https support for subdomain fuzzing
This commit is contained in:
		
							parent
							
								
									018eac82dd
								
							
						
					
					
						commit
						fcb562e6df
					
				| @ -6,6 +6,13 @@ if [ $# -lt 1 ]; then | ||||
| fi | ||||
| 
 | ||||
| DOMAIN=$1 | ||||
| PROTOCOL="http" | ||||
| 
 | ||||
| if [[ $DOMAIN = "https://*" ]]; then | ||||
|    PROTOCOL="https" | ||||
| fi | ||||
| 
 | ||||
| DOMAIN=$(echo $DOMAIN | sed -e 's|^[^/]*//||' -e 's|/.*$||') | ||||
| 
 | ||||
| echo "[ ] Resolving IP-Address…" | ||||
| output=$(resolveip $DOMAIN 2>&1) | ||||
| @ -19,10 +26,10 @@ IP_ADDRESS=$(echo $output | head -n 1 |  awk '{print $NF}') | ||||
| echo "[+] IP-Address: ${IP_ADDRESS}" | ||||
| 
 | ||||
| echo "[ ] Retrieving default site…" | ||||
| charcount=$(curl -s -L $DOMAIN | wc -m) | ||||
| charcount=$(curl -s -L "${PROTOCOL}://${DOMAIN}" -k | wc -m) | ||||
| echo "[+] Chars: ${charcount}" | ||||
| echo "[ ] Fuzzing…" | ||||
| 
 | ||||
| ffuf --fs ${charcount} --fc 400,500 \ | ||||
|   -w /usr/share/wordlists/SecLists/Discovery/Web-Content/raft-large-words-lowercase.txt \ | ||||
|   -u "http://${IP_ADDRESS}" -H "Host: FUZZ.${DOMAIN}" | ||||
|   -u "${PROTOCOL}://${IP_ADDRESS}" -H "Host: FUZZ.${DOMAIN}" | ||||
|  | ||||
		Loading…
	
		Reference in New Issue
	
	Block a user