Skip to content

Instantly share code, notes, and snippets.

@bl4de
Created June 16, 2019 09:12
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bl4de/e72f24b265573d85ec0010a8ac53e515 to your computer and use it in GitHub Desktop.
Save bl4de/e72f24b265573d85ec0010a8ac53e515 to your computer and use it in GitHub Desktop.
wfuzz against example.com
bl4de:~ $ wfuzz -c --hc 404 -w ~/hacking/dictionaries/starter.txt http://example.com/FUZZ
Warning: Pycurl is not compiled against Openssl. Wfuzz might not work correctly when fuzzing SSL sites. Check Wfuzz's documentation for more information.
********************************************************
* Wfuzz 2.3.4 - The Web Fuzzer *
********************************************************
Target: http://example.com/FUZZ
Total requests: 71935
==================================================================
ID Response Lines Word Chars Payload
==================================================================
000043: C=403 11 L 26 W 345 Ch "includes/stream_wrappers.inc"
000252: C=403 11 L 26 W 345 Ch "includes/password.inc"
000856: C=403 11 L 26 W 345 Ch "includes/pager.inc"
001678: C=403 11 L 26 W 345 Ch "includes/update.inc"
001810: C=403 11 L 26 W 345 Ch ".ssh/know_hosts~"
001861: C=403 11 L 26 W 345 Ch "b/a/results~"
001915: C=200 50 L 120 W 1270 Ch "index.html/"
002597: C=500 11 L 30 W 369 Ch "%ff/"
003507: C=403 11 L 26 W 345 Ch "includes/mail.inc"
003668: C=404 50 L 120 W 1270 Ch "en/specials/existingcustomers.html"^C
Finishing pending requests...
bl4de:~ $
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment