Wfuzz 笔记

Wfuzz 用于发现隐藏的的内容，个人认为模糊测试时渗透测试三大核心之一。

示例

• Fuzz 路径或文件

wfuzz -w wordlist/general/common.txt http://testphp.vulnweb.com/FUZZ
wfuzz -w wordlist/general/common.txt http://testphp.vulnweb.com/FUZZ.php

• Fuzz Url 参数

wfuzz -z range,0-10 --hl 97 http://testphp.vulnweb.com/listproducts.php?cat=FUZZ

• Fuzz POST 请求

wfuzz -z file,wordlist/others/common_pass.txt -d "uname=FUZZ&pass=FUZZ" --hc 302 http://testphp.vulnweb.com/userinfo.php

• 设置 Cookie

wfuzz -z file,wordlist/general/common.txt -b cookie=value1 -bcookie2=value2 http://testphp.vulnweb.com/FUZZ

• 设置请求头

wfuzz -z file,wordlist/general/common.txt -H "myheader:headervalue" -H "myheader2: headervalue2" http://testphp.vulnweb.com/FUZZ

• Fuzz Cookie

wfuzz -z file,wordlist/general/common.txt -b cookie=FUZZ http://testphp.vulnweb.com/

• Fuzz 请求头

wfuzz -z file,wordlist/general/common.txt -H "myheader:FUZZ" -H "myheader2: headervalue2" http://testphp.vulnweb.com/

• Fuzz 请求方法

wfuzz -z list,GET-HEAD-POST-TRACE-OPTIONS -X FUZZ http://testphp.vulnweb.com/

详情

https://wfuzz.readthedocs.io/en/latest/user/basicusage.html