Bug: httpx integration broken (wrong binary + wrong CLI flag)
Author: keysersoze0Created Sep 27, 2025Updated Aug 9, 2026
There are two separate issues with the current httpx integration:
Wrong binary invoked
- HexStrike creates a small
httpxstub in its virtualenv (hexstrike-env/bin/httpx) which actually runs the Pythonhttpxlibrary (frompython3-httpxpackage). - This binary does not support flags like
-land is not the intended ProjectDiscovery httpx. - As a result, initial runs failed with: Error: No such option: -l
- Workaround: I replaced the virtualenv’s
httpxwith a wrapper that forwards to the real PD httpx binary from$HOME/go/bin/httpx.
- HexStrike creates a small
Wrong CLI flag used
- Even after using the correct PD httpx, HexStrike calls: httpx -l -t 50 -probe -tech-detect ...
- But
-lexpects a file containing hosts, not a single domain string. - Result: [FTL] No input provided: no files found
- Correct usage for single domains is
httpx -u <host>.
Proposed fixes
- Ensure that HexStrike uses the proper ProjectDiscovery
httpxbinary instead of the Python httpx stub in the venv. - Update tool definitions so that:
-l/--listis only used with files.- Single domain inputs use
-u.
Environment
- HexStrike version: v6.0 (commit 33267047667b9accfbf0fdac1c1c7ff12f3a5512)
- OS: Kali Linux (VM)
- httpx version: v1.7.1 (ProjectDiscovery)
Workaround
- I created a wrapper script that:
- Replaces the venv
httpxstub with the PD httpx binary. - If
-lis used with a non-file, it writes the value to a temp file and passes that to httpx.
- Replaces the venv
- This works, but it’s a hack.
I’m happy to share logs and the wrapper script if useful.
Source: 0x4m4/hexstrike-ai