Features

📌 Overview

Hx-H.A.W.K.S is a high-performance CLI and API-based tool built for security researchers, red teamers, and bug bounty hunters. It scans thousands of URLs, searches for specified keywords in the HTTP responses, and detects possible vulnerability footprints. All with color-coded terminal output, powerful concurrency options, and customizable formats.

⚙️ Features

• Keyword-based response scanning (e.g., `admin`, `password`, `flag{`, etc.)
• Super-fast concurrency with goroutines (unlimited URLs)
• Multiple output formats: plain, JSON, full reports
• Color-coded output for quick terminal scanning
• Smart filters, retries, timeouts, custom headers
• Built-in API server (SSE + RESTful) for real-time results
• ✅ Keyword-based response scanning (e.g., `admin`, `password`, `flag{`, etc.)
• ⚡ Super-fast concurrency with goroutines (unlimited URLs)
• 🎯 Multiple output formats: plain, JSON, full reports
• 🌈 Color-coded output for quick terminal scanning
• 🧠 Smart filters, retries, timeouts, custom headers
• 🌐 Built-in API server (SSE + RESTful) for real-time results
• 🛠️ Ready for integration into future tools like Fruttry, Hx-Bunny, or custom dashboards

Installation

Make sure you have Go installed. Then install Hx-H.A.W.K.S using:

📦 Installation

Go-Lang Installer (Self-Install)

Manual Installation

CLI Usage

🧪 CLI Usage

Key Flags

🔧 Key Flags

Example Use Cases

📤 Output Formats

-o (Plain Vulnerable URLs)

-o-json (Matched Results)

-o-all-json (Full Metadata)

🌐 API Mode

Start the server with your desired scan parameters:

📡 API Endpoints

🚀 Example Use Cases

# Basic keyword scan
hx-hawks -f urls.txt --ck "admin,password"

# Save matched responses
hx-hawks -f urls.txt -o-response match.txt --ck "error,flag{"

# API mode on port 9000
hx-hawks --api -f urls.txt --ck "sql,injection" --port 9000

Key Features

✨ Features

• Scan IP & URLs Lists
• Organized Output by Status Code (2xx, 3xx, 4xx...)
• Detailed Logs (exist, invalid, log)
• Color-coded CLI (Terminal Output)
• CORS Vulnerability Integration
• Cross-Platform (Windows, Linux, macOS)
• 🔍 Scan IP & URLs Lists: Quickly scans any list of IPs or URLs and fetches their HTTP status codes.
• 🗂️ Organized Output: Automatically creates folder structures based on HTTP status codes (1xx, 2xx, 3xx, 4xx, 5xx).
• 📁 File-Based Response Storage: Saves each response into categorized files, such as `200.txt`.
• ✅ Detailed Logs: Cleanly tracks results in `ip_exist.txt`, `ip_invalid.txt`, and a comprehensive `log.txt`.
• 🎨 Enhanced CLI: Color-coded status codes for better readability.
• 🌐 CORS Integration: Detects and logs CORS headers like `Access-Control-Allow-Origin`.
• 💻 Cross-Platform: Works flawlessly on Windows, Linux, and macOS.

Installation

🚀 Installation

Make sure you have Go 1.19+ installed. Then install HyperScanner using:

Usage

🛠️ Usage

Prepare a text file (`ips.txt`) containing a list of IPs or URLs, one per line. Run HyperScanner with:

You can also specify an output directory:

CLI Options

📋 CLI Options

🔮 Future Plans

• 🎯 Add terminal icons and detailed status code categories.
• 🖥️ Complete and release the GUI version.
• ⚡ Optimize performance for extremely large input lists.
• 🌍 Add proxy and multi-threaded support.

Features

• 🔍Scan IP & URLs Lists: Quickly scans any list of IPs or URLs and fetches their HTTP status codes.
• 🗂️Organized Output: Automatically creates folder structures based on HTTP status codes (1xx, 2xx, 3xx, 4xx, 5xx).
• 📁File-Based Response Storage: Saves each response into categorized files, such as `200.txt`.
• ✅Detailed Logs: Cleanly tracks results in `ip_exist.txt`, `ip_invalid.txt`, and a comprehensive `log.txt`.
• 🎨Enhanced CLI: Color-coded status codes for better readability.
• 🌐CORS Integration: Detects and logs CORS headers like `Access-Control-Allow-Origin`.
• 💻Cross-Platform: Works flawlessly on Windows, Linux, and macOS.

Installation

Make sure you have Go 1.19+ installed. Then install HyperScanner using:

Usage

Prepare a text file (`ips.txt`) containing a list of IPs or URLs, one per line. Run HyperScanner with:

CLI Options

Output Structure

HyperScanner organizes the output beautifully:

output/
├── 1xx/
│   └── 100.txt
├── 2xx/
│   ├── 200.txt
│   └── ...
├── 3xx/
│   └── 301.txt
├── 4xx/
│   └── 404.txt
├── 5xx/
│   └── 500.txt
├── ip_exist.txt
├── ip_invalid.txt
├── log.txt
└── cors_detected.txt

Why Use It?

🙋‍♂️ Who Is It For?

• 🧑‍💻 Web Developers — Analyze and test URL behavior.
• 🐞 Bug Bounty Hunters — Generate fuzzable URL vectors fast.
• 🛡 Security Professionals — Inject payloads into endpoints for XSS/IDOR testing.
• 🧪 QA Engineers — Automate URL manipulation for test coverage.
• 🧰 Red Teamers & Recon Experts — Enhance endpoint discovery and testing.

🌟 Features

• Generate recursive URL variations
• Append payloads from CLI or file
• Target both query strings and path segments
• Deduplicate, output to file, and integrate in scripts
• Ideal for recon, fuzzing, XSS testing, path traversal, etc.
• Ideal for recon, fuzzing, XSS, IDOR, Path Traversal

Installation

Make sure you have Go installed. Then install URLShort using:

⚡️ Installation

Global Install via Go (Recommended)

Ensure your $GOPATH/bin is in your system PATH:

Usage

🚀 Usage

CLI Flags

🔧 Command-line Flags

Example Use Case

🧪 Example Use Case

📤 Sample Output

Given an input like https://example.com/page?user=admin and a payload, the output will include:

https://example.com/
https://example.com/page?
https://example.com/page?user=
https://example.com/page?user=admin<script>alert(1)</script>
... and many more variations