Toolset: HttpGo – A Web Fingerprinting Tool Supporting Multithreading, HTTP Proxies, Batch Recognition, Result Saving, and Screenshot Display

Disclaimer: For authorized testing only. The author is not responsible for any consequences arising from user abuse. Please comply with laws and regulations! [Get the tool at the end of the article]

🐉 Tool Introduction

HttpGo is a web fingerprinting tool that supports multithreading, HTTP proxies, batch recognition, result saving, and screenshot display. Users can add their own fingerprints.

🚀 Usage Instructions

Help Documentation

[shym]% go run main.go -h

 _       _     _
| |__   | |_  | |_   _ __     __ _    ___
| '_ \  | __| | __| | '_ \   / _' |  / _ \
| | | | | |_  | |_  | |_) | | (_| | | (_) |
|_| |_|  \__|  \__| | .__/   \__, |  \___/
                    |_|      |___/

Usage of :
  -check
        Check the compliance of newly added fingerprint rules
  -file string
        Requested file
  -fingers string
        Fingerprint file (default "fingers.json")
  -hash string
        Calculate hash
  -output string
        Output result folder name, no suffix needed (includes csv, json, html files) (default "output")
  -proxy string
        Add proxy
  -server string
        Specify the folder name for remote access to output, start web service with a random password for added security
  -thead int
        Number of concurrent threads (default 20)
  -timeout duration
        Timeout duration (default 8ns)
  -url string
        Requested URL

Single URL Recognition

Batch URL Recognition

-file Specify the batch URL file, one URL per line

-output Specify the output folder name, no suffix needed, csv, json, html files will be generated in the specified folder

-thead Specify the number of concurrent threads, defaults to 20 if not set

Recognition completion will generate the corresponding result.csv file in the specified -output path

It will also generate result.html web file and fingerprint information result.json file

To view the result.html page, you can use the -server parameter to start a web service, automatically generating an encrypted web service

After entering the account password for authentication, you can directly access the root directory to download the csv file, making it convenient for server deployment to download csv results

Alternatively, you can start a web service using python3 -m http.server 3333 in the html result path

Access target.html

Click the corresponding blue button to view the corresponding fingerprint information, such as clicking [Sudhi WebPlus Pro – Personalized Portal Cluster Platform]

Fingerprint Rules

title="xxxxx" Matches the content of the title
header="Server: bbbb" Matches the response header Server content
icon_hash="1111111" Matches the hash content of favico.ico icon
body="cccc" Matches the content in the body
cert="dddd" Matches the content in the certificate
body="xxxx" && header!="ccc" Matches content that includes xxxx in the body and does not include ccc in the header

= indicates inclusion, meaning it can match if included, != indicates exclusion, meaning it can match if not included.

Supports logical operators && and || and () such as

body="aaaa" && (title="123" || title="456")

Remember to escape double quotes “. If the specific content being searched contains “, add \ before “, for example,

body="<link href=\"/jcms/" Matches whether the body contains <link href="/jcms/

{
  "name": "jcms or fcms",
  "keyword": "body="<link href=\"/jcms/" || body="<link href=\"/fcms/" || body="jcms/Login.do" || body="fcms/Login.do"
}

If the specific content being searched contains & or |, you need to use \ before them, for example, body=”1234\&\&1111″ matches whether the body contains 1234&&1111

🚨 Download

I shared “HttpGo” via Quark Cloud Disk, click the link to save. Open the “Quark APP” to watch videos online without downloading, enjoy 5x speed in original quality, and support TV screen casting.Link:https://pan.quark.cn/s/e69b2c7e170e