Skip to content

fingerprintx

Standalone service discovery on open ports

Description

fingerprintx is a standalone utility for service fingerprinting on open ports. Unlike Nmap's service detection, it's designed as a lightweight, pipe-friendly tool that integrates well with other bug bounty CLI tools. It identifies services like HTTP, SSH, MySQL, RDP, and many more.

Installation

BASH
go install github.com/praetorian-inc/fingerprintx/cmd/fingerprintx@latest

Basic Usage

BASH
# Fingerprint a single host:port
echo "target.com:443" | fingerprintx

# From file
fingerprintx -l targets.txt

# Multiple ports
echo -e "target.com:80\ntarget.com:443\ntarget.com:8080" | fingerprintx

Advanced Usage

BASH
# JSON output
echo "target.com:443" | fingerprintx --json

# Custom timeout
echo "target.com:443" | fingerprintx --timeout 10

# Concurrent workers
fingerprintx -l targets.txt -w 50

# UDP service detection
echo "target.com:53" | fingerprintx --udp

Common Workflows

BASH
# Port scan → service fingerprint pipeline
naabu -host target.com -silent | fingerprintx --json

# Identify web vs non-web services
naabu -host target.com -top-ports 1000 -silent | fingerprintx | grep -v "http"

# Full recon chain
subfinder -d target.com -silent | naabu -silent | fingerprintx --json > services.json