Browse Source

subdomain fuzz update

Roman Hergenreder 3 years ago
parent
commit
e0e5ce3228
1 changed files with 4 additions and 3 deletions
  1. 4 3
      subdomainFuzz.sh

+ 4 - 3
subdomainFuzz.sh

@@ -26,10 +26,11 @@ IP_ADDRESS=$(echo $output | head -n 1 |  awk '{print $NF}')
 echo "[+] IP-Address: ${IP_ADDRESS}"
 
 echo "[ ] Retrieving default site…"
-charcount=$(curl -s -L "${PROTOCOL}://${DOMAIN}" -k | wc -m)
-echo "[+] Chars: ${charcount}"
+charcountDomain=$(curl -s -L "${PROTOCOL}://${DOMAIN}" -k | wc -m)
+charcountIpAddress=$(curl -s -L "${PROTOCOL}://${IP_ADDRESS}" -k | wc -m)
+echo "[+] Chars: ${charcountDomain} and ${charcountIpAddress}"
 echo "[ ] Fuzzing…"
 
-ffuf --fs ${charcount} --fc 400,500 \
+ffuf --fs ${charcountDomain},${charcountIpAddress} --fc 400,500 --mc all \
   -w /usr/share/wordlists/SecLists/Discovery/Web-Content/raft-large-words-lowercase.txt \
   -u "${PROTOCOL}://${IP_ADDRESS}" -H "Host: FUZZ.${DOMAIN}"