https://cybertoolchain.io/tools/httpx-toolkit New releases and features in httpx-toolkit, tracked by The Cyber Toolchain. en Mon, 31 Aug 2026 05:18:15 GMT https://github.com/projectdiscovery/httpx/releases/tag/v1.11.0 https://github.com/projectdiscovery/httpx/releases/tag/v1.11.0 Mon, 31 Aug 2026 05:18:15 GMT httpx v1.11.0 adds `-kb` knowledge-base classification flag and `chrome`/`JA3` strategies for TLS impersonation • Adds `-kb` / `-knowledge-base` flag to make page-type classification opt-in rather than always-on. • Adds `chrome` and `JA3` strategies to the existing `-tls-impersonate` flag for more realistic TLS fingerprint spoofing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.10.0 https://github.com/projectdiscovery/httpx/releases/tag/v1.10.0 Thu, 09 Jul 2026 16:14:52 GMT httpx v1.10.0 adds duplicate custom request headers, IP-aware deduplication, and automatic HTTP_PROXY env var support. • Supports sending duplicate custom request headers in a single request (e.g., multiple `X-Forwarded-For` values). • Adds IP-aware deduplication to filter results that resolve to the same IP across different hostnames. • Automatically honors `HTTP_PROXY`/`HTTPS_PROXY` environment variables when `-proxy` flag is not explicitly set. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.9.0 https://github.com/projectdiscovery/httpx/releases/tag/v1.9.0 Mon, 09 Mar 2026 21:21:52 GMT httpx v1.9.0 adds page-type classification filtering, database output (MongoDB/PostgreSQL/MySQL), and Markdown reporting. • New `-fpt`/`-filter-page-type` flag classifies and filters responses by page type (e.g. login, captcha, parked) using a page, form, and form-field classifier. • Adds database output support — scan results can now be stored directly to MongoDB, PostgreSQL, or MySQL. • Adds Markdown output format for scan results. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.8.0 https://github.com/projectdiscovery/httpx/releases/tag/v1.8.0 Wed, 21 Jan 2026 12:42:49 GMT httpx v1.8.0 adds Burp XML input, secret-file auth, and passive CPE/WordPress detection • Adds Burp XML input mode (`-im` flag) so you can feed Burp Suite XML exports directly into httpx. • Adds secret file authentication support (`-sf` flag) for supplying credentials from a file without exposing them on the command line. • Adds passive CPE and WordPress detection, expanding fingerprinting coverage without extra active probes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.7.3 https://github.com/projectdiscovery/httpx/releases/tag/v1.7.3 Sat, 06 Dec 2025 19:01:28 GMT httpx v1.7.3 adds a new `host_ip` JSONL field exposing the dialed/used IP address. • Adds `host_ip` JSONL output field that returns the dialed/used IP address, separating it from the `host` field. Breaking changes: • The `host` JSON field now returns the hostname instead of the IP address — pipelines that relied on `host` for the resolved IP must switch to the new `host_ip` field. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.7.2 https://github.com/projectdiscovery/httpx/releases/tag/v1.7.2 Fri, 14 Nov 2025 18:45:55 GMT httpx v1.7.2 adds JS injection, dynamic filtering, custom fingerprints, network logging, and auto-referer support. • Adds JS injection support for probing JavaScript-rendered targets. • Introduces dynamic filtering to filter responses on-the-fly based on observed output. • Adds custom fingerprint support for user-defined technology detection rules. • Adds network logging to capture low-level network activity during probing. • Adds `--auto-referer` option to automatically set the Referer header to the target URL. • Adds shorthand flag for the websocket probe option on the command line. • Strips ANSI color codes from output files while preserving colors in console output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.7.0 https://github.com/projectdiscovery/httpx/releases/tag/v1.7.0 Thu, 24 Apr 2025 15:08:06 GMT httpx v1.7.0 adds -no-screenshot-full-page flag to disable full-page screenshot capture. • Adds `-no-screenshot-full-page` flag to disable full-page screenshots, limiting captures to the visible viewport only. