HackBlue

Tools · Attack surface inventory · 24 / 27

httpx: the title field is not the body

The title on an httpx line is the title text stored for that response. It is not the body, and it is not the status code.

11 min read · practice only with authorization

The title is one stored string

An httpx line can include a title taken from that response. The string is the title the probe stored. It is not the rest of the page, and it is not a sentence you watched a person write in the body.

A title that says Lab status does not mean the body says the service is healthy. The word sits in the title field only.

The body is a different save

If you did not save the body, the body is not in the note. Do not paste the title into a body field. A status code on the same line is the code for that response, not a second spelling of the title.

A second URL is a second line. Its title does not describe this URL.

Lines that stay separate

File the URL, the status, and the title, each labeled. If the body was not saved, write that. Do not file a health verdict because the title sounds calm.

Worked case: a title filed as the page text

A lab probe of https://status.lab.example shows status 200 and title Lab status. The body was not saved. A draft says the page text is Lab status and the service is healthy because of that title.

The note quotes title Lab status and status 200. Body: not saved. The title is not the page text, and it is not a health verdict. The code 200 stays the status.

Snippet
url: https://status.lab.example
status: 200
title: Lab status
body: not saved
write: title and status as separate fields
not: the page text, and not healthy

Diagram

The title field and the rest of the response

The title is one string the probe stored.

Title

Is. The title text on this line

Lab status. Those words, in that field

Is not. The body or a health verdict

Other fields

Status. The code, such as 200

Body. Only if you saved it

Missing body. Say it was not saved

Check yourself

1. A line shows title Lab status and status 200. What is Lab status?

2. The body was not saved. What do you write in the body slot?

3. A second URL has a different title. What does that title describe?