wfuzz -> ffuf

This commit is contained in:
Roman Hergenreder 2020-08-09 16:49:02 +02:00
parent 8dcb41a838
commit 59a10ddead
2 changed files with 4 additions and 2 deletions

@ -22,7 +22,7 @@ if ! [[ $status == 0 ]] ; then
fi fi
echo "[+] Scanning for open ports…" echo "[+] Scanning for open ports…"
PORTS=$(nmap -p- --min-rate=1000 -T4 ${IP_ADDRESS} | grep ^[0-9] | cut -d '/' -f 1 | tr '\n' ',' | sed s/,$//) PORTS=$(nmap -p- -T4 ${IP_ADDRESS} | grep ^[0-9] | cut -d '/' -f 1 | tr '\n' ',' | sed s/,$//)
if [ -z "${PORTS}" ]; then if [ -z "${PORTS}" ]; then
echo "[-] No open ports found" echo "[-] No open ports found"
exit exit

@ -23,4 +23,6 @@ charcount=$(curl -s -L $DOMAIN | wc -m)
echo "[+] Chars: ${charcount}" echo "[+] Chars: ${charcount}"
echo "[ ] Fuzzing…" echo "[ ] Fuzzing…"
wfuzz --hh ${charcount} --ip "${IP_ADDRESS}" --hc 400,500 -w /usr/share/wordlists/SecLists/Discovery/Web-Content/raft-large-words-lowercase.txt "http://FUZZ.${DOMAIN}" ffuf --fs ${charcount} --fc 400,500 \
-w /usr/share/wordlists/SecLists/Discovery/Web-Content/raft-large-words-lowercase.txt \
-u "http://${IP_ADDRESS}" -H "Host: FUZZ.${DOMAIN}"