response headers, e.g.: ‘tomcat 8’,
‘/tmp/igot0daysforthese.txt’
-S<where> – search strings in given places (default: headers,body)
-b<bytes> – num bytes to read from response. offset == response[0].
(default: 64)
-x<threads> – num threads for concurrent checks (default: 80)
c<seconds> – num seconds for socket timeout (default: 2.0)
i – use case-insensitive search
-r – perform reverse dns lookup for given IPv4 addresses
-l <file> – log urls and found strings to file
-v – verbose mode (default: quiet)

Misc

-H – print help
-V – print version information

Also Read – PEASS – Privilege Escalation Awesome Scripts SUITE

Notes

  • quick’n’dirty code
  • httpgrep is already packaged and available for BlackArch Linux
  • My master-branches are always stable; dev-branches are created for current work.
  • All of my public stuff you find are officially announced and published via nullsecurity.net.

Disclaimer

We hereby emphasize, that the hacking related stuff found on nullsecurity.net are only for education purposes. We are not responsible for any damages. You are responsible for your own actions.

Credit: noptrix

R K

Recent Posts

Understanding the Model Context Protocol (MCP) and How It Works

Introduction to the Model Context Protocol (MCP) The Model Context Protocol (MCP) is an open…

5 days ago

The file Command – Quickly Identify File Contents in Linux

While file extensions in Linux are optional and often misleading, the file command helps decode what a…

6 days ago

How to Use the touch Command in Linux

The touch command is one of the quickest ways to create new empty files or update timestamps…

6 days ago

How to Search Files and Folders in Linux Using the find Command

Handling large numbers of files is routine for Linux users, and that’s where the find command shines.…

6 days ago

How to Move and Rename Files in Linux with the mv Command

Managing files and directories is foundational for Linux workflows, and the mv (“move”) command makes it easy…

6 days ago

How to Create Directories in Linux with the mkdir Command

Creating directories is one of the earliest skills you'll use on a Linux system. The mkdir (make…

6 days ago