Cracken + httpx
Cracken runs httpx across a list of hosts to find which ones actually answer HTTP. It reads back the status codes, page titles, and detected technologies that decide where it goes next.
Connecting httpx
- Connect with
No credentials — runs on your own Tentacle
- Cadence
Runs on demand — installed on a Tentacle, then invoked during an operation (the agent can install and uninstall it mid-run)
- Requires
A Tentacle running Linux or macOS. Free licence, nothing to purchase and no credentials to supply.
What Cracken gets from httpx
Status code, content length and content type
Redirect location
Page title and a body preview (first N characters)
Response body hash — md5, mmh3, simhash, sha1, sha256 or sha512
Web server name and detected technologies, from the wappalyzer dataset or a custom fingerprint file
Host IP, CNAME, ASN information, and the CDN or WAF in use
favicon mmh3 hash and JARM fingerprint
Response time, response body line count and word count
HTTP request method, websocket support and probe status
Domains and subdomains extracted out of the response body and headers
Screenshots via headless Chrome; output as JSONL or CSV, with raw responses optionally stored to disk
What httpx does not do
httpx probes and fingerprints; its whole flag surface is probes, matchers and filters, with no check that tests or exploits anything it identifies. Technology labelling is only as good as the wappalyzer dataset it ships with — anything that dataset does not recognise comes back unlabelled unless you supply a custom fingerprint file with -cff.
How Cracken uses httpx
- 01
Install httpx on a Tentacle
- 02
Feed it the hosts the operation already found
- 03
Read the responses and pick targets
- 04
Confirm the Tentacle is ready
Frequently asked questions
Is httpx doing anything intrusive to my hosts?
httpx sends ordinary HTTP and HTTPS requests to see whether a host responds and fingerprint it, attempting no exploitation.
Do I have to write the httpx flags myself?
No; Cracken's agent writes the full httpx command, runs it in a shell on the Tentacle, and reads the output back.
“I've been pretty impressed with how CrackenAGI is able to do its vulnerability discovery, enumeration, reconnaissance, as well as eventually being able to actually execute different exploitation paths.”
More integrations
Attack with real httpx context.
See how Cracken runs httpx on a Tentacle you host, and proves what it finds end to end.