wfuzz: add page (#9896)

pull/23/head
c0rvu5 2023-05-02 20:21:38 -05:00 committed by GitHub
parent f7fa518bca
commit e33d47791d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 0 deletions

20
pages/common/wfuzz.md Normal file
View File

@ -0,0 +1,20 @@
# wfuzz
> A web application bruteforcer.
> More information: <https://wfuzz.readthedocs.io/en/latest/user/basicusage.html>.
- Directory and file bruteforce using the specified wordlist and also proxying the traffic:
`wfuzz -w {{path/to/file}} -p {{127.0.0.1:8080}} {{http://example.com/FUZZ}}`
- Save the results to a file:
`wfuzz -w {{path/to/file}} -f {{filename}} {{http://example.com/FUZZ}}`
- Show colorized output while only showing the declared response codes in the output:
`wfuzz -c -w {{path/to/file}} --sc {{200,301,302}} {{http://example.com/FUZZ}}`
- Use a custom header to fuzz subdomains while hiding specific response codes and word counts. Increase the threads to 100 and include the target ip/domain:
`wfuzz -w {{path/to/file}} -H {{"Host: FUZZ.example.com"}} --hc {{301}} --hw {{222}} -t {{100}} {{example.com}}`