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.6.10 https://github.com/projectdiscovery/httpx/releases/tag/v1.6.10 Mon, 27 Jan 2025 13:11:32 GMT httpx v1.6.10 adds lazy-loaded screenshots in HTML summary reports and a CPU bottleneck fix via fastdialer v0.3.0. • Adds lazy loading to screenshot images in HTML summary reports, improving browser performance when reviewing large scan results. • Updates fastdialer to v0.3.0, resolving a CPU bottleneck in the dialer dependency that can improve throughput at scale. Breaking changes: • The unused proxy flag has been removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.6.9 https://github.com/projectdiscovery/httpx/releases/tag/v1.6.9 Sun, 20 Oct 2024 22:35:38 GMT httpx v1.6.9 adds near-duplicate filtering, connection tracing, page-type classification, and smarter screenshot timing • Adds `-fd`/`-filter-duplicates` flag to deduplicate near-identical HTTP responses, retaining only the first unique response • Adds `-trace` flag to log the complete HTTP connection lifecycle for a target • Adds `-sid`/`-screenshot-idle` flag to configure idle wait time before capturing a screenshot when using `-screenshot` • Adds `-tid`/`-team-id` flag to upload scan results to a specific team in the ProjectDiscovery Cloud Platform dashboard • Adds initial automatic page-type classifier to categorize crawled pages • Supports providing PDCP authentication credentials via config file Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.6.8 https://github.com/projectdiscovery/httpx/releases/tag/v1.6.8 Wed, 14 Aug 2024 18:10:17 GMT httpx v1.6.8 adds SDK controls for stdout suppression, server lifecycle management, and chained stdout piping. • Adds option to disable stdout output when using httpx as an SDK library. • Adds `*Server.Stop` method to the SDK for explicit server lifecycle control. • Exposes `ChainInStdout` option for library consumers to chain httpx output into their own stdout pipelines. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.6.5 https://github.com/projectdiscovery/httpx/releases/tag/v1.6.5 Mon, 24 Jun 2024 14:33:46 GMT Adds `-favicon` flag to output favicon URL and MMH3 hash in JSON output • Adds `-favicon` CLI option to include `favicon_url` in JSON output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.6.4 https://github.com/projectdiscovery/httpx/releases/tag/v1.6.4 Sat, 22 Jun 2024 20:18:40 GMT httpx-toolkit v1.6.4 adds `-efqdn` for subdomain extraction and `-omit-body` to exclude response body from output • `-efqdn` extracts domain and subdomains from HTTP response headers and bodies • `-sr` (alias `-omit-body`) excludes the response body from the scan output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.6.1 https://github.com/projectdiscovery/httpx/releases/tag/v1.6.1 Sun, 19 May 2024 17:51:33 GMT Adds `-protocol` flag to force HTTP/1.1 connections • `-protocol` (`-pr`) flag for forcing `http11` protocol • JSONL output now includes `AAAA` DNS type for IPv6 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.6.0 https://github.com/projectdiscovery/httpx/releases/tag/v1.6.0 Wed, 06 Mar 2024 19:33:45 GMT Adds optional `tech`, `cdn`, and `cdn_name` fields to JSONL output; removes default `hash` field. • Adds `tech`, `cdn`, and `cdn_name` fields to JSONL output (optionally disabled with `-tech-detect=false`) • Removes default `hash` field from JSONL output (optionally enabled with `-hash md5,mmh3`) Breaking changes: • The `hash` field is no longer included in the default JSONL output; use `-hash md5,mmh3` to restore it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.3.8 https://github.com/projectdiscovery/httpx/releases/tag/v1.3.8 Mon, 15 Jan 2024 23:02:18 GMT httpx v1.3.8 adds `-exclude`, screenshot timeout, and headless options