Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
httpdoom — Fast, multi-threaded HTTP attack surface analyzer that screenshots, inspects responses, and resolves domains across large host lists for rapid reconnaissance. | Kitploit
Tools/GitHubGitHub/filipi86/httpdoom
ReconnaissanceVulnerability AnalysisInformation GatheringWeb Security
GitHubfilipi86/httpdoom

httpdoom

Fast, multi-threaded HTTP attack surface analyzer that screenshots, inspects responses, and resolves domains across large host lists for rapid reconnaissance.

View Repository
2345 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

HttpDoom - HTTP Attack surface analyser

Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone.

WTFPL License GitHub code size in bytes

Installing

You must have dotnet SDK at version 6+:

root@kitploit:~
$ dotnet pack -c Release -o nupkg
$ dotnet tool install --global --add-source .\nupkg\ httpdoom.console

Uninstalling:

root@kitploit:~
$ dotnet tool uninstall -g httpdoom.console

How this works?

The description (--help) of the CLI is all you need to know:

root@kitploit:~
HttpDoom.Console
  Minimalist (and VERY fast) HTTP-based attack surface analysis tool

Usage:
  HttpDoom.Console [options]

Options:
  -H, --headers <headers>                               Headers to be used in every request
  -p, --ports <ports>                                   Default ports for testing (default is 80, 443).
  -w, --wordlist <wordlist> (REQUIRED)                  Path to the wordlist with targets to flyover against
  -o, --output <output>                                 Directory to save all the enumerated information
  -sR, --screenshot-resolution <screenshot-resolution>  If -S, the resolution of the screenshot (default is 1920x1080)
  -a, --allow-automatic-redirect                        If HttpDoom will follow HTTP redirects (default is true)
  -S, --screenshot                                      If HttpDoom will take screenshots from the website (default is false)
  -v, --verbose                                         If HttpDoom will print errors, only useful for debugging (default is false)
  -s, --show-details                                    If HttpDoom will print with details in stdout all the information got (default is false)
  -i, --ignore-tls                                      If HttpDoom will ignore invalid TLS for HTTPS requests (default is true)
  -r, --resolve                                         Resolve the domain enumerating the nameservers (default is false)
  -aL, --max-allowed-redirect <max-allowed-redirect>    Set the limit of automatic redirects if -a is true (default is 4)
  -T, --timeout <timeout>                               Set the timeout for HTTP responses (default is 4000)
  -t, --threads <threads>                               Set how many threads will HttpDoom utilize in runtime (default is 4)
  --version                                             Show version information
  -?, -h, --help                                        Show help and usage information

Licenses

HttpDoom project icons made by Freepik from Flaticon. The source code is licensed under WTFPL.

Download Tool