Description
fingerprintx is a standalone utility for service fingerprinting on open ports. Unlike Nmap's service detection, it's designed as a lightweight, pipe-friendly tool that integrates well with other bug bounty CLI tools. It identifies services like HTTP, SSH, MySQL, RDP, and many more.
Installation
BASH
go install github.com/praetorian-inc/fingerprintx/cmd/fingerprintx@latest
Basic Usage
BASH
# Fingerprint a single host:port
echo "target.com:443" | fingerprintx
# From file
fingerprintx -l targets.txt
# Multiple ports
echo -e "target.com:80\ntarget.com:443\ntarget.com:8080" | fingerprintx
Advanced Usage
BASH
# JSON output
echo "target.com:443" | fingerprintx --json
# Custom timeout
echo "target.com:443" | fingerprintx --timeout 10
# Concurrent workers
fingerprintx -l targets.txt -w 50
# UDP service detection
echo "target.com:53" | fingerprintx --udp
Common Workflows
BASH
# Port scan → service fingerprint pipeline
naabu -host target.com -silent | fingerprintx --json
# Identify web vs non-web services
naabu -host target.com -top-ports 1000 -silent | fingerprintx | grep -v "http"
# Full recon chain
subfinder -d target.com -silent | naabu -silent | fingerprintx --json > services.json