while removing old `-ec` flag • `-exclude` (alias `-e`) replaces `-ec` to exclude hosts matching 'cdn', 'private-ips', cidr, ip, or regex filters • -screenshot-timeout (alias `-st`) sets the screenshot capture timeout in seconds (default 10) • -headless-options (alias `-ho`) passes additional arguments to headless Chrome Breaking changes: • The old `-ec` option is removed; users must migrate to `-exclude` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.3.7 https://github.com/projectdiscovery/httpx/releases/tag/v1.3.7 Mon, 13 Nov 2023 07:26:10 GMT httpx v1.3.7 adds `-eph` flag to skip private IPs and SNI field in JSONL output • Adds `-eph` CLI flag to skip probing of private hosts/IPs during scanning • Adds `SNI` field to `jsonl` output format for HTTP responses Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.3.6 https://github.com/projectdiscovery/httpx/releases/tag/v1.3.6 Mon, 30 Oct 2023 15:23:39 GMT httpx v1.3.6 adds phash calculation for screenshots and visual recon clusters to JSONL output • Adds `phash` (perceptual hash) field to screenshot data for deduplication and similarity detection • Adds `visual_recon_clusters` array to JSONL (`-jsonl`) output to group visually similar hosts Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.3.5 https://github.com/projectdiscovery/httpx/releases/tag/v1.3.5 Thu, 14 Sep 2023 12:26:10 GMT httpx v1.3.5 adds response body preview, HSTS redirect handling, and JSONL header inclusion • Adds `-bp, -body-preview` flag to display the first N characters of the response body (default 100) • Adds `-rhsts, -respect-hsts` flag to respect HSTS response headers for redirect requests • Adds `-irh, -include-response-header` flag to include HTTP response headers in JSON output (`-json` only) • Adds `-ehb, -exclude-headless-body` and `-esb, -exclude-screenshot-bytes` flags to exclude headless body and screenshot bytes from JSONL output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.3.4 https://github.com/projectdiscovery/httpx/releases/tag/v1.3.4 Sat, 22 Jul 2023 21:36:35 GMT httpx v1.3.4 adds ML-based error page filtering (`-fep`), multi-format output (`-oa`), and custom config input (`-config`). • `-fep` flag enables ML-based error page detection and automatic filtering of responses. • `-oa` flag writes output results in all supported formats to a specified filename. • `-config string` flag allows specifying a custom path for the httpx configuration file. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.3.3 https://github.com/projectdiscovery/httpx/releases/tag/v1.3.3 Wed, 21 Jun 2023 09:51:58 GMT httpx-toolkit v1.3.3 adds experimental TLS ClientHello randomization via `-tls-impersonate` • Adds `-tls-impersonate` flag to enable experimental JA3 TLS ClientHello randomization Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.3.2 https://github.com/projectdiscovery/httpx/releases/tag/v1.3.2 Tue, 13 Jun 2023 07:49:59 GMT Adds `-no-stdin` CLI flag to disable standard input processing • Adds `-no-stdin` CLI option to bypass reading from standard input Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.3.0 https://github.com/projectdiscovery/httpx/releases/tag/v1.3.0 Thu, 27 Apr 2023 20:58:39 GMT httpx-toolkit v1.3.0 adds `-screenshot` and `-no-decode` flags plus a `stale.yml` config file • Adds the `-ss` (or `-screenshot`) flag to capture and save screenshots of target URLs. • Adds the `-no-decode` flag to skip decoding processes when processing inputs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.2.9 https://github.com/projectdiscovery/httpx/releases/tag/v1.2.9 Tue, 14 Mar 2023 15:30:18 GMT Adds self-update option and version check support via CLI • Adds `--self-update` flag to automatically update the cyber tooling binary Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.2.6 https://github.com/projectdiscovery/httpx/releases/tag/v1.2.6 Fri, 06 Jan 2023 13:39:19 GMT httpx-toolkit v1.2.6 adds -delay flag, ztls support, base64 response output, and CSV BOM handling • Adds `-delay` flag to control timing between HTTP requests (e.g., `200ms`, `1s`). • Adds `-ztls` option for TLS connections using ztls library. • Adds UTF-8 BOM to CSV output files. