XowiaScan
← All tools

HTTP ProbeMaster

Recon & Discovery

Bulk-probe a list of hosts in parallel — status, redirects, title, server, IP and timing — then filter by status class.

What is HTTP ProbeMaster?

HTTP ProbeMaster is built for scale. Feed it a list of hosts or URLs and it probes them concurrently, reporting status, the final URL after redirects, page title, the Server/X-Powered-By banner, resolved IP and response time — so you instantly know which targets are worth your attention.

It is the natural follow-up to subdomain enumeration: turn a big list of maybe-live hostnames into a focused shortlist of confirmed, interesting endpoints — and surface the spicy ones (401/403, 5xx) for manual review.

What it does

  • Parallel probing — up to 50 targets at once; bare hosts tried on both http & https.
  • Rich per-host data — status, redirect chain & final URL, title, resolved IP and response time.
  • Built-in tech fingerprint — detects the stack (WordPress, Laravel, Django, ASP.NET, nginx, Cloudflare…) from headers, cookies and body, with no extra requests.
  • Notable-finding flags — surfaces open directory listings, phpinfo(), Swagger/Redoc API docs, error/stack traces and default pages.
  • Status-class & "notable" filtering — one click to isolate 2xx, 3xx, 401/403, 5xx, down, or just the spicy hosts.
  • Export & pivot — copy/CSV the results and send live URLs to the Vulnerability Scanner / Tech Fingerprint.
  • SSRF-safe — every target is validated; internal/metadata addresses are blocked; bodies capped at 256 KB.

Where it fits in your workflow

  • Filter a large subdomain list down to live, interesting hosts in seconds.
  • Spot logins, dashboards, APIs and admin panels by title/status before manual review.
  • Isolate 401/403 endpoints to test for auth bypass and default credentials.
Use HTTP ProbeMaster

Run it from your dashboard.

Create free account Sign in Use via API

At a glance

CategoryRecon & Discovery
RunsServer-side
Token cost 5 / run (free tier)
AccessPro
Status● Live

Frequently asked questions

How many hosts can I probe at once?

Up to 50 targets per run, fetched in parallel so it stays fast even when some hosts are slow or down. Per-tier rate limits apply.

Does it fetch the full page?

No — it reads headers and only the first 256 KB of the body (enough for the title), then stops, to stay quick and light.

Explore more tools →