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.2.5 https://github.com/projectdiscovery/httpx/releases/tag/v1.2.5 Sat, 29 Oct 2022 12:11:01 GMT httpx v1.2.5 adds ASN input support, DSL filtering, -u flag, tlsx integration, OnResult lib API, and memory profiling • Added `-u` CLI option to probe a single or multiple targets directly. • Added `profile-mem` flag for in-flight memory profiling. • Added ASN input support, allowing ASN values (e.g., AS15133) as input. • Added advanced DSL-based match/filter support via the `-mdc` option and DSL variables derived from JSON output keys. • Added `tlsx` integration for TLS probing. • Added `OnResult` options support, enabling httpx to be used as a library with result callbacks. • Added stored response directory path information to JSON output. Breaking changes: • JSON fields now use underscores (`_`) instead of dashes (`-`), breaking any tooling or scripts relying on the previous kebab-case field names. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.2.4 https://github.com/projectdiscovery/httpx/releases/tag/v1.2.4 Sun, 31 Jul 2022 16:35:31 GMT Adds connection pooling for JAARM and exposes the process object for advanced customization • `Added support to expose the method process` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.2.3 https://github.com/projectdiscovery/httpx/releases/tag/v1.2.3 Wed, 13 Jul 2022 17:51:09 GMT httpx v1.2.3 adds -health-check diagnostic, multiple -extract-regex, and JSON regex matches. • Adds `-health-check` flag for self-diagnostics • Allows `-extract-regex` to be specified multiple times • Supports capturing regex matches in JSON output format Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.2.2 https://github.com/projectdiscovery/httpx/releases/tag/v1.2.2 Sun, 12 Jun 2022 05:01:41 GMT httpx v1.2.2 adds `-mcdn`, `-fcdn`, `-mrt`, `-frt`, `-sni` flags for CDN matching/filtering, response time filtering, and custom TLS SNI. • Adds `-mcdn` / `-match-cdn` flag to match hosts against specified CDN providers (oracle, google, azure, cloudflare, cloudfront, fastly, incapsula, akamai, sucuri, leaseweb). • Adds `-fcdn` / `-filter-cdn` flag to filter hosts based on specified CDN providers. • Adds `-mrt` / `-match-response-time` flag to match responses with a specified response time in seconds (e.g., `-mrt '< 1'`). • Adds `-frt` / `-filter-response-time` flag to filter responses based on a specified response time in seconds (e.g., `-frt '> 1'`). • Adds `-sni` / `-sni-name` flag to specify a custom TLS SNI name. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.1.5 https://github.com/projectdiscovery/httpx/releases/tag/v1.1.5 Mon, 10 Jan 2022 14:24:11 GMT httpx v1.1.5 adds favicon, word count, and line count matchers plus custom resolver support. • Adds `-ffc` (favicon hash filter) and `-mfc` (favicon hash matcher) flags to probe and filter responses by favicon hash • Adds `-fwc` (word count filter) and `-mwc` (word count matcher) flags for response body word counting • Adds `-flc` (line count filter) and `-mlc` (line count matcher) flags for response line counting • Adds `-r` flag to specify custom resolver/s for DNS resolution Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit https://github.com/projectdiscovery/httpx/releases/tag/v1.1.4 https://github.com/projectdiscovery/httpx/releases/tag/v1.1.4 Wed, 01 Dec 2021 07:42:02 GMT Adds `probe-all-ips` flag to scan all host IPs and debug flags for request/response dumping • `probe-all-ips` flag added to probe all the ips associated with same host • Debug/Request dump support via `debug`, `debug-req` and `debug-resp` flags Breaking changes: • The `tech` flag is now `td` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/httpx-toolkit